via pluginvulnerabilities.com => original post link
We were recently contacted by someone asking if we provided an alternative for the WordPress security service Wordfence Care for a WooCommerce website. Specifically, we asked if we provide something that would include a firewall, the setup of the firewall, and help in case there is a security problem on the website. For the first two things they were looking for, our own Plugin Vulnerabilities Firewall is a firewall and you can easily configure it yourself, as we designed it to not need much configuration. If any customer does need help configuring it, we can provide help as well. The last piece of that seems rather problematic to offer, but it turns out that part of that, which shouldn’t be hard to offer, is for Wordfence.
A security problem with a WooCommerce website could involve a lot of different things. One provider being able to deal with that would require a wide-range of expertise. It seems unlikely that any provider would. It’s very different to say deal with an unfixed vulnerability in a WordPress plugin and deal with a server-level security issue, or deal with a security issue involving a payment provider. What Wordfence should be able to handle is dealing properly with hacked websites. But that hasn’t been the case. Take one person who had Wordfence Care, but said that Wordfence was not figuring out how a website was being hacked and the issue continued on. Even with the even more expensive Wordfence Response and paying thousands of dollars, someone couldn’t get them to address a problem. [Read more]