XeroWP
WP Guardian – Security Hardening Checklist & Lightweight Firewall
WP Guardian – Security Hardening Checklist & Lightweight Firewall

WP Guardian – Security Hardening Checklist & Lightweight Firewall

5/5 (1 ratings) 100 active installs Updated Oct 9, 2026
firewallhardeninghtaccesssecuritysecurity checklist
Download v2.1.0 Plugin Website

WP Guardian is a simple plugin for practical WordPress safeguards and security checks. It keeps a small set of local protections and helps you identify the higher-impact hardening to request from your host or CDN.

The Hardening Checklist on the Assessment screen checks:

  • PHP version and its security support end date
  • Abilities API endpoints that anonymous visitors can read
  • User enumeration through the REST API and ?author= URLs
  • Application passwords held by administrators
  • Whether XML-RPC is reachable
  • Common security headers (HSTS, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, frame protection)
  • Installed plugins that were closed on WordPress.org

Security Measures include Nginx and Caddy equivalents of the Apache rules.

About

WP Guardian keeps WordPress file restrictions, Apache-compatible directory hardening, an optional nG .htaccess firewall, and environment audits in one straightforward place. Its Security Assessment explains where a managed CDN or host should provide rate limiting, bot protection, and DDoS mitigation.

Explore more WordPress Plugins.

From the same author