Features of the CleanTalk Security Plugin


Brute-force Protection Website Firewall Country Blocking
Login Attempts and Password Searching Log User Actions Log (Audit) Security Report
Notifications of administrator users authorizations CleanTalk Database of Dangerous IP Addresses Real-time traffic monitor

Malware Scanner





Brute-force Protection

  Adds a delay of few seconds for any failed attempt to login to WordPress back-end.

  We added the new logic to our WordPress security service. Service will check your security log once per hour and if some IP’s have 10 and more attempts to log in, then these IP’s will be banned for next 24 hours.

  It makes your website security tougher and doesn’t waste the server’s resources on these IP’s.


Security Report every 24 hours

  Every day the plugin sends Security report to your email. The report provides data on the number of incorrect password entries and the IP addresses from which the tried to sign in.


Login Attempts and Password Searching Log

  Security log keeps online a log of attempts to log in. Security log includes IP/Country/data/time, username and action result, was authorization successful or failed.

  Details about Security Log usage are here: https://cleantalk.org/help/Security-Log


User Actions Log (Audit)

  Keeps track of actions in the WP Dashboard to let you know what is happening on your blog.

  With the Security Audit Log is very easy to see user activity in order to understand what changes have done and who made them.

  Security Audit Log shows who logged in and when and how much time they spent on each page.


Blocking access to your website by IP, e-mail (Black & White Lists)

  Security FireWall may significantly reduce the risk of hacking and reduces the load on your web server. Use personal BlackList to block IP addresses with a suspicious activity to enhance the WordPress security.

  To enhance the security of your site, you can use the Security FireWall, which allows you to block access to your website by HTTP/HTTPS for individual IP addresses, IP networks and e-mails.

  Security Firewall instruction is here: https://cleantalk.org/help/Security-Firewall


Blocking access to your website by countries

  Security FireWall allows you to block countries and deny access to your website for all IP-addresses of blocked country visitors. You can add countries to the blacklist in your CleanTalk Dashboard.

  You can block countries on your Security Firewall page: https://cleantalk.org/help/Security-Firewall


Notifications of administrator users authorizations to your website backend

  We added this option to our security plugin. Now you can receive notifications if you want to know about an unauthorized entrance to your WP Dashboard.

  Notification will be sent only when a user was able to authorize entering login and password. If you are logged into the admin panel from the saved session, then the alert won’t be sent.

  You can enable the option "Receive notifications for admin authorizations" in your CleanTalk Dashboard. Choose “Site Security” in the “Services” menu, then click “Settings” under the name of your website:



Usage of the CleanTalk Database of Dangerous IP Addresses

  New option BlackIPs Database — is the database of the most active IP addresses where massive spam and brute force attacks come from. When an IP starts attacking a few websites they are immediately added to the blacklist. IPs that stop attacking are being removed over time and that time is relatively short — usually about 2 weeks.

  To use Security FireWall you have to have CleanTalk account.


Security Traffic Control

CleanTalk Security Traffic Control will track every single visitor no matter if they are using JavaScript or not and provides many valuable traffic parameters such as:

  • Date and time of the visit to your website;
  • Spent time on your website;
  • IP-addresses;
  • Source country;
  • Browser;
  • Operational System;
  • Type of the visitor — Visitor, Search Bot, different bot, suspicious bot and so on;
  • Number of visited pages.



  • Block specific IP-address, network or country directly from the interface.
  • Block IP-address automatically if the threshold of average quantity of visited pages was exceeded.


Malware Scanner

Scans WordPress files for hacked files or hacker code.

Security Malware Scanner runs manually in the settings. All detailed results will send to your CleanTalk Security Dashboard and you will be able to investigate them and see if those were legitimate changes or some bad code was injected.

If any files were changed in your WordPress system you will be able to delete them or restore the original WP files.

Outbound links scanner:

This option allows you to let know the number of outgoing links from your website and websites on which they linking to. All websites will be checked by our Database and will show results if they were used as links in spam messages. it allows you to check your website and find hidden links or spam links.

See more information here: https://cleantalk.org/help/security-malware-scanner