{"id":262454,"date":"2025-12-06T15:46:26","date_gmt":"2025-12-06T15:46:26","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/bearmor-security\/"},"modified":"2026-05-16T18:05:26","modified_gmt":"2026-05-16T18:05:26","slug":"bearmor-security","status":"publish","type":"plugin","link":"https:\/\/vi.wordpress.org\/plugins\/bearmor-security\/","author":23404978,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.2","stable_tag":"1.0.2","tested":"6.9.4","requires":"5.8","requires_php":"7.4","requires_plugins":null,"header_name":"Bearmor Security","header_author":"Bearmor Security Team","header_description":"Lightweight, robust WordPress security plugin for SMBs.","assets_banners_color":"252044","last_updated":"2026-05-16 18:05:26","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/bearmor.eu","header_author_uri":"https:\/\/bearmor.eu","rating":0,"author_block_rating":0,"active_installs":40,"downloads":1296,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","changelog"],"tags":{"0.9.10":{"tag":"0.9.10","author":"andeirz","date":"2025-12-08 18:03:14"},"0.9.11":{"tag":"0.9.11","author":"andeirz","date":"2025-12-10 19:47:17"},"0.9.12":{"tag":"0.9.12","author":"andeirz","date":"2025-12-10 20:09:36"},"0.9.13":{"tag":"0.9.13","author":"andeirz","date":"2025-12-16 19:02:11"},"0.9.14":{"tag":"0.9.14","author":"andeirz","date":"2025-12-17 19:01:34"},"0.9.15":{"tag":"0.9.15","author":"andeirz","date":"2026-01-24 11:27:07"},"0.9.16":{"tag":"0.9.16","author":"andeirz","date":"2026-02-28 15:35:49"},"0.9.3":{"tag":"0.9.3","author":"andeirz","date":"2025-12-06 15:45:18"},"0.9.4":{"tag":"0.9.4","author":"andeirz","date":"2025-12-06 17:56:26"},"0.9.5":{"tag":"0.9.5","author":"andeirz","date":"2025-12-06 18:03:09"},"0.9.6":{"tag":"0.9.6","author":"andeirz","date":"2025-12-06 19:21:33"},"0.9.7":{"tag":"0.9.7","author":"andeirz","date":"2025-12-06 20:45:55"},"0.9.8":{"tag":"0.9.8","author":"andeirz","date":"2025-12-07 19:40:02"},"0.9.9":{"tag":"0.9.9","author":"andeirz","date":"2025-12-08 17:54:56"},"1.0.0":{"tag":"1.0.0","author":"andeirz","date":"2026-05-02 19:41:12"},"1.0.1":{"tag":"1.0.1","author":"andeirz","date":"2026-05-08 18:20:15"},"1.0.2":{"tag":"1.0.2","author":"andeirz","date":"2026-05-16 18:05:26"}},"upgrade_notice":[],"ratings":[],"assets_icons":{"icon-256x256.png":{"filename":"icon-256x256.png","revision":3413061,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.jpg":{"filename":"banner-1544x500.jpg","revision":3413061,"resolution":"1544x500","location":"assets","locale":"","width":1024,"height":329},"banner-772x250.jpg":{"filename":"banner-772x250.jpg","revision":3413075,"resolution":"772x250","location":"assets","locale":"","width":1024,"height":329}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["0.9.10","0.9.11","0.9.12","0.9.13","0.9.14","0.9.15","0.9.16","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8","0.9.9","1.0.0","1.0.1","1.0.2"],"block_files":[],"assets_screenshots":{"screenshot-1.jpg":{"filename":"screenshot-1.jpg","revision":3521086,"resolution":"1","location":"assets","locale":"","width":1526,"height":1032},"screenshot-1.png":{"filename":"screenshot-1.png","revision":3521085,"resolution":"1","location":"assets","locale":"","width":1526,"height":1032},"screenshot-2.jpg":{"filename":"screenshot-2.jpg","revision":3413061,"resolution":"2","location":"assets","locale":"","width":1526,"height":1032},"screenshot-3.jpg":{"filename":"screenshot-3.jpg","revision":3413061,"resolution":"3","location":"assets","locale":"","width":1526,"height":1032},"screenshot-4.jpg":{"filename":"screenshot-4.jpg","revision":3413061,"resolution":"4","location":"assets","locale":"","width":1526,"height":1032},"screenshot-5.jpg":{"filename":"screenshot-5.jpg","revision":3413061,"resolution":"5","location":"assets","locale":"","width":1526,"height":1032},"screenshot-6.jpg":{"filename":"screenshot-6.jpg","revision":3526273,"resolution":"6","location":"assets","locale":"","width":1526,"height":1032},"screenshot-7.jpg":{"filename":"screenshot-7.jpg","revision":3413061,"resolution":"7","location":"assets","locale":"","width":1526,"height":1032},"screenshot-8.jpg":{"filename":"screenshot-8.jpg","revision":3413061,"resolution":"8","location":"assets","locale":"","width":1526,"height":1032},"screenshot-9.jpg":{"filename":"screenshot-9.jpg","revision":3413061,"resolution":"9","location":"assets","locale":"","width":1526,"height":1032}},"screenshots":[]},"plugin_section":[],"plugin_tags":[1174,1229,55021,600,1909],"plugin_category":[54],"plugin_contributors":[251786],"plugin_business_model":[],"class_list":["post-262454","plugin","type-plugin","status-publish","hentry","plugin_tags-firewall","plugin_tags-login-security","plugin_tags-malware-scanner","plugin_tags-security","plugin_tags-two-factor-authentication","plugin_category-security-and-spam-protection","plugin_contributors-andeirz","plugin_committers-andeirz"],"banners":{"banner":"https:\/\/ps.w.org\/bearmor-security\/assets\/banner-772x250.jpg?rev=3413075","banner_2x":"https:\/\/ps.w.org\/bearmor-security\/assets\/banner-1544x500.jpg?rev=3413061","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/bearmor-security\/assets\/icon-256x256.png?rev=3413061","icon_2x":"https:\/\/ps.w.org\/bearmor-security\/assets\/icon-256x256.png?rev=3413061","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/bearmor-security\/assets\/screenshot-1.png?rev=3521085","caption":""},{"src":"https:\/\/ps.w.org\/bearmor-security\/assets\/screenshot-2.jpg?rev=3413061","caption":""},{"src":"https:\/\/ps.w.org\/bearmor-security\/assets\/screenshot-3.jpg?rev=3413061","caption":""},{"src":"https:\/\/ps.w.org\/bearmor-security\/assets\/screenshot-4.jpg?rev=3413061","caption":""},{"src":"https:\/\/ps.w.org\/bearmor-security\/assets\/screenshot-5.jpg?rev=3413061","caption":""},{"src":"https:\/\/ps.w.org\/bearmor-security\/assets\/screenshot-6.jpg?rev=3526273","caption":""},{"src":"https:\/\/ps.w.org\/bearmor-security\/assets\/screenshot-7.jpg?rev=3413061","caption":""},{"src":"https:\/\/ps.w.org\/bearmor-security\/assets\/screenshot-8.jpg?rev=3413061","caption":""},{"src":"https:\/\/ps.w.org\/bearmor-security\/assets\/screenshot-9.jpg?rev=3413061","caption":""}],"raw_content":"<!--section=description-->\nBearmor Security\n\n<p>Professional WordPress security plugin with comprehensive malware protection, file integrity monitoring, and login security. Almost entirely free, with optional PRO features for advanced needs.<\/p>\n\n<h3>Core Features (100% Free)<\/h3>\n\n<p><strong>Malware Scanner<\/strong>\n- Deep file scanning for backdoors, web shells, and malicious code\n- Pattern matching and heuristic detection\n- One-click quarantine for threats\n- Whitelist false positives\n- Scans plugins, themes, uploads, and core files<\/p>\n\n<p><strong>File Integrity Monitoring<\/strong>\n- Real-time tracking of all file changes\n- Detailed change logs showing what, when, and where\n- Instant quarantine for suspicious modifications\n- Mark legitimate changes as safe<\/p>\n\n<p><strong>Login Security<\/strong>\n- Brute force protection with automatic IP blocking\n- Complete login activity log\n- Geographic tracking for login attempts\n- Two-factor authentication (2FA) via email<\/p>\n\n<p><strong>Security Hardening<\/strong>\n- One-click hardening for common vulnerabilities\n- Disable XML-RPC, file editing, and directory browsing\n- Hide WordPress version and login errors\n- Enforce strong passwords\n- Simple toggle controls<\/p>\n\n<p><strong>Firewall<\/strong>\n- Web application firewall blocks SQL injection, XSS, and command injection\n- Rate limiting to prevent DDoS attacks\n- Country blocking with geo-IP detection\n- Honeypot protection for forms<\/p>\n\n<p><strong>Activity Logging<\/strong>\n- Track all administrative actions\n- Filter by user, action type, or date\n- Essential audit trail for multi-user sites<\/p>\n\n<p><strong>Security Dashboard<\/strong>\n- Clear overview of security status\n- Letter-grade security score (A-F)\n- Threat alerts and recommendations\n- Clean, focused interface<\/p>\n\n<h3>Optional PRO Features<\/h3>\n\n<p>The free version provides complete security protection. PRO adds optional enhancements:<\/p>\n\n<ul>\n<li><strong>Vulnerability Scanner<\/strong> - Automated CVE checks for plugins and themes<\/li>\n<li><strong>AI Security Analysis<\/strong> - Plain-English explanations of security issues<\/li>\n<li><strong>Uptime Monitoring<\/strong> - 24\/7 external monitoring with instant alerts<\/li>\n<\/ul>\n\n<p><a href=\"https:\/\/bearmor.eu\/bearmor-security-plugin\/\">Learn more about PRO features<\/a><\/p>\n\n<h3>Why Bearmor?<\/h3>\n\n<p><strong>Most Powerful Free Tier<\/strong>\nUnlike competitors, Bearmor includes malware scanning, file monitoring, firewall, quarantine, and 2FA in the free version. Features other plugins lock behind paid plans are free here.<\/p>\n\n<p><strong>Performance Focused<\/strong>\nEfficient scanning with minimal server impact. No bloat, no unnecessary features.<\/p>\n\n<p><strong>Professional Interface<\/strong>\nClean dashboard that shows what matters. No confusion, no clutter.<\/p>\n\n<p><strong>Privacy Respected<\/strong>\nFree users only send basic registration data (URL + email). Security scan data stays on your server unless you enable PRO AI analysis.<\/p>\n\n<h3>Quick Start<\/h3>\n\n<ol>\n<li>Install and activate Bearmor Security<\/li>\n<li>Run your first malware scan from the dashboard<\/li>\n<li>Enable recommended hardening options<\/li>\n<li>Set up 2FA for your account<\/li>\n<\/ol>\n\n<p>No configuration required. Works immediately.<\/p>\n\n<h3>External Services<\/h3>\n\n<p><strong>Free Users:<\/strong>\n- Bearmor API (bearmor.eu) - License verification and registration\n- WordPress.org API - Core file integrity checks\n- IP-API.com - Geographic data for login tracking<\/p>\n\n<p><strong>PRO Users (additional):<\/strong>\n- Bearmor API - Uptime monitoring and vulnerability data\n- OpenAI API - AI security analysis<\/p>\n\n<p>All connections use HTTPS encryption. No security scan data leaves your server in the free version.<\/p>\n\n<p><a href=\"https:\/\/bearmor.eu\/privacy\">Privacy Policy<\/a>\n<a href=\"https:\/\/bearmor.eu\/terms\">Terms of Service<\/a><\/p>\n\n<h3>Support<\/h3>\n\n<ul>\n<li><a href=\"https:\/\/bearmor.eu\/docs\">Documentation<\/a><\/li>\n<li><a href=\"https:\/\/wordpress.org\/support\/plugin\/bearmor-security\">Support Forum<\/a><\/li>\n<li>Email: security@bearmor.eu (PRO users receive priority support)<\/li>\n<\/ul>\n\n<h3>Privacy &amp; Data<\/h3>\n\n<p><strong>Free Users:<\/strong>\n- Site URL (installation identifier)\n- Admin email (security notifications)\n- Plugin version (update checks)<\/p>\n\n<p><strong>PRO Users (additional):<\/strong>\n- Security scan results (AI analysis only)\n- Uptime monitoring data (ping responses)<\/p>\n\n<p><strong>We Never:<\/strong>\n- Sell data to third parties\n- Track website visitors\n- Store passwords or sensitive user data\n- Share data without explicit consent<\/p>\n\n<p>Data is encrypted in transit, stored on EU servers, and automatically deleted after 90 days. Request data deletion anytime at security@bearmor.eu.<\/p>\n\n<p><a href=\"https:\/\/bearmor.eu\/privacy\">Full Privacy Policy<\/a><\/p>\n\n<!--section=changelog-->\n<h4>1.0.2<\/h4>\n\n<ul>\n<li>Fix: Fatal error in cron-based file integrity check \u2014 <code>Bearmor_Checksum::get_checksum()<\/code> was renamed to <code>get_stored()<\/code> and the call site was not updated, causing daily scans to crash and trigger a WP recovery email<\/li>\n<li>Fix: Hash algorithm mismatch in <code>check_root_directory()<\/code> \u2014 baseline stored SHA-256 but integrity comparison used SHA-1, causing all root-level files to be incorrectly flagged as changed<\/li>\n<\/ul>\n\n<h4>1.0.1<\/h4>\n\n<ul>\n<li>Initial public release<\/li>\n<\/ul>","raw_excerpt":"Lightweight, powerful WordPress security for small and medium businesses. Malware scanning, login protection, 2FA, hardening &amp; more.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/vi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/262454","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/vi.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/vi.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=262454"}],"author":[{"embeddable":true,"href":"https:\/\/vi.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/andeirz"}],"wp:attachment":[{"href":"https:\/\/vi.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=262454"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/vi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=262454"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/vi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=262454"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/vi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=262454"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/vi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=262454"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/vi.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=262454"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}