WPScan cheap alternative with centralized control

[ivancarlos]

Hi team,

Someone suggest any cheal alternative of WPScan that points vulnerability in Wordpress? If integrated with MainWP, much better.

I am just looking to manage vulnerabilities, not a big security bundle like wordfence that does everything. WPScan is the vest option but it jumps from a very limitade free use to Jetpack standalone solution or a massive and expensive Enterprise solution

Thanks and regards

[josklever]

There’s a free MainWP extension available developed by @mwp-haha-hrbrt-com that’s available on GitHub - herbie4/mainwp-check-plugins-vulnerability-extension: Extension for MainWP Dashboard. Checks the child websites plugins for vulnerability using the WordFence intelligence api.

It uses the free Wordfence database to scan for vulnerable plugins.

[mwp-haha-hrbrt-com (Herbert H)]

Hello Ivan,
Did you check out the suggestion from Jos already? I created that plugin so if you have any questions or suggestions just let me know.
Kind regards, hrbrt

[harrybrook152 (Skin Care)]

@ivancarlos

Hi team,

Someone suggest any cheal alternative of WPScan that points vulnerability in Wordpress? If integrated with MainWP, much better.

I am just looking to manage vulnerabilities, not a big security bundle like wordfence that does everything. WPScan is the vest option but it jumps from a very limitade free use to Jetpack standalone solution or a massive and expensive Enterprise solution

A solid single solution to consider is Security Ninja.

Security Ninja

• Overview: Security Ninja provides a robust set of tools specifically for WordPress security checks. It scans for vulnerabilities, outdated plugins/themes, and security loopholes.
• Integration with MainWP: While it doesn’t integrate directly out of the box, you can manage multiple installations easily by installing the plugin on each site and accessing the results manually. Custom scripts could potentially be developed for more streamlined reporting.
• Cost: Security Ninja offers a free version with limited checks and a premium version that is more affordable than comprehensive solutions like WPScan’s Enterprise package.

This should meet your need for a vulnerability management tool without the extensive features of larger security suites.

[ivancarlos]

I will look for that, thank you so much!

I had a meeting with a WPScan presale and it’s quite expensive, this extension maybe solve it, I am looking it right now, thanks!