What protection tools do.
WHAT THEY OFFER
Blocking malicious requests Limiting login attempts Scanning files for changes Alerting on suspicious activity Blocking addresses
WHAT THEY DO NOT REPLACE
Updates Strong passwords Backups
A security plugin on an unupdated site is not protection.
HOW MANY TO USE
One.
Several conflict and produce unpredictable results.
WHAT TO ENABLE
Login attempt limiting File change monitoring Malware scanning, scheduled rather than continuous
THE CONTINUOUS SCANNING POINT
Constant file scanning is expensive in resources.
Schedule it.
WHAT TO BE CAREFUL WITH
Aggressive settings blocking legitimate visitors Blocking yourself Blocking payment gateway webhooks
THAT LAST ONE
A firewall blocking gateway notifications breaks your shop silently.
Whitelist your gateway.
WHAT A CDN FIREWALL ADDS
Filtering before requests reach your server.
More effective for sustained attacks.
WHAT TO CHECK
That protection has not broken anything.
