nexya security
HTTP headers set without breaking the site, a watch on the vulnerabilities of the plugins installed, and an eye on what moves in the files
- A CSP you can actually turn on Detection mode listens to what the browser blocks and turns every block into a source you allow in one click. Setting a strict policy stops being an afternoon of guesswork
- Told when a plugin becomes dangerous The plugins installed are checked nightly against a public vulnerability database. When a critical flaw comes out, you hear about it without having gone to look
- Core files, compared to the original Every file is checked against the official fingerprint published by WordPress. A modified file shows up immediately, and is put back from the original source
- The headers can be exported Once the configuration is right, it is written into the theme or server file. The module can then disappear without the security leaving with it
What is not written here is not loaded. One origin per line, with the places it is allowed to appear.
No external platform to run
Everything happens between the site and three public sources: the WordPress.org checksum API for core files, its official repository to put them back, and a public vulnerability database for the watch. Nothing passes through a service we would own, there is no account to create, and results are kept on the site.
Detection mode, in practice
You turn the policy on in listening mode, browse normally for a few days, and every blocked resource comes back in a list. A Google map, a remote font, a video player: you simply allow what is legitimate. After a few days the list dries up, and the policy can be enforced without breaking anything.
What it is not
It is not a firewall. It does not block IP addresses, does not filter incoming requests and does not replace Wordfence or your host’s equivalent. It covers what most sites have none of at all: correct headers, a watch that warns you, and the certainty that the files are the ones they should be.
Free
Headers set by hand, vulnerability watch and alert
Pro
Automatic scan, CSP detection mode, file fingerprint and rollback
The suite