Security Suite for PrestaShop

Main Features

• Easy to install. Upload the module in Modules > Module Manager; a "Security Suite" item appears in the Configure section of the back office menu.
• Security dashboard. One protection score for six measures: file scan, database scan, blacklists, firewall, login protection and 24/7 monitoring, with a link to fix each one.
• Server-side file scan. Your files are checked on the SiteGuarding servers against our malware database and heuristic rules; the report opens on SiteGuarding.com and a copy is sent by email.
• Database scan. CMS pages, product descriptions (full and short), category descriptions, custom text blocks and shop settings are checked for injected external links, hidden frames, scripts and spam words; nothing leaves your server.
• Blacklist check. Your domain is checked with Google and more than 30 other security vendors that browsers and antivirus software use.
• Login protection. A Google reCAPTCHA check before the back office login and password recovery pages stops automated password guessing.
• Two-factor authentication. Each employee can add a code from an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password and others); repeated wrong codes lock the account for 15 minutes.
• Trusted addresses. No code is asked from the IP addresses you trust, for example your office.
• Login log and alerts. See the recent back office logins and get an email or Telegram message about successful logins and failed logins to existing accounts.
• Employee accounts review. All back office accounts in one list, so an unknown account is easy to spot.
• Update overview. Your PrestaShop version and the Security Suite updates on one screen.
• SiteGuarding firewall. With the SiteGuarding subscription our team installs the firewall that blocks SQL injection, file inclusion, web shells, malicious uploads and bad bots before they reach your store.
• SiteGuarding dashboard. Connect your store to your SiteGuarding account for cloud monitoring and one-click malware removal requests.
• Works behind Cloudflare and proxies. The real visitor address is read from trusted proxies only, so a visitor cannot fake it with a header.
• Free support. Our team answers your questions by email; malware removal by our security experts is available any time.