Title: ZAIA Security Author: newtiv Published: 13 Ekim 2026 Last modified: 13 Ekim 2026 --- Eklentilerde ara ![](https://ps.w.org/zaia-security/assets/icon.svg?rev=3744907) # ZAIA Security [newtiv](https://profiles.wordpress.org/newtiv/) tarafından [İndir](https://downloads.wordpress.org/plugin/zaia-security.1.0.0.zip) * [Detaylar](https://tr.wordpress.org/plugins/zaia-security/#description) * [Değerlendirmeler](https://tr.wordpress.org/plugins/zaia-security/#reviews) * [Kurulum](https://tr.wordpress.org/plugins/zaia-security/#installation) * [Geliştirme](https://tr.wordpress.org/plugins/zaia-security/#developers) [Destek](https://wordpress.org/support/plugin/zaia-security/) ## Açıklama ZAIA Security connects your site to [ZAIA](https://zaia.newtiv.com), a request-context verification service run by NEWTIV. It does not replace WordPress accounts: for every sensitive action, it checks that the request really comes from your site, from the same device, and that the behaviour stays plausible. **Actions checked** (your choice): * login (wp-login.php and WooCommerce), registration, lost password; * comments; * REST API writes from the browser (block editor, admin); * WooCommerce checkout. **Passwordless sign-in for visitors** (optional): « Continue with Google » or a code received by email, through the ZAIA sign-in page. In Settings ZAIA you choose the page where it appears, the format (inside the page, in a window, or full page) and its appearance (colour, corner radius, light or dark mode), with a preview, no code needed. Accounts stay in WordPress: an existing account is found by its verified email address, and, if you enable it and your site allows registration, a new account is created with the Subscriber role (Customer with WooCommerce) once ZAIA has verified the email address. Sign-in goes through wp_signon(), so other security plugins still apply. Visitor accounts never see the WordPress dashboard. **What ZAIA detects**: bots and scripts, credential stuffing, replay of captured requests, stolen sessions reused elsewhere, bursts of requests, impossible country changes. Addresses that pile up alerts are quarantined automatically. **Safe for your site**: * **observation** mode on install: everything is checked and logged in the ZAIA console, nothing is blocked; * if ZAIA does not respond, the site keeps working (configurable); * application passwords, WP-CLI, cron and server integrations are never affected. The plugin is ready for translation through translate.wordpress.org. ### External services This plugin relies on the ZAIA service (https://zaia.newtiv.com), operated by NEWTIV( Abidjan, Côte d’Ivoire). Nothing is sent until an administrator enters a ZAIA application identifier and server key in Settings ZAIA. What is sent, and when: * **From the visitor’s browser** (only on the forms you choose to protect, and on the sign-in page you enable): the ZAIA client script, bundled with the plugin, opens a session with https://zaia.newtiv.com/v1/handshake/ and adds ZAIA headers to the form. ZAIA receives the browser’s IP address, user agent, page origin and, if available, screen size, time zone and language. * **From your server**, when a protected form is submitted: a verification request to https://zaia.newtiv.com/v1/verify with the session headers, the visitor’s IP address and user agent. For a signed-in user, a technical identifier `wp:< user number>` is sent to https://zaia.newtiv.com/v1/users/grant. Passwords, content and order data are never sent. * **Passwordless sign-in** (only if enabled): the visitor uses the ZAIA sign-in page (https://zaia.newtiv.com/login/), shown in your page, in a window or full page. After sign-in, your server exchanges a one-time code at https://zaia.newtiv. com/v1/connect/token and receives the visitor’s identifier, email address and name. * **Configuration test** (the « Test » button in Settings ZAIA): https://zaia. newtiv.com/v1/app returns the application’s settings. The service: [Terms of use](https://zaia.newtiv.com/conditions) · [Privacy policy](https://zaia.newtiv.com/confidentialite)· [Service status](https://zaia.newtiv.com/statut). ZAIA offers a free plan (100,000 requests per month per application) and a custom Enterprise plan on quote. Every feature of this plugin works with the free plan. ## Yükleme 1. Create a free account on the [ZAIA console](https://zaia.newtiv.com/console/) and an application. 2. In the application: **Origins** tab, add your site address (`https://your-site. com`); **Authentication** tab, enable **public access** (for signed-out visitors). 3. In WordPress: **Settings ZAIA**, paste the public identifier (`app_…`) and the server key (`zsk_…`), or define the key in `wp-config.php`: `define('ZAIA_SERVER_KEY',' zsk_…');` 4. Click **Test**: the plugin checks the key, the origin and public access. 5. Watch the ZAIA console **Log** for a few days, then switch to **Enforce** mode. 6. Passwordless sign-in (optional): in the ZAIA console, **Sign-in** tab, enable hosted sign-in, choose the methods and declare the return address shown in Settings ZAIA. Then, in Settings ZAIA, tick the visitor sign-in option and choose the page, format and appearance. ## SSS ### My site is behind Cloudflare Settings ZAIA Visitor IP address: choose « Behind Cloudflare ». Otherwise ZAIA would see Cloudflare’s address instead of the visitor’s. ### Are cached pages checked? Page views are not checked (and can stay cached): only actions are. The ZAIA proof is added when the form is submitted. ### What happens when ZAIA asks for an extra verification? WordPress has no built-in two-factor authentication, so you choose: let the request through (default) or refuse it. ### Where does the sign-in appear? On the page chosen in Settings ZAIA (above or below its content), or wherever you place the `[zaia_login]` shortcode. Shortcode options: `display="inline|modal|page"`,` accent="#0a4fa3"`, `radius="8"`, `mode="light|dark|auto"`, `label`, `redirect`, ` account`, `logout="0"`. It is also offered on the WooCommerce « My account » page. The button on wp-login.php (admin login) is off by default. ### Can I adjust a decision? Filter `zaia_security_decision( $result, $action )`: for example to always let certain addresses through. ## İncelemeler ![](https://secure.gravatar.com/avatar/bb61deb3f754b5736965059c3619c1c396e07e83484d78be444ac5028b7ab607? s=60&d=retro&r=g) ### 󠀁[Great free plugin](https://wordpress.org/support/topic/great-free-plugin-180/)󠁿 [tahau](https://profiles.wordpress.org/tahau/) 14 Ekim 2026 So happy to see people who work hard for others. ![](https://secure.gravatar.com/avatar/ee359798586b7b0f89f518ab0005f209efff16f6e27303ee5c64147b0cc04056? s=60&d=retro&r=g) ### 󠀁[Congratulations](https://wordpress.org/support/topic/congratulations-99/)󠁿 [tah12](https://profiles.wordpress.org/tah12/) 13 Ekim 2026 I recommend this plugin. Great project! [ 2 incelemeyi oku ](https://wordpress.org/support/plugin/zaia-security/reviews/) ## Katkıda Bulunanlar ve Geliştiriciler “ZAIA Security” açık kaynaklı yazılımdır. Aşağıdaki kişiler bu eklentiye katkıda bulunmuşlardır. Katkıda bulunanlar * [ newtiv ](https://profiles.wordpress.org/newtiv/) “ZAIA Security” 2 dile çevrildi. Katkıda bulundukları için [çevirmenlere](https://translate.wordpress.org/projects/wp-plugins/zaia-security/contributors) teşekkürler. [“ZAIA Security” eklentisini dilinize çevirin.](https://translate.wordpress.org/projects/wp-plugins/zaia-security) ### Geliştirmeyle ilgilenir misiniz? [Kodu görüntüleyin](https://plugins.trac.wordpress.org/browser/zaia-security/), [SVN deposuna](https://plugins.svn.wordpress.org/zaia-security/) göz atın ya da [RSS](https://plugins.trac.wordpress.org/log/zaia-security/?limit=100&mode=stop_on_copy&format=rss) ile [geliştirme günlüğüne](https://plugins.trac.wordpress.org/log/zaia-security/) abone olun. ## Değişiklik Kaydı #### 1.0.0 * First release: verification of login, registration, lost password, comments, REST API and WooCommerce checkout; passwordless sign-in for visitors (Google, email code) placed and styled from Settings ZAIA; observation mode; configuration test. ## Meta * Sürüm **1.0.0** * Son güncelleme **1 gün önce** * Etkin kurulumlar **10dan fazla** * WordPress sürümü ** 6.0 veya üstü ** * Test edilen sürüm **7.1.3** * PHP sürümü ** 7.4 veya üstü ** * Diller * [English (US)](https://wordpress.org/plugins/zaia-security/), [Russian](https://ru.wordpress.org/plugins/zaia-security/) ve [Turkish](https://tr.wordpress.org/plugins/zaia-security/). * [Dilinize çevirin](https://translate.wordpress.org/projects/wp-plugins/zaia-security) * Etiketler * [bot protection](https://tr.wordpress.org/plugins/tags/bot-protection/)[Brute Force](https://tr.wordpress.org/plugins/tags/brute-force/) [login](https://tr.wordpress.org/plugins/tags/login/)[security](https://tr.wordpress.org/plugins/tags/security/) [woocommerce](https://tr.wordpress.org/plugins/tags/woocommerce/) * [Gelişmiş görünüm](https://tr.wordpress.org/plugins/zaia-security/advanced/) ## Puanlar 5 üzerinden 5 yıldız. * [ 2 5 yıldızlı inceleme ](https://wordpress.org/support/plugin/zaia-security/reviews/?filter=5) * [ 0 4 yıldızlı inceleme ](https://wordpress.org/support/plugin/zaia-security/reviews/?filter=4) * [ 0 3 yıldızlı inceleme ](https://wordpress.org/support/plugin/zaia-security/reviews/?filter=3) * [ 0 2 yıldızlı inceleme ](https://wordpress.org/support/plugin/zaia-security/reviews/?filter=2) * [ 0 1 yıldızlı inceleme ](https://wordpress.org/support/plugin/zaia-security/reviews/?filter=1) [Değerlendirmeniz](https://wordpress.org/support/plugin/zaia-security/reviews/#new-post) [Tüm değerlendirmeleri gör](https://wordpress.org/support/plugin/zaia-security/reviews/) ## Katkıda bulunanlar * [ newtiv ](https://profiles.wordpress.org/newtiv/) ## Destek Söyleyeceğiniz bir şey mi var? Yardım mı lazım? [Destek forumunu görüntüle](https://wordpress.org/support/plugin/zaia-security/)