All Tools
Security ProPro

The protection a busy site needs.

Everything in the free Security Tool, plus two-factor sign-in, a firewall that bans repeat offenders for longer each time, country rules for your admin, and a clear record of who signed in and what changed.

Enquire about Security ProSee it in 5 minutes
An old padlock on a green wooden door

A password is no longer enough.

Two-factor sign-in

Authenticator apps, recovery codes shown once, and "trust this browser" for 30 days. Require it per role, with set-up during sign-in.

A firewall that learns

Bans escalate from 15 minutes to an hour, a day, then a week. Scanner tools are blocked on sight, and bursts of not-found requests are stopped.

Rate limits

Per-route limits for anonymous visitors: forms and search out of the box, and any route you add as a line of text.

Country rules

Allow or block countries for the admin and API, or for the whole site.

Breached passwords

An optional check against Have I Been Pwned. Only the first five characters of a hash ever leave your server.

Files you can trust

Engine files are compared every day with the official release for your version. Any difference raises a critical notice.

See it at work

Screens from our demo company, ACME Ltd. Every name and figure in them is made up.

The Security Pro overview with a health score of 88 per cent and one admin still without two-factor
The health check. A score, the figures that matter today, and each check with how to fix it - here, one admin still without two-factor.
The Sign-ins tab filtered to failures: repeated wrong passwords for one account and a script trying admin, root and test
Every sign-in, recorded. Filtered to failures: repeated wrong passwords for one account, and a script trying admin, root and test.
The Blocked tab with a locked account, two addresses banned for probing and two blocked by hand
Blocked, and for how long. A locked account, scanners banned for probing, and your own blocks for an address or a whole range.
The Two-factor tab listing every account, its role and whether it uses two-factor sign-in
Who uses two-factor. Every account, its role, and how many recovery codes are left. Reset someone's two-factor from its menu.
Setting up two-factor sign-in with a QR code, a typed key and a six-digit code box
Two-factor in a minute. Scan the code with any authenticator app, type the six digits, and save your recovery codes.

See it in 5 minutes

Turn on two-factor for yourself, then require it for your admins.

  1. Open Security in the sidebar. Overview shows your health score and each check.
  2. Click a check to see why it matters and how to fix it.
  3. Click Two-factor in the sidebar, scan the QR code with an authenticator app and type the six-digit code.
  4. Save your recovery codes somewhere safe - they are shown once.
  5. Open Security settings (the cog in the banner) and require two-factor for your admin roles.

What Security Pro adds

Security

  • Health check with fixes
  • Sign-in lockout and password rules
  • Scanner blocking

Security Pro Pro adds

  • Escalating bans for repeat offenders
  • Two-factor sign-in, per role
  • Per-route rate limits
  • Country rules
  • Breached-password check
  • Every signed-in session, sign out everywhere
  • Audit trail with CSV and JSON export
  • File integrity checks
  • Weekly summary

Moving up is seamless.

  • Security Pro takes over from Security and adopts its sign-in log, blocks and settings on first start.
  • Sessions: see every signed-in session, end one, or sign a person out everywhere.
  • Audit: sign-ins, password resets, two-factor events and the CMS's own audit events, kept for 180 days.
  • A weekly summary every Monday morning, as a notice and by email when mail is set up.
  • Two-factor secrets are sealed with AES-256-GCM; recovery codes are stored hashed.

Learn it step by step

Locking down sign-inTutorial - Beginner - 15 min Two-factor sign-in with Security ProTutorial - Beginner - 10 min

Goes well with

SecurityStart here: health check, lockout, password rules and scanner blocking.Free MessagesPrivate team chat, worth guarding with two-factor.Free SEO ProSee the dead ends real visitors hit while Security Pro stops the scanners.Pro
Something Security Pro does not do?

Ask Daisy for a Tool of your own, or Dot to build the pages around it.

Meet Dot and DaisyTool Builder, £59 a monthSite Builder, in Pro

Lock the front door properly.

Security Pro is a Pro Tool. Tell us about your site and we will set it up for you.

Enquire about Security ProBrowse all Tools