The Early Warning Audit is Watchful’s persistent scanner that looks for signs of intrusion on your site. It performs a security scan for WordPress and Joomla sites in your Watchful dashboard up to 8 times per day. The scan looks for changes in critical system files, plugins/extensions that have been Read more…
The building block of any web agency is the trust bestowed upon it by the client. A client trusts your agency to deliver secure websites and online services, but it goes far beyond that: most clients automatically assume that your web agency security is also top-notch. After-all, the client is Read more…
Last week, I interviewed Vic Drover, the co-founder of Watchful. This was part of an online Joomla user group, hosted by Joomlashack. Vic talked about the background of Watchful and went over many of the key features. If you’re new to Watchful, or curious about how it can benefit your Read more…
The Joomlashack Conference was a three day online event that took place in early November. This was a free conference featuring the best speakers from around the Joomla world. Plus, somehow, Vic Drover, the CEO of Watchful, was invited too 🙂 As one of the bigger companies in Joomla, Watchful Read more…
We all have people helping us with maintenance. Wherever you live, people will come by to collect your trash, sweep the streets, and make sure everything is running smoothly. Up here in Wisconsin, where I live, people clean the highways whenever the snow falls. Down in Florida, where some good Read more…
For many years, private sites — those protected with basic authentication, a.k.a. htpasswd — could be managed in Watchful by simply embedding the basic authentication credentials in the site and administrator url fields. For example: user:password @ domain.com However, this did not allow uptime monitoring of protected sites. As a result, we baked in Read more…
We have recently released new versions of our Joomla Client (v1.12.2), WordPress Client (v1.0.2) & the SSO Plugin for Joomla (v1.3). New Joomla & WordPress Clients The updated Joomla and WordPress clients improve the way we authenticate calls from the Watchful server so as to avoid a theoretical timing attack:Â http://php.net/manual/en/function.hash-hmac.php#111435). Read more…
Update, 2021-05-24: Please review the current status of YubiKey support here. Today we are pleased to announce that YubiKey support has been added as a 2-factor authentication method for protecting your Watchful account. Two-factor authentication is an industry-standard for preventing unwanted access to accounts and devices. As one of the Read more…
This week the Joomla project released an important update for its 3.6 series: Joomla 3.6.4. Since this version included a patch for an important security issue, Joomla published an announcement a few days prior stating the exact release date and time to help users prepare and plan for the update. Read more…
Website developers and owners must remain vigilant to the emerging threats in Joomla and its ecosystem of extensions and templates. Use the Joomla security resources below to learn the best methods of building and maintaining safer websites. 1. Joomla security checklist The Joomla Security Checklist is the perfect place to start when Read more…