Security Suite for OpenCart

Main Features

• Easy to install. Upload the package in Extensions > Installer and install the module; a "Security Suite" item appears in the admin menu.
• Security dashboard. One protection score for six measures: file scan, database scan, blacklists, firewall, login protection and 24/7 monitoring, with a link to fix each one.
• Server-side file scan. Your files are checked on the SiteGuarding servers against our malware database and heuristic rules; the report opens on SiteGuarding.com and a copy is sent by email.
• Database scan. Information pages, product and category descriptions, HTML modules and store settings are checked for injected external links, hidden frames, scripts and spam words; nothing leaves your server.
• Blacklist check. Your domain is checked with Google and more than 30 other security vendors that browsers and antivirus software use.
• Login protection. A Google reCAPTCHA check before the administrator login and password reset pages stops automated password guessing.
• Two-factor authentication. Each administrator can add a code from an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password and others); repeated wrong codes lock the account for 15 minutes.
• Trusted addresses. No code is asked from the IP addresses you trust, for example your office.
• Login log and alerts. See the recent administrator logins and get an email or Telegram message about successful logins and failed logins to existing accounts.
• Administrator accounts review. All administrator accounts in one list, so an unknown account is easy to spot.
• Update overview. Your OpenCart version and pending extension updates on one screen.
• SiteGuarding firewall. With the SiteGuarding subscription our team installs the firewall that blocks SQL injection, file inclusion, web shells, malicious uploads and bad bots before they reach your store.
• SiteGuarding dashboard. Connect your store to your SiteGuarding account for cloud monitoring and one-click malware removal requests.
• Works behind Cloudflare and proxies. The real visitor address is read from trusted proxies only, so a visitor cannot fake it with a header.
• Free support. Our team answers your questions by email; malware removal by our security experts is available any time.