XeroWP
Polanger Admin Suite – Control & Customize WordPress Admin

Polanger Admin Suite – Control & Customize WordPress Admin

5/5 (1 ratings) 50 active installs Updated Jul 22, 2026
admin baradmin dashboardadmin menulogin securitymenu manager
Download v1.5.8

Polanger – Admin Suite is a powerful, all-in-one solution to fully control and optimize your WordPress admin experience.

Instead of installing multiple plugins for menu management, login security, dashboard cleanup, and activity tracking – Polanger brings everything together in one clean, modern interface.

Whether you’re a developer, agency, or site owner, Polanger helps you create a cleaner, safer, and more controlled WordPress admin panel.

Features

  • Modular admin suite: enable only the tools you need and keep wp-admin lightweight.
  • Menu Manager with hiding, renaming, reordering, custom icons, custom menu items, URL blocking, and Shield protection indicators.
  • Admin Bar, Login Page, Dashboard Center, Activity Log, and admin notice controls from one interface.
  • Login hardening with custom login URL, reCAPTCHA, Two-Factor Authentication, recovery keys, trusted devices, and brute-force protection.
  • Frontend Content Visibility for role-based access control on posts, pages, and supported custom post types.
  • Design System with theme presets, PG Aurora, smart contrast correction, scoped styling, typography, and live preview controls.
  • Comment Security Layer and Firewall addons for comment abuse, request scoring, bot probes, XML-RPC exposure, REST pressure, rate limiting, and lightweight event logging.
  • WooCommerce Security for store login, registration, lost password, reCAPTCHA, 2FA, and customer authentication rate limiting.
  • Polanger Shield for admin page blocking, element hiding, contextual notes, Demo Lock, Global Demo Mode, and safer client/admin demo workflows.
  • Maintenance Center for coming soon, maintenance, deployment, preview access, branded public messages, countdowns, and role-based bypass rules.

Why Polanger Admin Suite?

  • All-in-One Admin Control – Replace multiple plugins with one powerful solution
  • Clean & Organized Dashboard – Remove clutter and simplify your workflow
  • Enhanced Security – Protect login and track activity
  • Modern UI – Fast, intuitive, and easy to use
  • Built for Agencies & Teams – Perfect for multi-user environments

Core Features

Admin Menu Manager

  • Hide any admin menu or submenu item
  • Role-based visibility control
  • Rename menu items and submenus
  • Change icons with 200+ Dashicons
  • Drag & drop menu reordering
  • Block direct URL access to hidden pages
  • Visual indicators for hidden and modified items
  • Custom admin menu builder (create your own menus)

Admin Bar Customization

  • Replace or remove WordPress logo
  • Hide unwanted admin bar items
  • Add custom links with icons
  • Manage frontend and backend admin bar
  • Auto-detect plugin and theme items

Login Security & Customization

  • Custom login URL (hide wp-login.php)
  • Google reCAPTCHA v2 & v3 support
  • Custom login page design (logo, colors, background)
  • Brute force protection
  • Secure login flow enhancements

Two-Factor Authentication (2FA)

  • Email-based verification codes
  • Role-based enforcement
  • Recovery keys for backup access
  • Configurable expiration times
  • Super admin protection

Activity Log

  • Track logins, plugin changes, content updates, and more
  • Filter by user, action, and date
  • Export logs (CSV)
  • Email alerts for critical actions
  • GDPR/KVKK compliant logging

Dashboard Control

  • Hide default WordPress widgets
  • Hide third-party plugin widgets
  • Control admin notices
  • Create custom dashboard widgets
  • Per-user dashboard visibility

Multisite Control

  • Network-wide default settings for multisite installations
  • Site-level override controls for supported modules
  • Lock system for Menu Manager, Admin Bar, Login Security, Activity Log, and Dashboard Center
  • Network-aware addon activation support
  • Developer-friendly effective settings filter architecture

Access Control

  • Restrict plugin access to specific users
  • Read-only mode support
  • Prevent unauthorized access
  • Super admin safety protection

Design System

  • Token-based admin theming system for consistent and scalable customization
  • Customize colors across admin UI (sidebar, admin bar, background, text, surfaces)
  • Sidebar background, text color, and menu item styling
  • Admin bar background, text color, submenu background, and submenu text color
  • Built-in presets (e.g. Dark, Minimal, Default) with one-click application
  • Automatic CSS generation with cache-friendly performance
  • Smart contrast correction for readable text on both dark and light surfaces
  • Typography controls including font family and basic shape settings
  • Scoped styling to avoid conflicts with WordPress core and plugins
  • Extensible architecture for future themes, layouts, and design packs

Frontend Content Visibility

  • Per-content frontend access control for posts, pages, and supported custom post types
  • Visibility modes for public, logged-in users only, selected roles only, or hidden-from-selected-roles workflows
  • Multiple denied behaviors including login redirect, 404, access denied message, and custom redirect
  • Theme-friendly replacement mode or dedicated access denied page for stricter template control
  • Optional hiding from archives, search results, public REST responses, and WordPress XML sitemaps
  • Rich-text access denied messages with TinyMCE, HTML, and shortcode support

Authenticator App (TOTP)

  • Google Authenticator and Microsoft Authenticator support
  • Time-based One-Time Password (TOTP) verification
  • Multi-user architecture with per-user enrollment
  • Mandatory enrollment flow for users in required roles
  • Profile page 2FA management (Users Profile)
  • Admin visibility: enrollment status only, no secret access
  • Safe secret rotation with pending secret system
  • Old authenticator remains active until new setup is verified
  • Secure secret storage with AES-256-CBC encryption
  • Manual secret entry with provisioning URI support
  • One-time recovery keys (10 keys per user, auto-regenerated on rotation)
  • Email fallback option when authenticator is unavailable
  • Brute-force protection with configurable lockout
  • Replay attack prevention with time-slice tracking
  • Seamless integration with core 2FA settings (roles, lockout, expiry)

reCAPTCHA Protection

  • Centralized Google reCAPTCHA key management (v2 and v3)
  • All reCAPTCHA configuration consolidated in one dedicated addon
  • Login form protection
  • Registration form protection
  • Lost password form protection
  • Comment form protection (works with Comment Security addon)
  • Configurable v3 score threshold
  • Badge position customization for v3
  • Automatic script loading only when needed

Firewall

  • WordPress-aware request firewall for common bot probes, login abuse, XML-RPC exposure, and anonymous REST pressure
  • Monitor Only, Balanced, and Strict modes for safe testing, recommended daily protection, or more aggressive attack response
  • Detects suspicious requests for exposed files, backup archives, shell files, phpMyAdmin/Adminer paths, traversal probes, unsafe HTTP methods, and oversized URLs or query strings
  • Native WordPress login, registration, and lost password rate limiting with identity and IP-based counters
  • XML-RPC hardening for authenticated methods, multicall abuse, and optional pingback disabling
  • Anonymous REST API rate limiting, anonymous write blocking, and anonymous user listing protection
  • Request scoring engine for combined suspicious signals such as unsafe methods, bad user agents, sensitive paths, injection probes, long URLs, and long query strings
  • Security response headers, numeric author enumeration protection, and WordPress Application Password guard controls
  • IP allowlist and denylist controls with CIDR support
  • Temporary IP cooldowns for repeated probe traffic
  • Recent event logging without turning the addon into a heavy full request logger
  • Built-in Firewall Diagnostics for safe internal self-tests of request scoring, rate limits, REST/XML-RPC behavior, IP/CIDR matching, cooldown logic, and security header settings
  • Diagnostics simulate decisions inside WordPress and do not send malicious traffic, attack your site, or test hosting/CDN WAF rules
  • Preset profiles apply automatically while respecting user-customized settings, with advanced tuning kept optional

WooCommerce Security

  • Adds WooCommerce-specific reCAPTCHA locations for customer login, registration, and lost password forms
  • Extends the existing Polanger 2FA flow into WooCommerce customer login while preserving My Account and checkout return paths
  • Adds customer authentication rate limiting for login failures, account registrations, and lost password requests
  • Includes Light, Balanced, and Strict protection profiles so store owners can choose safe limits without tuning every number manually
  • Requires WooCommerce and uses dependency-aware loading so the addon does not run in incomplete store environments
  • Reuses Polanger’s existing reCAPTCHA and 2FA systems instead of creating a disconnected WooCommerce security stack

Polanger Shield

  • Blocks selected wp-admin pages for selected users with optional direct URL blocking
  • Hides selected admin interface areas from the real screen using the floating Shield tool
  • Adds contextual notes to admin elements so teams can document workflows directly inside wp-admin
  • Demo Lock keeps selected admin screens visible while preventing save, publish, AJAX, REST, and destructive changes for demo users
  • Global Demo Mode turns wp-admin into a controlled read-only demo environment for eligible administrator accounts
  • Safe Mode gives authorized managers a temporary recovery path when reviewing or troubleshooting Shield rules
  • Menu Manager integration shows when a menu or submenu item is already protected by Shield, helping avoid duplicate restrictions

Addon Architecture

Polanger Admin Suite includes a modular addon system designed for scalability and clarity.

Core Addons

  • Admin Bar
  • Dashboard Center
  • Admin Activity Log
  • Custom Admin Menu Builder
  • Multisite Control
  • Design System
  • Comment Security Layer
  • Authenticator (TOTP)
  • reCAPTCHA
  • Firewall
  • Maintenance Center
  • WooCommerce Security – WooCommerce customer login, registration, lost password, reCAPTCHA, 2FA, and rate limiting integration
  • Polanger Shield – admin page blocking, element hiding, contextual notes, Demo Lock, Global Demo Mode, and Menu Manager protection indicators

3rd Party Addons

  • Reserved for future ecosystem integrations
  • Addons are managed from the built-in Addons tab
  • Core addons and external addons are separated for easier management

Built for Real-World Use

Polanger is designed for:

  • Agencies managing client websites
  • Developers who need full admin control
  • Teams working with multiple user roles
  • Site owners who want a cleaner dashboard

Lightweight & Secure

  • Built with WordPress coding standards
  • Nonce verification for all actions
  • Capability checks for all operations
  • Sanitized inputs and secure database queries
  • Optimized for performance

Available Languages

Polanger Admin Suite currently includes translations for:

  • English (default)
  • Turkish (tr_TR)
  • Arabic (ar)
  • Russian (ru_RU)
  • Chinese – Simplified (zh_CN)
  • Spanish (es_ES)
  • German (de_DE)

More information: