FAIR

Federated and Independent Repositories

Secure360

Plugin Banner

Secure360

by diggitysolutions

Download
Description

Secure360 is a professional-grade security and utility suite designed for WordPress administrators who demand high visibility and control.

This plugin combines real-time system monitoring with a powerful “Go Live” URL migration engine, ensuring your site remains secure while making complex database operations simple and safe.

External Services

This plugin can optionally connect to external services to provide security diagnostics, update metadata, and optional off-site monitoring.

  1. DCyber Intelligence Cloud

* Service URL: https://dcyber.diggity.us/api/v1/log
* Purpose: Provides tamper-proof off-site security audit logging and real-time alert dispatching (SMS/Slack/Email). Off-site logging ensures security logs remain intact even if the local WordPress database is compromised.
* Trigger / Usage: This service is strictly OPT-IN and DISABLED BY DEFAULT. Data is transmitted only when the site administrator explicitly enables “Cloud Sync” in the plugin settings. When Cloud Sync is enabled, Diggity monitoring may also request a status check from this site via ?action=dcyber_monitor_api using the site’s stored API key.
* Data Transmitted (outbound push): Event type, timestamp, origin IP address, affected WordPress user ID, and target site URL.
* Data Returned (inbound status poll, Cloud Sync on + valid API key only): Site status, site URL, WordPress version, and local security log count.
* Terms of Service: https://diggity.us/terms-of-service
* Privacy Policy: https://diggity.us/privacy-policy

  1. WordPress.org Plugin API

* Service URL: https://api.wordpress.org
* Purpose: Retrieves metadata and update status for installed plugins to detect security issues, compatibility warnings, and abandoned plugins.
* Trigger / Usage: Strictly OPT-IN and DISABLED BY DEFAULT. Triggered during scheduled daily inventory scans, or when a manual plugin scan is requested by the administrator, only when “Remote API Fetches” is enabled in settings.
* Data Transmitted: Plugin slugs and versions.
* Terms of Service / Privacy: https://wordpress.org/about/privacy/

Key Features:

  • Go Live Engine: Safely migrate your site URLs across the entire database. Our recursive search-and-replace algorithm is serialized-data safe, preventing PHP object corruption during migrations.
  • Security Monitoring: Track failed logins, file uploads, sensitive file access, and suspicious activity in real-time.
  • DoS Detection: Intelligent monitoring of external requests and resource usage to identify potential denial-of-service attempts.
  • Database Snapshot History: Keep track of every URL migration with a detailed history log and one-click “Undo” capabilities.
  • Batch Processing: Advanced multi-step wizard for migrations that prevents server timeouts on large databases through intelligent batching.
  1. Upload the secure360 folder to the /wp-content/plugins/ directory.
  2. Activate the plugin through the ‘Plugins’ menu in WordPress.
  3. Navigate to ‘Secure360’ in your admin sidebar to view the dashboard.
  4. Go to ‘Update URLs’ to start a site migration or search-and-replace operation.
Does the URL migration handle serialized data?

Yes! Unlike simple SQL REPLACE queries, Secure360 uses a recursive PHP algorithm that unserializes data, replaces the string, and reserializes it with updated string lengths. This is critical for theme options and widget data.

Can I undo a migration?

Yes. Every “Go Live” operation is logged in the history. You can click “Undo” to automatically swap the URLs back and restore the previous state.

What security logs are tracked?

We track Failed Logins, File Uploads, Theme/Plugin changes, Spam attempts, and Sensitive File Access (like .htaccess or wp-config.php).

1.0.2

  • Packaging fix for WordPress.org upload: development files are no longer included in the distribution zip.

1.0.1

  • WordPress.org compliance hardening: packaging exclusions, consent notices, and security endpoint cleanup.
  • Replaced runtime Tailwind JS with a purged static CSS build; self-hosted admin fonts.

1.0.0

  • Initial release.
  • Integrated “Go Live” URL Migration Engine.
  • Real-time security monitoring dashboard.
  • Serialized data safety for search-and-replace.
  • Localized all 3rd-party JS assets for repository compliance.
Back to top