Gauntlet Security

Gauntlet Security, once installed, adds a special section in your Tools backend menu where webmasters can run any time they want a quick security audit of their WordPress installation.

The plugin will go through a series of built-in checks and display the results with suggestions on how to improve or secure the site against possible problems and detected vulnerabilities.

Using Gauntlet Security does not protect a site from being hacked and neither does the plugin automatically fix any detected problems.

With the results of the Gauntlet Security scan admins must take action themselves and use the provided information to fix their site and make sure they don't expose their or their clients' data through common and well-known security loopholes.

Installation:

Unpack and upload it to the /wp-content/plugins/ directory.
Activate the plugin through the 'Plugins' menu in WordPress.

What is new in this release:

• New test:
• Prevent access to stray non-Wordpress files which could be useful to attackers
• Remove test:
• Shellshock test (not an ongoing concern)
• Enhancement:
• User enumeration test checks users with posts
• Increase reliabilty if site is using a self-signed TLS certificate
• Added common usernames (thanks to Viktor Szepe & Simon Fredsted)
• Allowance for overriding requirements check

What is new in version 1.2.1:

• New test:
• Prevent access to stray non-Wordpress files which could be useful to attackers
• Remove test:
• Shellshock test (not an ongoing concern)
• Enhancement:
• User enumeration test checks users with posts
• Increase reliabilty if site is using a self-signed TLS certificate
• Added common usernames (thanks to Viktor Szepe & Simon Fredsted)
• Allowance for overriding requirements check

What is new in version 1.1.2:

• Enhancement:
• File Permissions check includes more "why" and less "how"
• Shellshock check uses a more reliable method
• Fixed:
• Removed PHP short tags

Requirements:

• WordPress 3.4 or higher
• PHP 5.2 or higher

Limitations:

• Does not support WordPress in multi-site installations.