Login Security & Two-Factor Authentication
TOTP, Passkeys, Trusted Devices, Backup Codes, Brute-Force Protection, 2FA Enforcement Policies, New-Device & New-Country Alerts, Session Hijacking Detection
Country & Threat-Intel Blocking
Country Blocking, Threat-Intel Blocklists, Datacentre & Cloud IP Blocking, Proxy/CDN Header Support, Verified Crawler Exemption, Cross-Site List Sharing
Bot Shield
AI Crawler Blocking, Rate Limiting, Honeypot Trap, Behavioral Detection, Canary Trap, Admin-Area Honeytoken
File Integrity & Vulnerability Scanning
Core File Integrity Checking, Auto-Restore & Quarantine, Known-Modifications Allow list, Incident Timeline, Plugin Self-Integrity Checking, Vulnerability Scanning
Monitoring, Scoring & Audit
Composite Threat Scoring, Site-Wide Anomaly Alerting, Tamper-Evident Audit Log, Health Score, Dashboard Widget, Webhook Alerts & Email Digest, Client-Ready Security Report
Hardening & Site Configuration
XML-RPC Hardening, REST API Hardening, Upload Folder Execution Hardening, Security Headers, security.txt Generator, Login URL Hiding, Local Request-Pattern Detection, Page Builder Bypass Allow list, White-Label Branding, WP-CLI Support, Emergency Bypass
Ready to stop trusting a name instead of a network?