WordPress security with cloud-based controls
The premium Cloud security service works with the Security Plugin, Firewall & Malware Scanner with Auto Removal to help protect WordPress websites from common online threats. The plugin provides the controls inside WordPress, while the service supplies security features and detailed statistics for monitoring website protection.
This paid service is designed for site owners who want more than basic login controls. It brings together brute-force protection, two-factor authentication, firewall rules, malware scanning, vulnerability checks, traffic monitoring, and security reporting in one security workflow.
Login and account protection
Use login security tools to limit repeated attempts and reduce exposure to brute-force attacks against WordPress accounts. The plugin can introduce a short delay after a failed administrator login. Its default policy reviews the security audit log hourly and can block an IP address for 24 hours when it records at least 10 login attempts during that period.
Administrators can also configure the maximum failed attempts before a ban, the time period used to count attempts, and the ban duration. The available ban period ranges from two minutes to 24 hours. Additional controls include a custom login URL, hiding the default login page, stopping user enumeration, and protecting the WordPress login form.
Two-factor authentication is included, with the ability to apply a policy to selected user roles. Options are also available to avoid revealing whether a login exists when password-reset or password-change errors occur.
Firewall, scanning, and monitoring
- Set firewall protection by IP address, network, or country.
- Use a Web Application Firewall to help control unwanted requests.
- Monitor real-time traffic, including visitors, pages, IP addresses, countries, and hit counts per page.
- Scan for malware with an automatic cure function.
- Run daily automatic malware scans.
- Check installed plugins and themes for vulnerabilities.
- Receive notifications about login events and weekly security reports by email.
These tools support practical security routines for business websites, membership sites, blogs, and WordPress installations where administrators need visibility into login activity and site traffic.
Extended audit history
After the trial period, the plugin continues to perform its functions, protect against brute-force attacks, and keep an action log in the WordPress dashboard. The non-premium log view is limited to the last 20 entries in 24 hours. The premium service allows all logs to be stored for 45 days in the CleanTalk Dashboard for further analysis.
This longer history can help administrators review suspicious login patterns, investigate security events, and compare activity over time. Detailed security statistics provide a central view of the available protection features.
Installation and setup
Install the Security Plugin, Firewall & Malware Scanner with Auto Removal in WordPress, then connect it with the premium Cloud security service. Configure login, firewall, scanning, notification, and reporting settings from the plugin and service dashboards. Review the available policies so they match the roles and activity of your website.
The service uses a subscription model, with renewal for one year. The plugin and premium Cloud security service work together, giving users access to the service-supported security features described above.
