Documentation
Welcome to the official documentation for Samaritain Security,
the one-click security plugin for WordPress.
Samaritain Security protects your WordPress site with 21 security features organized into 7 categories. The plugin offers two modes:
Simple Mode: 1-click protection. All recommended protections are automatically enabled with optimal settings.
Advanced Mode: full control over each feature. Enable, disable, and configure each protection according to your needs.
Getting Started Guide
Have you just installed Samaritain Security? Start with the Quick Start Guide to activate your license and learn the basics.
Understanding the features
Learn more about what each feature does and why it’s important for your site’s security.
Overview
Summary table of the 21 features
Firewall
Filtering malicious requests (SQL injections, XSS, bots)
Login Protection
Hidden login URL, limited login attempts, anti-enumeration, Login Protection
Authentication
Password policy, session expiration, 2FA
API Protection
Disabling pingbacks, REST API protection, and XML-RPC
Security headers
Security HTTP headers (HSTS, CSP, COOP, CORP, etc.)
Hardening
Secure cookies, editor disabled, HTTPS enforced, protected uploads
Monitoring
Audit log, email notifications, conflict detection
Configure Advanced Mode
A practical guide to configuring each feature in advanced mode, including recommended settings and precautions to take.
Introduction to Advanced Mode
When and how to use advanced mode
Firewall
Configure filters, action mode, and the whitelist
Login Protection
Customize the login URL and the number of allowed login attempts
Authentification
Adjust password policies, sessions, and two-factor authentication
API Protection
Set up pingbacks and API protection
Security headers
Select HTTP headers and the CSP level
Hardening
Configure admin lockout, HTTPS, and system protections
Monitoring
Manage logs, notifications, and CSV exports
Related pages
Dashboard
Understanding the security score, metrics, and events
IP Address Management
Whitelist, blocklist, and CIDR notation
Q&A
Answers to frequently asked questions
Glossary
Definitions of technical safety terms
Secure your WordPress with 1 Click
Get help
Legals
Secure payment via Stripe