View Categories

Data Protection & Security

1 min read

Does wpSites feature Data Protection? #

“Data protection” is often interchanged with website backups. But, it’s much more than that. The most common elements of a solid data protection policy include:

  1. backups at the server level
  2. implementation of SSL (HTTPS protocol)
  3. requires users to have complex passwords
  4. is hosted with a reputable service provider
  5. implements a server firewall
  6. is proactively maintained

wpSites has all of these elements in place.

Data Protection Measures at the Server #

  1. SQL injection protection.
  2. Cross-site scripting protection.
  3. Remote and local file injection/inclusion attack protection.
  4. Command injection protection.
  5. Denial of Service protection.
  6. Real-time blacklists.
  7. Advanced anti-evasion protection (prevents someone from trying to bypass the WAF).
  8. Threat Intelligence protection (this is based on real-time attack intelligence reported by other customers, which is then made available in real-time to everyone using the complete rules. This means if customer A is attacked by a system, everyone blocks that attacker in real-time.)
  9. Automatic secure whitelisting of search engines (no false positives with search engines, they are automatically detected and whitelisted in a way that prevents spoofing. This ensures that sites page rank is also protected.)
  10. Malicious bot protection.
  11. Automatic removal of malicious code from websites (if a website is compromised, the complete rules will remove the malicious code from the website in real-time, without touching any code on the system. This ensures that there is no risk to the customer websites, and also removes anything malicious from them. This means you can use the rules on a system that’s already been compromised, and eliminate the effects of the web applications compromise without having to do anything other than install the rules.)
  12. Advanced protection rules for SQL injection, XSS, CSRF, RFI, LFI.
  13. Advanced protection for WordPress and other popular web applications.
  14. Brute force protection (detects and blocks web authentication brute force attacks, without relying on either status codes or logs).
  15. Anti-spam protection (blocks web spam).
  16. All Virtual Patches for Zero-Day vulnerabilities (Refer to this article for an explanation of what is a virtual patch).
  17. Data loss protection rules (protection from credit card theft, sensitive data, error messages that show sensitive data).
  18. PCI-DSS compliance (meets PCI-DSS WAF compliance requirements).
  19. Domain source blocking (you can block a source by the domain name or FQDN that resolves from its IP address.)
  20. Malware protection.
  21. Web shell protection (Detects and blocks web shells and other malicious code from running.)
  22. Whitelisting and blacklisting.
  23. Advanced false positive prevention (complete rules contain additional advanced code to prevent false positives.)
  24. Real-time support (false positives are resolved within minutes or hours, although they are very rare with the complete rules.)
  25. Updates multiple times daily.