Astra Security Suite – Firewall & Malware Scan Plugin
Astra is the complete security suite for your WordPress. Rock solid firewall with immediate malware cleanup & security audit for your WordPress.
Astra Web Security is the go-to security suite for your WordPress website. With Astra, you don’t have to worry about any malware, credit card hack, SQLi, XSS, SEO Spam, comments spam, brute force & 100+ types of threats. This means you can get rid of other security plugins & let Astra take care of it all.
Astra is installed as an extension by following self-served, easy to follow steps (takes less than 5 minutes). It means there is NO need to change DNS settings, unlike other security plugins. We offer Web Application Firewall to protect your website in real-time, on-demand machine learning-powered malware scanner, immediate malware cleanup, community Security & Vulnerability Assessment & Penetration Testing (VAPT) to find all possible flaws & business logic errors.
Through our intuitive dashboard, you can manage all your website & it doesn’t come with a hundred buttons that make you feel like you’re a pilot in a cockpit!
Astra Web Security is a Techstars company & the winner of the French Tech Ticket Program. Awarded as The Most Innovative Security Company at the Global Conference on Cyber Security.
Astra’s vision is to make cyber security a five-minute affair for businesses.
Astra’s promise to a business owner is that their business would be secure without any ifs or buts. If a business is using Astra, they will be secure – no questions asked.
Features
- Web Application Firewall (WAF)
- Robust community-powered security engine
- Installs as an extension in your website (No need to change DNS settings)
- Real-time SQLi, XSS, LFI & 100+ threats protection
- Malware scanning & removal
- Bad bots blocking
- Country blocking/whitelisting
- IP range blocking/whitelisting
- IP profiling & tracking
- Malicious file upload prevention
- Controlling file upload size
- Limiting upload by extension type
- Admin login activity logging
- Blocking automated vulnerability scanners
- Admin brute force protection
- Fake search engine bots blocking
- File Injection/Webshell protection
- Code Injection protection
- Directory traversal protection
- Automatic blocking of known hackers
- Layer 7 DDoS protection
- Smart honeypot system to trap hackers
- Rate limit web requests
- Automatic spam blocking
- Content stealing & scraping prevention
- Preventing spam comments
- Htaccess security
- No latency (Our turbo security engine takes less than0.002s to detect threats)
Hack Removal & Malware Scanner
- Website Anti-virus & Anti-malware engine
- Fixing SEO spam / SEO poisoning (Japanese, Pharma or Gibberish hack), website redirect hack, admin panel hack
- Fixing Credit Card or Payment Checkout Page hack
- Fixing defaced websites
- Backdoor removal
- Ever updating rules engine
- Powered by community learning
- Database security
Blacklist Monitoring
- Website Anti-virus & Anti-malware engine
- Fixing SEO spam / SEO poisoning (Japanese, Pharma or Gibberish hack), website redirect hack, admin panel hack
- Fixing Credit Card or Payment Checkout Page hack
- Fixing defaced websites
- Backdoor removal
- Ever updating rules engine
- Powered by community learning
- Database security
Intuitive Dashboard & Reporting
- Super easy to use dashboard
- Threat analytics
- Trusting or Blocking IPs / IP ranges
- Trusting or Blocking Countries
- Hourly admin area login summary
- Whitelist or Blacklist GET/POST/URLS
- Available in all major languages
- Information about threat origin country, browser, device, etc.
- One click security for your entire business
Continuous Reports to Keep You Posted (Email & Slack)
- Daily email reports giving summary of attacks stopped by Astra
- Hourly login summary to track successful & failed login attempts
- Slack notifications: set custom rules to notify specific events on slack
Human Support
- 24×7 chat & email support
- Our real human support, known to go an extra mile to bring a smile
- Giving hackers a friendly channel to report any vulnerability in your website
- Every vulnerability reported by hackers validated by our security experts and only valid submissions reach you
- Under the program policy, hackers cannot make any bugs on your website public
Astra Security Seal
- Shows you are a security conscious company
- Your customers feel more confident in sharing their personal information
- Leads to less shopping cart abandonment
- More conversions on the website – study would increase in 9.7% in conversion of one website due to Astra seal!
Product Demo
Astra Security Demo – https://demo.getastra.com/hey-there
Benefits For Customers
More Security Gives More Confidence in your website.
With Astra protecting your website, customers do not have to worry about security of their information. Their data is secure & miles away from hackers. Credit card hacks, loss of person information etc can’t touch your website now
Our Clients
Brands like Hotstar, Oman Airways, FirstPost, Gillette, DollsKill, LIC, African Union, Ford, Oman Airways, Kotak Bank, Tata Power, Xeno & many more trust Astra for their security.
Common WordPress Malware Attacks Prevented by Astra
Astra’s WordPress security suite can help you to fix & prevent the below mentioned attacks.
- Brute force attacks
- Pharma hack
- WordPress redirect hack
- Japanese keyword hack
- SEO spam hack
- XSS or cross-site scripting hack
- WP-VCD Malware
- SQL injection
- Credit Card Malware Hack
- Google Blacklist hack
- Google Adwords Account Suspension
- Cookie stealing & session hijacking
- WP phishing hack
- Favicon.ico malware hack
- WP-Feed.php & WP-Tmp.php
- WP Backdoor hack
- Coinhive hack (Crypto Mining Malware)
- WordPress deface hack
- Deceptive Site Ahead
- Monetization Hack (monit.php)
Installation
1.Install Astra Security automatically or by uploading the ZIP file.
2.Go to the installed plugins section and ‘Activate‘ the Astra Security plugin.
3.‘Astra‘ will render in the bottom left corner of your admin panel. Click on ASTRA.
4.If you are already a customer, click on the ‘Connect to Astra’ option. If you are a new customer, follow the steps shown there on the panel.
5. On clicking the ‘Connect to Astra‘ button, you will be taken to the Astra dashboard. Click on ‘Install‘ there and you are done.
Screenshots
The dashboard gives a bird's eye view of your website's security. It shows, the total number of attacks stopped, number of attacks vs the dates, the origin of the attacks, etc. This overview can be customized for the desired time-period.
The 'Threats' tab shows the details of the stopped threats like attack vector, attack origin, browser used, etc. A user can block/trust an IP/parameter using this section.
In the 'Threats' section, again, a user can define certain exception rules as specific to the nature of his work. Astra firewall will skip monitoring those requests/parameter.
You can whitelist request parameters, allow HTML/JSON code or disable Astra firewall on certain URLs. A successfully added exception will show in the list below
The 'Login Activity' tab shows the attempted and yet logins to your website. Each entry contains details like country, IP, etc. 6.The 'Malware Scan' tab is where a user can run malware scans. The results of which are also shown in this section. Details of malicious files are shown, plus it also enables a user to delete a malicious file from the dashboard itself.
The 'Settings' tab gives you a number of options to customize your experience even further.
Hub' is where added security solutions for your website render. Like the 'Health check' 'GDPR consent bar' etc. You can expect to have more utilities here in the future.
The malware scan result reveal the security problems in your website. It also lists all the malicious files in the section named 'Scan Results'.
The 'Security Audit' tab contains details of vulnerabilities found in the user's website. It also categorizes the vulnerabilities on the basis of severity.
The 'Security Audit' tab details about each reported vulnerability on the website.
FAQ
No, it is a paid plugin. You need to choose a plan as per your website requirement from our pricing page. You can start as low as $24/month & can enjoy rock-solid WordPress security.
We define a website as a Fully Qualified Domain Name (FQDN). When using Content Management Systems (CMS), a website is defined as a unique CMS installation. If an FQDN is linked with a sub-directory, it will require its own license.
For more info visit – How does Astra’s pricing work per domain or server
Yes, we have highly-skilled professionals who clean your hacked website the same day. We backup your website & use a combination of highly sophisticated automated tools & human intelligence to remediate your website. You are entitled to unlimited cleanups with an active subscription. Click here to get started.
Astra security plugin is highly tailored for WordPress & don’t conflict with any plugin or feature in your site. In case you face any problem we are just a message away. We are known for our super fast support.
Absolutely! Our security analysts are available via chat & email 24×7. All websites protected with Astra get amazing support backed by a highly-skilled engineering team.
No, your website does not become slow. We have engineered Astra to scale with your website without any latency. Our security engine runs on your server & only takes 0.002s to detect threats. No need to change your DNS settings & route your traffic across the world. Astra will never slow down your website or create any downtime whatsoever.
We understand that website downtime can be costly and ensure that your website is back online in no time.
Astra’s hacker tested firewall protects your website against SQLi, XSS, LFI, RFI, Bad Bots, Spam & 100+ threats in real-time. Apart from OWASP’s top 10 threats found in websites, the firewall is tailored to protect against known CVE’s. Our intelligent firewall detects visitor patterns on your website & automatically blocks hackers with malicious intent. Further, you can use the Astra firewall in monitoring or blocking mode as per your preference.
Astra’s malware scanner tracks file changes to your website, plus any change in your website code is logged within the Astra dashboard where you can review them.
Astra’s machine-learning powered on-demand malware scanner is available to you 24×7. In addition to the Automatic daily scans, you can also schedule the scans in Astra malware scanner. Astra malware scanner is available to you whenever and as many times as you like. Please check screenshots & demo for more info.
The reporting and alerting in Astra is pretty straight-forward. The threats tab in the Astra dashboard gives you a bird’s eye view of your website’s security. You also get detailed drilled down information about the attacks stopped attacker’s profile, attack origin, most attacked areas of the website. Astra monitors 60+ security engines daily to check if your website has been blacklisted.
Astra sends you daily/ weekly scan reports directly to your email as per your preference.
With Astra, you get options to block/trust IP, IP ranges blocking/whitelisting, Geolocation blocking/whitelisting, Country blocking/whitelisting, Parameter blocking/whitelisting, etc.
Yes, Astra has a fully-fledged Agency plan. You can learn more about it here.
Yes, Astra is compatible with multi-site installations. All the websites are easily managed within a single dashboard. Astra also provides a combined overview of all your sites. This eases the management for you.
Here are the Terms & Conditions of the Service.
Yes, Astra checks for cookie security, header security, HTTP security and 140+ other security measures in its ‘Health Check’ feature.
Trustpilot & Capterra are two platforms where you can see Astra Security’s testimonials.
Changelog
Initial public release of Astra Security Suite – Firewall & Malware Scan.