Title: ARACNE Security Author: CERWALL_SOLUTIONS Published: 5. новембар 2026. Last modified: 5. новембар 2026. --- Претражи додатке ![](https://ps.w.org/aracne-security/assets/banner-772x250.png?rev=3786038) ![](https://ps.w.org/aracne-security/assets/icon-256x256.png?rev=3786038) # ARACNE Security Аутор: [CERWALL_SOLUTIONS](https://profiles.wordpress.org/jfernandezcerwall/) [Преузми](https://downloads.wordpress.org/plugin/aracne-security.1.1.8.zip) * [Детаљи](https://sr.wordpress.org/plugins/aracne-security/#description) * [Рецензије](https://sr.wordpress.org/plugins/aracne-security/#reviews) * [Постављање](https://sr.wordpress.org/plugins/aracne-security/#installation) * [Развој](https://sr.wordpress.org/plugins/aracne-security/#developers) [Подршка](https://wordpress.org/support/plugin/aracne-security/) ## Опис ARACNE analyses the exposure of your WordPress site and applies basic hardening measures. Everything runs on your own server. * **Exposure scanner** — checks for publicly accessible sensitive files (.env, . git, wp-config backups, debug.log), XML-RPC, user enumeration, visible version, security headers, directory listing, readme.html, the file editor, the „admin“ user, the table prefix, the PHP and WordPress versions and WP_DEBUG. It also reports common signs of intrusion: administrators hidden from the Users screen, administrators with a wordpress.org email, must-use plugins without a header and plugins that pose as part of WordPress. * **Security score** — a rating from 0 to 100 with an explanation of each risk. * **Basic hardening** — blocks user enumeration, hides the WordPress version, blocks readme.html/license.txt, removes X-Powered-By, hides the REST index, makes login errors generic, disables the file editor, and optionally disables XML-RPC and Application Passwords. #### ARACNE Pro ARACNE Pro is a paid add-on, distributed by Cerwall from aracne.cerwall.com, that adds a WAF, protection profiles, progressive IP blocking, a bot filter, IP lists, security headers and CSP, .htaccess management, integrations with site management platforms, reports and alerts. This free version works without the add-on and has no time limit. #### External services The scanner only sends HTTP requests to your own site. This plugin can connect to the ARACNE service at https://aracne.cerwall.com, operated by Cerwall Solutions S.L., to register the installation. The connection is disabled by default and is only made after an administrator enables the installation notice in ARACNE Ajustes. From then on the site sends, when the option is enabled and then once a day: the installation ID, the site URL, the administrator email, the WordPress version and the plugin version. Disabling the option stops the requests. * Service: https://aracne.cerwall.com * Privacy policy: https://cerwall.com/terms * Legal notice and terms of use: https://cerwall.com/aviso ## Снимци екрана [⌊Exposure scanner: security score from 0 to 100 and each risk found, with what it is, why it matters and how to fix it.⌉⌊Exposure scanner: security score from 0 to 100 and each risk found, with what it is, why it matters and how to fix it.⌉[ Exposure scanner: security score from 0 to 100 and each risk found, with what it is, why it matters and how to fix it. [⌊Basic hardening settings and the optional installation notice, disabled by default.⌉⌊ Basic hardening settings and the optional installation notice, disabled by default .⌉[ Basic hardening settings and the optional installation notice, disabled by default. [⌊Checks that already pass, with a short explanation of each one.⌉⌊Checks that already pass, with a short explanation of each one.⌉[ Checks that already pass, with a short explanation of each one. ## Постављање 1. Install the plugin from Plugins Add New, or upload the `aracne-security` folder to `/wp-content/plugins/`. 2. Activate it from the Plugins screen. 3. Open **ARACNE Escáner** to see the score and **ARACNE Ajustes** to configure hardening. ## ЧПП ### Does it send data outside my site? No, unless you enable the installation notice in Ajustes. ### What changes when ARACNE Pro is installed? The add-on is activated alongside this plugin and adds its modules to the same menu. The settings of this version are kept. ### What is removed when the plugin is deleted? Deleting it from the Plugins screen removes its settings, temporary data, scheduled tasks and its block in the .htaccess file. If ARACNE Pro is still installed, the data the add-on needs to keep its license is kept. ## Рецензије Нема рецензија за овај додатак. ## Сарадници и градитељи „ARACNE Security“ је софтвер отвореног кода. Следећи људи су допринели овом додатку. Сарадници * [ CERWALL_SOLUTIONS ](https://profiles.wordpress.org/jfernandezcerwall/) [Преведите „ARACNE Security“ на свој језик.](https://translate.wordpress.org/projects/wp-plugins/aracne-security) ### Заинтересовани сте за развој? [Прегледајте кôд](https://plugins.trac.wordpress.org/browser/aracne-security/), погледајте [SVN складиште](https://plugins.svn.wordpress.org/aracne-security/) или се претплатите на [дневник развоја](https://plugins.trac.wordpress.org/log/aracne-security/) преко [RSS-а](https://plugins.trac.wordpress.org/log/aracne-security/?limit=100&mode=stop_on_copy&format=rss). ## Дневник измена #### 1.1.8 * The readme describes the plugin screenshots. #### 1.1.7 * The scanner reports signs of intrusion: hidden administrators, administrators with a wordpress.org email, must-use plugins without a header and plugins that pose as part of WordPress. #### 1.1.6 * The setup wizard names the button that finishes it as it appears on screen. #### 1.1.5 * The main plugin file is named after the plugin slug: aracne-security.php. * The scanner styles and notices are loaded with wp_enqueue_style() and wp_add_inline_script() instead of inline tags. * The .htaccess block is removed through the WordPress Filesystem API, without error suppression. * The External services section links to the service, its privacy policy and its legal notice. #### 1.1.4 * The admin screens use the Open Sans font bundled with the plugin (SIL Open Font License 1.1) and no longer load fonts from external servers. * The REST API users check builds its URL with rest_url(), so it works with custom REST prefixes. * The Contributors field lists the plugin owner’s WordPress.org username. #### 1.1.3 * Coding standards: the WordPress core constant DISALLOW_FILE_EDIT is documented as an allowed exception to the plugin prefix rule. * The installation instructions name the aracne-security folder. #### 1.1.2 * The text domain matches the WordPress.org slug, aracne-security; translations are loaded from WordPress.org. #### 1.1.1 * The help and ARACNE Pro links point to cerwall.com. * Request data is unslashed and sanitized before use, and the admin views escape all output. * Tested with WordPress 7.1. #### 1.1.0 * User enumeration blocking also covers the WordPress users sitemap. * The scanner verifies the certificate in requests to the site itself, and its token is only valid for the URL it checks. * Deleting the plugin removes its settings, temporary data, scheduled tasks and its .htaccess block. #### 1.0.0 * Initial release: exposure scanner, security score and basic WordPress hardening. * Optional installation notice, disabled by default. ## Мета * Издање **1.1.8** * Последње ажурирање **пре 3 дана** * Активних постављања **Мање од 10** * Издање Вордпреса ** 5.6 или новије ** * Испробано до **7.1.4** * PHP издање ** 7.4 или новије ** * Језик * [English (US)](https://wordpress.org/plugins/aracne-security/) * Ознаке * [hardening](https://sr.wordpress.org/plugins/tags/hardening/)[scanner](https://sr.wordpress.org/plugins/tags/scanner/) [security](https://sr.wordpress.org/plugins/tags/security/)[user enumeration](https://sr.wordpress.org/plugins/tags/user-enumeration/) [xml-rpc](https://sr.wordpress.org/plugins/tags/xml-rpc/) * [Напредни преглед](https://sr.wordpress.org/plugins/aracne-security/advanced/) ## Оцене Још нису послате рецензије. [Ваша рецензија](https://wordpress.org/support/plugin/aracne-security/reviews/#new-post) [Види све рецензије](https://wordpress.org/support/plugin/aracne-security/reviews/) ## Сарадници * [ CERWALL_SOLUTIONS ](https://profiles.wordpress.org/jfernandezcerwall/) ## Подршка Имате нешто да кажете? Потребна вам је помоћ? [Види форум подршке](https://wordpress.org/support/plugin/aracne-security/)