5 Must-Have Magento Security Plugins

Transcription

1 5 Must-Have Magento Security Plugins 1/16

2 Table of Contents 1. About ServerGuy 2. WatchLog 3. Amasty s Admin Login Actions 4. MageFence 5. Two Factor Authentication 6. MageFirewall Security 7. Become Attack Proof 2/16

3 About ServerGuy Delivering uptime and satisfaction since We started ServerGuy in 2009 with an aim to provide managed services. People had lots of problem finding the right managed service provider and that's what triggered us. From then to now, we have seen managed services evolve as a necessity. We are colocated in NetMagic Tier 3+ Data centers. Our Expertise Having worked in Magento sector for almost a decade, we have gained knowledge about the problems, possible security loopholes, and tricks to get you out of it. Our strong points: Security: We offer free SSL and DDoS protection to our clients. Speed: We ensure your website loads under 3 seconds. Scaling: Our certified engineers efficiently and effectively scale your servers. Monitoring: Our team pro-actively monitors your servers 24*7 3/16

4 and fixes the bug before you know. Support: Your satisfaction is our priority and that's why we offer 24*7 certified support. Uptime: 99.99% Uptime Guaranteed. We are actively investing in R&D to innovate and automate the processes that helps us to optimize your store cost. Other than that... We are active on Facebook and Twitter. But we would like to have you on call if you wish to know more out our products and services. 4/16

5 WatchLog This Magento extension helps in preventing your website from brute force attacks. This means Watchlog will identify and stop attacks that aim to access Magento backoffice. Features Prevent website from brute force attacks. A detailed and summarized table of login attempts. Obtain a periodic report on the statistics on . View the daily and monthly login attempts in graphs. A track of the connection attempts. How to Use Go to System > Config > Wyomind > WatchLog 5/16

6 Connexion attempts history: Configure a certain number of parameters. Send a Periodical Report: Receive reports by setting it to a YES. Period to Report in Days: Number of days you want to include in your report. Report Title: Title of your report. Report Recipients: Enter addresses where you wish to receive the report. Report Schedule: Schedule to automatically receive the reports. By navigating to Systems > Watchlog, you can have an overview of the login attempts to your Magento backoffice. 6/16

7 Compatibility Price Starts at /16

8 Amasty s Admin Login Actions Amasty s Magento Extension helps in keeping a track of how, when, and by whom your store data has been viewed or modified. You can effectively manage your staff by limiting the access and separating category management. Features Keep all the actions performed in-store backend by admin users. View log history. Keep log records for as long as you need. You can see login activity and block malicious login attempts. 8/16

9 It keeps a track of what has been done in your store admin panel and by whom. You can see all log details on the grid for the specified time. You can ban or unban users. Price $ /16

10 MageFence MageFence is a unique and well-rounded solution for Magento that keeps your website secure from common security threats. By acting as an additional layer of protection, it blocks brute force and other hack attacks. Regularly scans your website internally and notifies about any potential unwanted changes. It offers a variety of features that aim to keep your website protection up-to-date and use best security practices. This Magento extension scans the database and detects users with admin privileges created without authorization. It performs a security audit of your Magento website to find 10/16

11 security loopholes, vulnerabilities, and malware infections. You can find which security patches are not installed. With the checklist feature, you can find unauthorized users with admin privileges and if there s any file changed. Alerts you if there is any sign of malware infection. How to use Set the time of scan Set the frequency of the scan Set login failures and MageFence will block those shady IP address who exceeds this specific number of login attempts. However, there is an option to add certain IP addresses to the White List which will prevent you from getting locked out. By selecting this option, you will tell MageFence that it is you. Price $ /16

12 Two Factor Authentication You can enhance Magento admin security with Amasty s Two-Factor authentication. Features It combines Google Authenticator application and your smartphone to verify the admin session. Thereby, protecting your unauthorized logins and fraudsters. It assures protection against data sniff by providing new security code each time. So even if your security code and password are sniffed they couldn t be used to get logged in. 12/16

13 Time-based security codes are provided. They change every 30 seconds and remain valid only before 30 seconds. You can white-list some IP addresses (for example, your company IP) and not require entering the verification code. Compatibility iphone (ios 3.1+) ipad ipod touch Android (1.5+) Blackberry (OS ) You can make sure if your device can run the Google Authenticator application Price $ /16

14 MageFirewall Security MageFirewall Security is one of the best Magento extensions creating an additional layer of security around the Magento commerce system. It blocks and blacklists the attackers. Features Using Ninja Firewall rules, it blocks the attackers and prevents them from getting through your website. It scans to provide recommendations around your store setup. This Magento extension includes a recently modified file scanner to alert when someone breaks into your store. Secures your store against brute force attacks and blacklists them. File modification detector Scan web servers It scans your Magento for unpatched security issues 14/16

15 Price Free 15/16

16 Become Attack Proof Join 1,000+ companies to become smarter than the hackers/bots. Talk to our Magento experts today. BOOK FREE CONSULTATION 16/16