Bearmor Security
| 开发者 | andeirz |
|---|---|
| 更新时间 | 2026年1月24日 19:51 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 6.9 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Finally, a WordPress security plugin that doesn't slow down your site.
Bearmor Security is built for small to medium businesses, freelancers, and agencies who need real protection without the bloat. No confusing dashboards, no technical jargon, no performance hit.
Why Bearmor?
🎯 Built for Non-Technical Users
You shouldn't need a security degree to protect your website. Bearmor gives you clear, actionable insights in plain English.
⚡ Lightweight & Fast
Unlike bloated competitors, Bearmor won't slow down your site. Clean code, efficient scans, zero impact on performance.
💰 Most Features FREE
While others lock everything behind paywalls, Bearmor gives you professional-grade security for free. Compare us to Wordfence, Sucuri, or iThemes Security - we're more generous.
🛡️ Real Protection, Not Theater
We focus on what actually matters: detecting threats, blocking attacks, and keeping you informed. No fake "critical alerts" to scare you into upgrading.
🆓 FREE Features (Yes, Really Free)
Malware Scanner
- Deep file scanning for backdoors, shells, and malicious code
- Smart detection with pattern matching and heuristics
- Quarantine threats with one click
- Whitelist false positives to prevent future alerts
- Scans plugins, themes, uploads, and core files
- Real-time tracking of all file changes
- See exactly what changed, when, and where
- Quarantine suspicious changes instantly
- Mark safe changes to keep your dashboard clean
- Brute force protection with automatic IP blocking
- Login activity log - see every login attempt
- Anomaly detection - alerts for suspicious login patterns
- Geographic tracking - know where logins come from
- Two-Factor Authentication (2FA) via email - completely free
- One-click hardening for common vulnerabilities
- Disable XML-RPC, file editing, directory browsing
- Hide WordPress version and login errors
- Enforce strong passwords
- All with simple on/off toggles
- Track all admin actions
- See who changed what and when
- Filter by user, action type, or date
- Essential for multi-user sites
- At-a-glance overview of your security status
- Security score with clear letter grade (A-F)
- See threats, recent activity, and recommendations
- No clutter, just what matters
- Malware Scanner - Full file scanning with quarantine
- File Monitoring - Real-time change tracking
- Login Security - Brute force protection and blocking
- 2FA Authentication - TOTP support built-in
- Quarantine Threats - One-click isolation of malware
- Security Hardening - All hardening options included
- 🔥 Advanced Firewall - Block attacks before they reach WordPress
- 🤖 AI Security Analysis - ChatGPT explains threats in plain English
- 📊 Deep Vulnerability Scanner - Database scanning and comprehensive CVE checks
- ⏰ 24/7 Uptime Monitoring - External monitoring with instant email alerts
- 🌍 Geo-Blocking - Block entire countries and IP ranges
- 🎯 Priority Support - Email support with faster response times
- Small Business Owners who need protection without complexity
- Freelancers managing multiple client sites
- Agencies who want reliable security without performance issues
- Anyone tired of bloated, confusing security plugins
- License verification (PRO users only)
- Uptime monitoring (PRO users only)
- AI analysis (PRO users only) Data sent to our servers:
- Site URL
- Admin email (for notifications)
- Security scan results (PRO AI analysis only)
- Site ID (anonymous identifier) We DO NOT:
- Sell your data
- Track your visitors
- Store sensitive information
- Share data with third parties For FREE users, only basic site registration data is sent (URL + email). No security data leaves your server.
- We include 2FA (they lock it behind PRO)
- We include quarantine (they lock it behind PRO)
- Lighter performance impact
- Simpler, cleaner interface
- We include malware scanner (they lock it behind PRO)
- We include file monitoring (they lock it behind PRO)
- We include 2FA and quarantine
- More features in free version
- More generous free tier
- Better malware detection
- Cleaner dashboard
- Faster scans
- Install and activate Bearmor Security
- Run your first malware scan (Dashboard → Scan Now)
- Enable recommended hardening options (Dashboard → Hardening)
- Set up 2FA for your account (Settings → Two-Factor Auth)
- You're protected! 🎉
- Documentation: https://bearmor.eu/docs
- Support Forum: https://wordpress.org/support/plugin/bearmor-security
- Email: security@bearmor.eu (PRO users get priority)
安装:
Automatic Installation
- Log in to your WordPress admin panel
- Go to Plugins → Add New
- Search for "Bearmor Security"
- Click "Install Now" and then "Activate"
- Download the plugin ZIP file
- Go to Plugins → Add New → Upload Plugin
- Choose the ZIP file and click "Install Now"
- Activate the plugin
- You'll see the Bearmor Security menu in your admin sidebar
- Run your first malware scan from the dashboard
- Review and apply recommended hardening settings
- Enable 2FA for your account (optional but recommended) That's it! Bearmor Security is now protecting your site.
屏幕截图:
常见问题:
Is Bearmor Security really free?
Yes! Unlike competitors who lock essential features behind paywalls, Bearmor gives you full malware scanning, file monitoring, login protection, 2FA, and hardening completely free. PRO features (firewall, AI analysis, uptime monitoring) are optional upgrades.
Will this slow down my website?
No. Bearmor is built for performance. Scans run in the background, and the plugin uses minimal resources. We've tested it on shared hosting with no performance impact.
Do I need technical knowledge to use this?
Not at all. Bearmor is designed for non-technical users. Everything is explained in plain English with clear actions. If you can click a button, you can secure your site.
What's the difference between FREE and PRO?
FREE gives you complete malware protection, file monitoring, login security, 2FA, and hardening. PRO adds advanced firewall, vulnerability scanning, AI-powered analysis, and 24/7 uptime monitoring. Most users are perfectly protected with FREE.
Does this work with other security plugins?
We recommend using Bearmor as your only security plugin to avoid conflicts. It's comprehensive enough that you won't need anything else.
What data does Bearmor send to your servers?
For FREE users: Only your site URL and admin email during initial registration. No security data leaves your server. For PRO users: We also receive scan results for AI analysis and uptime monitoring data. We never sell or share your data. See our privacy policy: https://bearmor.eu/privacy
How often should I run scans?
Bearmor automatically monitors file changes in real-time. We recommend running a full malware scan weekly, or after installing new plugins/themes. PRO users get automatic scheduled scans.
Can I use this on client sites?
Absolutely! Bearmor is perfect for agencies and freelancers managing multiple sites. The clean interface makes it easy to hand off to clients.
What if I find a false positive?
Simply click "Mark as Safe" or add the file to your whitelist. Bearmor will remember and won't alert you again.
How is the AI analysis different?
Instead of just listing threats, our AI (powered by ChatGPT) explains what they mean, how serious they are, and exactly what you should do. It's like having a security expert on call 24/7.
Do you offer refunds?
Yes! PRO subscriptions come with a 30-day money-back guarantee. No questions asked.
更新日志:
0.9.14
- Fixed: Blocked IPs section now always visible on Login Security page
- Fixed: Mobile responsive issues - dashboard widgets, tables, buttons, and settings tabs
- Fixed: Uptime chart now scrolls horizontally on mobile instead of breaking layout
- Improved: Empty state message when no IPs are blocked
- Fixed: IP blocks now work on XML-RPC and REST API (not just wp-login.php)
- Fixed: Email link now points to correct Login Security page
- Improved: No duplicate emails for same IP within 24 hours
- Improved: Repeat offenders (3+ blocks in 7 days) get permanent ban
- Improved: Expired blocks kept for 7 days for history/visibility
- Improved: Blocked IPs table now shows status (Active/Expired/Permanent)
- Fixed: Renamed admin file to avoid false positives on some hosts (Namecheap)
- Fixed: Undefined array key warnings on settings page
- Improved: Reduced debug log noise - errors only
- Improved: Cleaner call-home and AI analyzer logging
- Fixed: Security score now only penalizes HIGH severity threats (Medium are informational)
- Improved: Graduated malware scoring (0 High=45pts, 1 High=30pts, 2 High=15pts, 3+=0pts)
- Fixed: Security score now correctly excludes whitelisted files (Free + Pro)
- Fixed: Pro hardening check now recognizes any enabled hardening rule
- Fixed: Whitelist action now updates all threats for the file
- Fixed: Quarantine file restore path handling
- Fixed: Nonce verification for whitelist/quarantine actions
- Improved: Admin bar now shows simple shield icon instead of scary threat warnings
- Added: Next scan time display on dashboard
- Added: Pagination for file changes (50 per page)
- Added: Auto-cleanup of old file changes (90+ days)
- Added: Exclusion of .git folders from file monitoring
- Fixed: Subscription cancellation now works correctly
- Improved: Cancel button UI shows cancelling status after successful cancellation
- Removed: Debug logging code
- Added: Subscription cancellation button in Settings page
- Added: Professional welcome email for new PRO subscribers
- Improved: Settings page UI with action buttons (Docs, Support, Upgrade/Cancel)
- Fixed: Button icon alignment with flexbox
- Fixed: Dynamic base URL for dev/prod environments
- Fixed: Author URI now points to bearmor.eu instead of bearz.ee
- Improved: Readme formatting for better WordPress.org display
- Fixed: Tested up to WordPress 6.7
- Fixed: Contributor username corrected
- Improved: Uptime history modal redesigned with 7-day daily + 24-hour hourly breakdown
- Improved: Keep only last 50 downtime events to prevent database bloat
- Improved: Ping data cleanup extended from 7 to 30 days
- Improved: Auto-close open downtime events when site recovers
- Fixed: Removed confusing "Ongoing" status from downtime events
- Fixed: Replaced emoji icons with clean monochrome dashicons
- Added: Hybrid uptime widget with 6 daily bars + 24 hourly bars
- Added: Hover tooltips showing exact uptime percentage for each bar
- Added: Blocked IPs table on Login Security page with unblock action
- Improved: All widget icons now use professional dashicons
- Improved: Country flags with tooltips in login activity tables
- Added: Country flags with tooltips in login tables for better geo-tracking
- Fixed: Critical error with country flag helper function
- Improved: IP column widths and table layouts
- Fixed: Pagination limited to max 10 pages for better UX
- Improved: Modernized File Changes page layout
- Improved: Firewall widget display and table designs
- Improved: Dashboard layout modernization with better spacing
- Improved: PRO features styling and button consistency
- Improved: Table designs across all pages
- Fixed: WordPress.org review feedback - security and code standards
- Improved: Escaping and sanitization throughout plugin
- Fixed: Manual "Refresh License" now includes admin_email for proper registration
- Improved: Site registration reliability when Home server is reset
- Improved: Unified button styling across entire plugin
- Improved: All buttons now use dashicons instead of emojis
- Added: Auto-sync uptime data on dashboard load (1-hour cache)
- Fixed: Uptime monitoring "0 pings = 100%" bug
- Removed: GitHub update checker (WordPress.org handles updates)
- Fixed: Security improvements - wp_safe_redirect(), proper escaping
- Fixed: Timezone-safe database operations with gmdate()
- Improved: WordPress.org submission ready