All in one WP Security and Firewall is one of many different plugins that you can use to protect your lawyer site. This is one of the better ones and its totally free and has a unique setup with a scoring system. So the more you setup, the higher your score. It doesnt seem like any one plugin can totally protect your site, BUT doing certain things can help lessen the chances that your site gets hacked.
A COMPREHENSIVE, EASY TO USE, STABLE AND WELL SUPPORTED WORDPRESS SECURITY PLUGIN
WordPress itself is a very secure platform. However, it helps to add some extra security and firewall to your site by using a security plugin that enforces a lot of good security practices.
The All In One WordPress Security plugin will take your website security to a whole new level.
This plugin is designed and written by experts and is easy to use and understand.
It reduces security risk by checking for vulnerabilities, and by implementing and enforcing the latest recommended WordPress security practices and techniques.
Below is a list of the security and firewall features offered in this plugin:
User Accounts Security
Detect if there is a user account which has the default “admin” username and easily change the username to a value of your choice.
The plugin will also detect if you have any WordPress user accounts which have identical login and display names. Having account’s where display name is identical to login name is bad security practice because you are making it 50% easier for hackers because they already know the login name.
Password strength tool to allow you to create very strong passwords.
Stop user enumeration. So users/bots cannot discover user info via author permalink.
User Login Security
Protect against “Brute Force Login Attack” with the Login Lockdown feature. Users with a certain IP address or range will be locked out of the system for a predetermined amount of time based on the configuration settings and you can also choose to be notified via email whenever somebody gets locked out due to too many login attempts.
As the administrator you can view a list of all locked out users which are displayed in an easily readable and navigable table which also allows you to unlock individual or bulk IP addresses at the click of a button.
Force logout of all users after a configurable time period
Monitor/View failed login attempts which show the user’s IP address, User ID/Username and Date/Time of the failed login attempt
Monitor/View the account activity of all user accounts on your system by keeping track of the username, IP address, login date/time, and logout date/time.
The All In One WordPress Security plugin doesn’t slow down your site and it is 100% free.
