Free WordPress plugins and themes

ZAIA Security checks the context of every sensitive action on your site: login, registration, lost password, comments, WooCommerce checkout and REST API writes. It does not replace WordPress accounts: it makes sure the request really comes from your site, from the same device, and that the behaviour stays plausible.

What ZAIA detects

• bots and automated scripts;
• credential stuffing (stolen password attempts);
• replay of captured requests and stolen sessions reused elsewhere;
• bursts of requests and impossible country changes.

Safe for your site

• observation mode on install: everything is checked and logged, nothing is blocked;
• if ZAIA does not respond, your site keeps working;
• application passwords, WP-CLI, cron and server integrations are never affected.

Optional: passwordless sign-in for your visitors (« Continue with Google » or an email code), placed and styled from Settings → ZAIA, no code needed.

Building a new web or mobile app and want to keep the people who already have an account on your WordPress site? NEWTIV Migrate exports your users and your content to one encrypted file. Password hashes can be included: your app checks the usual password exactly like WordPress does, and nobody has to reset it.

What is exported

• users: username, email, name, registration date, roles and, optionally, the password hash, profile fields and WooCommerce addresses;
• content: posts, pages, products and custom post types, with categories, tags, custom fields and author;
• comments (without IP addresses) and the media library list.

Security first

• the file is always encrypted with the passphrase you choose (Argon2id and XChaCha20-Poly1305);
• the file is streamed to your browser and never stored on the server;
• only administrators can export, and they must type their password again; the last 20 exports are logged;
• no connection to any external service.