Title: Stalza Security
Author: Fuad K M
Published: <strong>2026-يىلى 29-سېنتەبىر</strong>
Last modified: 2026-يىلى 6-ئۆكتەبىر

---

قىستۇرما ئىزدە

![](https://ps.w.org/stalza-security/assets/banner-772x250.png?rev=3730060)

![](https://ps.w.org/stalza-security/assets/icon-256x256.png?rev=3724419)

# Stalza Security

 يازغۇچى [Fuad K M](https://profiles.wordpress.org/fuadkm/)

[چۈشۈر](https://downloads.wordpress.org/plugin/stalza-security.1.2.1.zip)

 * [تەپسىلاتلار](https://ug.wordpress.org/plugins/stalza-security/#description)
 * [باھالاشلار](https://ug.wordpress.org/plugins/stalza-security/#reviews)
 *  [ئورنىتىش](https://ug.wordpress.org/plugins/stalza-security/#installation)
 * [ئىجادىيەت](https://ug.wordpress.org/plugins/stalza-security/#developers)

 [قوللاش](https://wordpress.org/support/plugin/stalza-security/)

## چۈشەندۈرۈش

Stalza Security protects your site without weighing it down. Instead of hundreds
of generic warnings, it tells you **what changed, why it matters, how confident 
the detection is, and what to do**.

**Detect  Correlate  Assess Risk  Explain  Protect  Verify**

#### Free features

 * **File & WordPress integrity** — core, plugin and theme checksums plus a local
   baseline for everything else.
 * **Malware detection** — heuristic analysis of PHP, JS and .htaccess files; no
   signature database needed.
 * **Vulnerability detection** — daily check of your installed components against
   known advisories (opt-in).
 * **Brute-force protection** — login, XML-RPC and REST user-enumeration limits 
   with escalating lockouts.
 * **Security hardening** — one-click fixes and clear advisories for common misconfigurations.
 * **Security events & reports** — a single timeline of what happened, with a weekly
   digest.

#### Designed to be light

 * Zero frontend queries unless a login attempt is being evaluated.
 * Scans run in small resumable chunks with CPU and memory budgets.
 * No autoloaded option bigger than 50 KB. No bundled React runtime — uses the one
   WordPress already ships.

#### Premium

[Stalza Security Pro](https://stalza.com/stalza-security) extends the same engine
with cloud threat intelligence, real-time protection, behavioral analysis, automatic
remediation, IP reputation and advanced alerting.

### External services

This plugin works fully offline by default. **Nothing is sent anywhere until you
opt in.**

If you enable _Vulnerability intelligence_ in Settings, the plugin sends the slugs
and version numbers of your installed WordPress core, plugins and themes, plus your
site URL, to `https://stalza.com/api/stalza-security/v1/vulnerabilities/match` once
per day to receive matching security advisories. No user data, content or visitor
information is included. See the [Stalza privacy policy](https://stalza.com/privacy)
and [terms](https://stalza.com/terms).

Integrity checks fetch official checksums from WordPress.org (`api.wordpress.org`,`
downloads.wordpress.org`), the same service WordPress core uses for updates.

## ئورنىتىش

 1. Upload the plugin to `/wp-content/plugins/stalza-security/` or install it from 
    the Plugins screen.
 2. Activate it.
 3. Go to **Stalza Security** in the admin menu and run your first scan.

## FAQ

### Does it slow down my site?

No. On the frontend the plugin does nothing unless a login, XML-RPC or user-listing
request is being evaluated. Scans run in the background in small chunks.

### Does it send data to Stalza?

Only if you enable vulnerability intelligence, and then only component names and
versions. See «External services» above.

### Is it compatible with other security plugins?

Yes, but running two brute-force limiters can double-count attempts. Disable one.

## باھالاشلار

بۇ قىستۇرمىغا تېخى باھا يېزىلمىدى.

## تۆھپىكار ۋە ئىجادكار

«Stalza Security» كودى ئوچۇق يۇمشاق دېتال. تۆۋەندىكى كىشىلەر بۇ قىستۇرمىغا تۆھپە
قوشقان.

تۆھپىكار

 *   [ Fuad K M ](https://profiles.wordpress.org/fuadkm/)

[«Stalza Security» نى تىلىڭىزغا تەرجىمە قىلىڭ](https://translate.wordpress.org/projects/wp-plugins/stalza-security)

### ئىجادىيەتكە قىزىقامسىز؟

[كودقا كۆز يۈگۈرتۈپ](https://plugins.trac.wordpress.org/browser/stalza-security/)،
[SVN خەزىنە](https://plugins.svn.wordpress.org/stalza-security/) تەكشۈرۈپ ياكى [RSS](https://plugins.trac.wordpress.org/log/stalza-security/?limit=100&mode=stop_on_copy&format=rss)
ئارقىلىق [ئىجادىيەت خاتىرىسى](https://plugins.trac.wordpress.org/log/stalza-security/)
گە مۇشتەرى بولغىلى بولىدۇ.

## ئۆزگىرىش خاتىرىسى

#### 1.2.1

Bug Fixes:

 * core: drop all plugin tables on uninstall; correct feature matrix versions
 * integrity: skip content-verified silence index.php in uploads

#### 1.2.0

Features:

 * snapshot: add posture Collector with stable payload hash
 * snapshot: add Repository with retention prune
 * snapshot: add snapshots table and bump DB version to 3
 * snapshot: add structured Diff for posture payloads
 * snapshot: admin Snapshot tab, Dashboard card, and settings
 * snapshot: auto-capture on updates with cooldown and dedupe
 * snapshot: REST API and SnapshotModule registration
 * snapshot: settings defaults and REST allowlist

Bug Fixes:

 * snapshot: capture at bulk batch end; defer core marker until success
 * snapshot: lint-clean admin UI and use ConfirmDialog for delete
 * snapshot: stop list endpoint decoding full payloads; harden release build

#### 1.1.1

Bug Fixes:

 * login: use site hostname as TOTP authenticator issuer

#### 1.1.0

Features:

 * login: add free-tier two-factor authentication
 * login: free-tier two-factor authentication
 * vuln: allow filtering the live vulnerability match URL
 * vuln: live match URL filter + fixture fallback docs

Bug Fixes:

 * ci: satisfy prettier and PHPCS for live-vuln merge
 * ci: stylelint empty-line rules in style.scss
 * vuln: use offline label for fixture source

#### 1.0.1

Fixes:

 * WordPress.org review prep: declare submitter as contributor; confirm Plugin URI
   and privacy/terms links on stalza.com
 * Admin list tables use shared DataTable + server pagination

Full history: https://stalza.com/docs/stalza-security/changelog

## Meta

 *  Version **1.2.1**
 *  ئاخىرقى يېڭىلانغان ۋاقىت **2 كۈن بۇرۇن**
 *  ئاكتىپ ئورنىتىش سانى **10 دىن ئاز**
 *  WordPress نەشرى ** 6.0 ياكى يۇقىرى **
 *  **7.1.3** دا سىنالغان
 *  PHP نەشرى ** 7.4 ياكى يۇقىرى **
 *  تىل
 * [English (US)](https://wordpress.org/plugins/stalza-security/)
 * بەلگە
 * [Brute Force](https://ug.wordpress.org/plugins/tags/brute-force/)[firewall](https://ug.wordpress.org/plugins/tags/firewall/)
   [integrity](https://ug.wordpress.org/plugins/tags/integrity/)[malware](https://ug.wordpress.org/plugins/tags/malware/)
   [security](https://ug.wordpress.org/plugins/tags/security/)
 *  [ئالىي كۆرۈنۈش](https://ug.wordpress.org/plugins/stalza-security/advanced/)

## دەرىجە

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/stalza-security/reviews/#new-post)

[بارلىق ئىنكاسنى كۆرسەت](https://wordpress.org/support/plugin/stalza-security/reviews/)

## تۆھپىكار

 *   [ Fuad K M ](https://profiles.wordpress.org/fuadkm/)

## قوللاش

چۈشەندۈرۈشىڭىز بارمۇ؟ ياردەم لازىممۇ؟

 [قوللاش مۇنبىرىنى كۆرسەت](https://wordpress.org/support/plugin/stalza-security/)