A New Standard in
WordPress Security

Web Application Firewall

Inspects every request with a one-click learning mode.

Custom Firewall Rules

User-defined rules with multiple conditions.

VPN / Proxy / Tor / Blacklist Blocking

Blocks anonymizer, Tor exit-node and blacklisted IP traffic.

Bad Bot & Scraper Blocking

Stops bad bots, AI scrapers and vuln scanners.

Blackhole Trap

Honeypot that traps crawlers ignoring the rules.

Role-Based REST API Control

Allow/deny REST API access by namespace and role.

Security Headers & iFrame Shield

Hardened headers and clickjacking protection.

Hardening Switches (25+)

XML-RPC, directory listing, file editor, force HTTPS.

Rate Limiting

Throttles abusive request floods and scrapers.

Country & Continent Geoblocking

Block or allow traffic by country and continent.

Multi-Stage Malware Scan

Seven-stage scan of files, database and cron jobs.

Malware Signature Rules

Curated detection rules for known threats.

File Integrity Monitoring

Flags added, deleted and modified files.

Scheduled & Remote Scans

Automatic scans plus remote scan triggering.

Automatic Fix

One-click remediation for common findings.

VirusTotal Lookup

Cross-check flagged files against VirusTotal.

Quarantine / Restore

Quarantine, delete or restore the original file.

Permissions & Ownership Audit

Audits file permissions and ownership.

CAPTCHA (3 Providers)

reCAPTCHA, Turnstile and hCaptcha on 5 forms.

Role-Based 2FA

Two-factor auth with customizable methods.

Brute Force & Honeypot

Limits login attempts with honeypot traps.

Hidden Login URL

Hides the login page and login error details.

IP & Country Login Whitelist

Restrict login to trusted IPs, CIDRs and countries.

Login Time Restrictions

Role-based login hours per user role.

Signup Restrictions (Disposable Email)

Block disposable and throwaway email domains at registration.

Session Management

Max sessions, idle timeout and remote logout.

Strong Password Policy

Leaked-password check and reuse prevention.

Argon2 & Salt Rotation

Argon2 hashing with scheduled key rotation.

Password Expiration

Role-based password validity policy.

Custom Login Page

Brand the login page: logo, background, CSS.

Real-Time Live Traffic

Watch requests as they happen, in detail.

Traffic Replay & Inspection

Replay history with request/response inspection.

IP / CIDR / Country Blocking

Ban single IPs, ranges, countries or continents.

Activity Audit Log

Tracks who did what across users and content.

Plugin & Theme Reputation

Reputation score for every plugin and theme.

Vulnerability Alerts

Alerts for vulnerable installed plugins/themes.

Abandoned Plugin Alerts

Warns about abandoned and outdated extensions.

Downtime Monitor

Alerts the moment your site goes offline.

Nameserver Monitor

Watches your domain's nameservers for changes.

IP Monitor

Flags when your server's IP address changes.

MX Monitor

Tracks changes to your mail (MX) records.

SSL Monitor

Watches SSL certificate validity and expiry.

Domain Expiry Monitor

Alerts before your domain registration expires.

Blacklist / RBL Monitor

Continuously watches domain & IP blocklists (RBL).

SSL Health Check

Checks SSL health and security headers.

Database Optimizer

Optimizes tables and checks the table prefix.

Email Deliverability Test

Tests whether your site email is delivered.

Maintenance Mode

One-click maintenance mode and system info.

WP-Cron Viewer

Inspect scheduled WordPress cron tasks.

Blacklist / Reputation Check

Checks domain and IP reputation blocklists.