Security by CleanTalk
Antivirus scan
Powered by ClamAV
✅ Verified clean
This product file has passed our security filters.
Want to run a fresh ClamAV scan right now? Takes a few seconds and shows scanner version, signature DB and live result.
This can take 5 to 30 seconds.
Clean file Threat detected
No threats detected in this file.
- File
- Size
- Scanned
- ClamAV
- Signature database
⚡ Powered by ClamAV
Scan could not be completed
Report product
If you detected an issue (broken file, malware, inappropriate content, etc.) let us know and we'll review it ASAP.
Sign in to report
About Security by CleanTalk
Almost nobody finds out their site is infected the day it happens. They find out weeks later, when Google flags a dangerous site, when spam starts going out from their domain or when the hosting company suspends the account. Security by CleanTalk tries to make sure you get that warning first, with the cleanup work already under way.
A real case: from suspicion to a clean site
Imagine you manage a client's website and notice it is slower than usual. Here is how the case plays out with this plugin:
- Step one, scan. You run a manual scan or let it run on its own, at intervals of 12 or 24 hours, or 3, 7, 14 or 30 days. It checks the server's executable files (.php and similar) and also the database tables, looking for suspicious code.
- Step two, decide what to do with what it finds. The plugin can remove, quarantine or cure infected files. Curing is applied automatically; every other action asks for your confirmation, so nothing important gets deleted without your approval.
- Step three, close the door. If the attack came in through the login, you set the number of attempts, the interval between them and the lockout, which can range from 2 minutes to 24 hours.
- Step four, keep watch. You review who visits the site and block by IP, IP network or country.
One limit to keep in mind in that last step: blocking by IP, network or country is managed from the cloud dashboard at CleanTalk.org, not from the WordPress admin. So you need an account there.
A login that is harder to attack with Security by CleanTalk
Brute-force attacks go after the login address everyone knows. The plugin lets you change the technical URL /wp-login.php to another one, which cuts down on the noise from bots guessing passwords blindly.
On top of that comes two-factor verification, which you can require by user role (administrator, editor, author, etc.). It works through email notifications, not an authenticator app or hardware keys, and it can remember the browser for 30 days on new devices only. If your team is used to Google Authenticator, this will feel more basic.
Frequently asked questions before installing it
Does it replace several security plugins?
It brings together a web application firewall, a malware scanner with cleanup, login protection, 2FA, checks for known vulnerabilities and activity logs. For many small and medium sites it avoids installing separate pieces.
Does it work for a WooCommerce store?
It includes a list of known WooCommerce vulnerabilities and the firewall stops suspicious traffic. It protects the store as a WordPress site, but it is not a payment anti-fraud system.
How long does it keep visit history?
Visitor activity is logged for up to 24 hours in the plugin and up to 45 days in the cloud dashboard. If you need long audits, export what matters to you in time.
Can someone without technical experience use it?
It is designed so that almost everything is automatic, and it alerts you if something fails. Even so, decisions like quarantining or deleting files require you to know what you are approving.
What to expect and what not
It is a lightweight plugin that works in the background. But no scanner replaces backups: if a cleanup removes lines from a file, it is wise to have a recent copy at hand. Nor does it fix a badly configured hosting or weak passwords among your users.
Topics
Version history
-
v
2.91.1 Current 15 May 2024
Customer reviews
Sign in to leave a review. Only people who have the product can review it.
No reviews for this product yet.
Frequently asked questions
-
GPL (General Public License) is the license under which WordPress and most premium plugins/themes are distributed. It grants you the right to use, modify and redistribute the software in as many projects as you want, with no domain restrictions.
-
Yes. With membership you get automatic updates via our GPLClub Updater plugin (installed on your WP, detects new versions and applies them). With individual purchase, you get one year of manual updates from your account.
-
Depends on the plan. Monthly: 3 domains. Semi-annual: 7. Annual and Lifetime: 15. Individual purchase: 1 domain.
-
GPLClub offers its own support for installation, configuration and compatibility. For direct support from the original author (feature requests, product-specific bugs), a license purchased from the author is required.
