Security Suite for Magento

Main Features

• Easy to install. Unzip the extension into the Magento root and run the usual bin/magento commands; a "Security Suite" item appears in the admin menu.
• Security dashboard. One protection score for six measures: file scan, database scan, blacklists, firewall, login protection and 24/7 monitoring, with a link to fix each one.
• Server-side file scan. The files of the whole installation are checked on the SiteGuarding servers against our malware database and heuristic rules; the report opens on SiteGuarding.com and a copy is sent by email.
• Database scan. CMS pages and blocks, product descriptions (full and short), category descriptions and store configuration (for example Design > HTML Head > Scripts) are checked for injected external links, hidden frames, scripts and spam words; nothing leaves your server.
• Blacklist check. Your domain is checked with Google and more than 30 other security vendors that browsers and antivirus software use.
• Login protection. A Google reCAPTCHA check before the admin login and password recovery pages stops automated password guessing.
• Two-factor authentication. Each administrator can add a code from an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password and others), also asked for the REST admin token; repeated wrong codes lock the account for 15 minutes. When Magento's own two-factor authentication is on, it is used instead.
• Trusted addresses. No code is asked from the IP addresses you trust, for example your office.
• Login log and alerts. See the recent admin logins and get an email or Telegram message about successful logins and failed logins to existing accounts.
• Admin accounts review. All admin users with their roles in one list, so an unknown account is easy to spot.
• Update overview. Your Magento version and the Security Suite updates on one screen.
• SiteGuarding firewall. With the SiteGuarding subscription our team installs the firewall that blocks SQL injection, file inclusion, web shells, malicious uploads and bad bots before they reach your store.
• SiteGuarding dashboard. Connect your store to your SiteGuarding account for cloud monitoring and one-click malware removal requests.
• Works behind Cloudflare and proxies. The real visitor address is read from trusted proxies only, so a visitor cannot fake it with a header.
• Free support. Our team answers your questions by email; malware removal by our security experts is available any time.