Patch Fast. Observe Everything. Keep It Boring.

By: Oussama Jarrousse When a software patch is released, a race begins. On one side, attackers rush to reverse-engineer the patch, understand the vulnerability it fixes, weaponize it, and start attacking systems that are still vulnerable. On the other side,...

Bringing WordPress Security into the Observability Stack

By: Oussama Jarrousse At Simula, we believe that if you cannot observe a system, you cannot reliably operate it. We apply that philosophy to all our services, including our managed WordPress hosting service. That means continuously monitoring not only availability and...

How Observability Helped Us Stay Ahead of the wp2shell Incident

By: Oussama Jarrousse In July, the WordPress ecosystem experienced another reminder that even the most widely used platforms can be affected by newly discovered security vulnerabilities. While the technical details of the so-called “wp2shell”...

Security Telemetry for Wordfence

Description Simula Security Telemetry for Wordfence exports Wordfence security telemetry in two forms: Prometheus metrics for the node_exporter textfile collector that can be scraped by Prometheus A local incident log containing blocked Wordfence requests that can be...