Security
Hardens WordPress. Login protection, form guards, country bans, automated scans.
$49.00 per year
Product details
- Hide admin login, guard pages, protected pages
- Lockouts with retry limits, lockout windows, ban lists and a login attempt log
- Firewall with off, watch only and block modes, an allow list and recorded activity
- Country blocking, using whatever the site sits behind
- Two step login with TOTP and QR code, plus recovery
- Malware scan of WordPress core and wp-content, checksum verified against what WordPress ships
- Quarantine and cleanup: move a suspect file out of reach, restore it, or discard it; repair a core file from the published copy, writing back only checksum matched files
- Expected files: mark a known file so real warnings stay meaningful
- WPScan vulnerability feed
- Automated scans daily or weekly, and after install, update, upload or form submission
- SVG upload sanitisation
- Form guard with reCAPTCHA and Turnstile
- Hardening: code execution blocking, disable file editing, block PHP in uploads, hide WordPress version, block user enumeration, disable XML-RPC, generic login errors, comment controls, account controls
- Security headers and HTTPS
- Activity log of what changed and who changed it
- Honest failure: when wordpress.org is unreachable the scan states core went unchecked entirely rather than implying a partial check
Guard pages
Protected pages
Accounts
Cover your tracks
Code execution
Hide admin login
SVG uploads
Form guard
Two step login