SiteGuard WP Plugin

SiteGuard WP Plugin helps protect WordPress sites by strengthening login and admin-area security. It helps reduce brute-force login attacks, password list attacks, comment spam, and unauthorized access to /wp-admin/.

Main Features

• Admin Page IP Filter: Restricts wp-admin access to IP addresses that have successfully logged in.
• Rename Login: Changes the URL of the login page from wp-login.php to a custom path.
• CAPTCHA: Adds CAPTCHA to login, comment, password reset, and user registration forms.
• Login Lock: Temporarily locks out IP addresses after repeated failed login attempts.
• Login Alert: Sends email notifications when users log in.
• Fail Once: Intentionally rejects the first valid login attempt and requires the user to try again shortly after.
• Protect XML-RPC: Disables pingbacks or all XML-RPC access to help prevent abuse.
• Block Author Query: Helps prevent username leakage through /?author=<number> requests.
• Update Notifications: Sends email notifications when updates are available for WordPress core, plugins, or themes.
• WAF Tuning Support: Creates exclusion rules to help prevent false positives when SiteGuard Server Edition WAF is installed.

Requirements and Compatibility

• WordPress multisite is not supported.
• Apache 1.3, Apache 2.x, and Nginx are supported.
• Rename Login cannot be combined with a login page URL change feature in another plugin. Enable it in only one plugin; using both can leave two login URLs available, or stop the login page from loading.
• CAPTCHA requires the PHP extensions mbstring and gd.
• WAF Tuning Support requires SiteGuard Server Edition on Apache.

Documentation

Documentation, FAQs, and more details are available in English and Japanese.

Translations

This plugin is translated by the community. We appreciate your help with translations on the WordPress translation platform.