Yoyal Limbu

BruteFort is your WordPress site’s complete login security solution. Protect against brute force attacks, hide your login page with a custom URL, block countries using geo-blocking, and manage IP restrictions — all in one lightweight, performance-optimized plugin.
Whether you’re running a blog, a WooCommerce store, or a membership site, BruteFort keeps bots, hackers, and unauthorized users out while maintaining fast page speeds.
<h4>🔐 Key Features</h4>
🌐 Geo Blocking (Country-Based Restrictions) 
– Block or allow login attempts by country 
– Blacklist mode: Block specific countries from accessing wp-login.php 
– Whitelist mode: Only allow login from selected countries 
– IP geolocation detection (Cloudflare compatible) 
– Perfect for region-specific sites or blocking high-risk countries
🔗 Custom Login URL (Hide wp-login.php) 
– Hide default WordPress login page (wp-login.php) 
– Create custom login slug (e.g., yoursite.com/secure-access) 
– Automatically redirect wp-login.php to 404 
– Prevent automated bot attacks targeting /wp-login.php 
– Easy to remember custom URLs for authorized users
🛡️ Brute Force Protection & Rate Limiting 
– Block brute force attacks with smart rate limiting 
– Set maximum login attempts per IP address 
– Configurable time windows and lockout durations 
– Progressive lockout extensions for repeated attacks 
– Custom error messages for locked users
📍 IP Whitelist & Blacklist Management 
– Manage custom IP whitelists and blacklists 
– Add individual IPs or CIDR ranges 
– Instantly block suspicious IPs 
– Whitelist your own IP to prevent lockouts 
– Bulk IP management with easy interface
📊 Real-Time Monitoring & Logs 
– View failed login attempts in real-time 
– Track IP addresses, usernames, and timestamps 
– Filter logs by status, date, or IP 
– Manual unlock for accidentally locked users 
– Export logs for security audits
⚡ Performance & Compatibility 
– Lightweight and performance-optimized 
– Works with Cloudflare, proxy servers, and CDNs 
– Compatible with most security plugins 
– Dark mode UI support 
– No impact on page load speeds
<h4>🎯 Perfect For</h4>
<ul>
<li>WooCommerce stores protecting customer data and preventing unauthorized access</li>
<li>Membership sites restricting access by geographic location</li>
<li>Corporate websites blocking countries where business doesn’t operate</li>
<li>Blog owners hiding login page from automated bots and scanners</li>
<li>Agencies managing multiple client sites with different security requirements</li>
<li>High-traffic sites experiencing frequent brute force attacks</li>
<li>International sites wanting region-specific login restrictions</li>
</ul>
<h4>🚀 Why Choose BruteFort?</h4>
<ul>
<li>All-in-one solution: Custom login URL + Geo blocking + IP restrictions in one plugin</li>
<li>Easy to use: Simple, intuitive interface with no complex configuration</li>
<li>Performance-focused: Minimal resource usage, no site slowdown</li>
<li>SEO-friendly: Properly handles redirects and 404s</li>
<li>Privacy-conscious: No external API calls for basic features (optional geo API)</li>
<li>Regular updates: Actively maintained with new features added regularly</li>
</ul>

BruteFort

BruteFort – Complete WordPress login security with custom login URLs, geo blocking, brute force protection, and IP restrictions in one plugin.

WindCodex

Country Restrictions for WooCommerce lets you control exactly which products customers can see and buy based on their country – using WooCommerce’s built-in geolocation engine. No API key. No third-party service. No code required.
Whether you need to comply with regional laws, manage export restrictions, honour licensing agreements, or limit shipping destinations – this plugin gives you precise per-product country control in minutes.
<h4>Why store owners choose this plugin</h4>
<ul>
<li>No more failed deliveries – Stop customers from ordering products you can’t ship to their country.</li>
<li>Stay legally compliant – Block products restricted by local law (alcohol, supplements, age-restricted items, electronics).</li>
<li>Honour licensing agreements – Restrict digital or licensed products to territories your agreement covers.</li>
<li>Create country-specific catalogs – Show a tailored product selection to each market, automatically.</li>
<li>Reduce chargebacks – Prevent orders you’d only have to cancel and refund.</li>
</ul>
<h4>3 Restriction Modes – Choose how to handle each restricted product</h4>
Hide completely 
Product is removed from shop pages, search results, and category listings for restricted visitors. Direct product URL returns a 404 page. Optionally redirect restricted visitors to a custom URL instead.
Hide from catalog, allow direct URL 
Product is hidden from shop and search. The product page still loads via direct link – useful for distributors or partners in restricted regions. You can optionally allow full purchase via direct URL with a single toggle.
Show restriction message 
Product stays visible in the catalog. On the product page, the Add to Cart button and price are replaced with your custom HTML message. Perfect for explaining regional availability without making the product invisible.
<h4>Key Features</h4>
<ul>
<li>Per-product country rules – Set include or exclude rules on any product from the product edit screen. Searchable country selector with live rule summary.</li>
<li>Include or Exclude mode – Whitelist specific countries (only they can buy) or blacklist countries (everyone except them can buy).</li>
<li>Custom restriction message – Write your own HTML message. Supports links, bold text, and any markup allowed by WordPress.</li>
<li>Configurable message position – Place the restriction notice above the title, below the title, after the description, or before product meta.</li>
<li>Redirect on restriction – In Hide mode, redirect restricted visitors to any URL instead of a 404 page.</li>
<li>Cart & checkout protection – Restricted products added to cart before a rule was applied are automatically removed at cart and checkout, with a clear notice.</li>
<li>Server-side add-to-cart validation – Blocks direct POST, REST API, and AJAX add-to-cart attempts for restricted products. No client-side-only protection.</li>
<li>Smart country detection (6 layers) – Shipping address -> billing address -> WC session -> transient cache -> MaxMind GeoLite2 -> store base. No manual input needed from shoppers.</li>
<li>Cloudflare IP support – Reads <code>CF-Connecting-IP</code> automatically for sites behind Cloudflare.</li>
<li>Force Geolocation option – Ignore saved addresses and always detect country from IP.</li>
<li>Session & transient caching – Country detection results are cached per session for performance. Zero repeated geolocation lookups.</li>
<li>Debug toolbar – Admin-only bar at the bottom of every frontend page showing detected country, IP address, detection source, and a direct link to settings.</li>
<li>Shortcode support – <code>[geoblock_product_message]</code> renders the restriction message anywhere – page builders, custom templates, Elementor, Divi.</li>
<li>HPOS compatible – Fully compatible with WooCommerce High-Performance Order Storage.</li>
<li>Translation ready – Complete <code>.pot</code> file included. Fully translatable via Loco Translate or WPML String Translation.</li>
</ul>
<h4>Plugin Compatibility</h4>
Built-in compatibility layers for 6 popular plugins – no configuration needed:
<ul>
<li>Price Based on Country for WooCommerce – Restriction message takes priority over country-based pricing on restricted products.</li>
<li>WPML – Rules set on the original-language product automatically apply to all translated copies. No duplicate rules per language.</li>
<li>WooCommerce Product Bundles – Restriction on the bundle parent blocks the entire bundle from being purchased.</li>
<li>WooCommerce Subscriptions – Both <code>subscription</code> and <code>variable-subscription</code> product types are fully supported.</li>
<li>WP Rocket – Product pages automatically excluded from page cache so every visitor gets the correct restricted/unrestricted version.</li>
<li>Speed Optimizer by SiteGround – Product pages bypass SiteGround’s dynamic cache using <code>SGCACHENOCACHE</code> and <code>sgo_bypass_cache</code>.</li>
</ul>
<h4>Use Cases</h4>
<ul>
<li>Block alcohol or age-restricted products from countries where they’re prohibited</li>
<li>Restrict physical products to countries you can ship to</li>
<li>Limit digital downloads to licensed territories</li>
<li>Hide out-of-stock regional variants from other markets</li>
<li>Show a -contact us to order in your region- message instead of hiding the product</li>
<li>Create exclusive country-specific product catalogs</li>
</ul>
<h4>Shortcode</h4>
Display the restriction message anywhere using: 
 [geoblock_product_message]
Attributes: 
* <code>id</code> – Product ID to check. Defaults to current product in the loop. 
* <code>class</code> – Extra CSS class(es) added to the message wrapper div.
Examples: 
 [geoblock_product_message id=123] 
 [geoblock_product_message id=123- class=my-notice highlight]
<h4>How It Works</h4>
<ol>
<li>Install and activate the plugin.</li>
<li>Go to WooCommerce > GeoBlock Restrictions and choose a restriction mode.</li>
<li>Open any product and find the GeoBlock – Country Restrictions meta box.</li>
<li>Select Include or Exclude, choose your countries, and save.</li>
<li>GeoBlock automatically detects each visitor’s country and applies your rules in real time.</li>
</ol>
<h4>Requirements</h4>
<ul>
<li>WordPress 5.8 or higher</li>
<li>WooCommerce 7.0 or higher</li>
<li>PHP 7.4 or higher</li>
<li>WooCommerce Geolocation: WooCommerce Settings > General > Default customer location > Geolocate</li>
</ul>
<h4>Privacy</h4>
GeoBlock uses the visitor’s IP address solely to determine their country. No personal data is stored permanently. Detection results are cached in WooCommerce session storage and WordPress transients with a 1-hour TTL. No data is sent to external servers. This plugin does not collect, sell, or share any visitor data.

WindCodex GeoBlock

Restrict WooCommerce products by country. Hide products, block purchases, or show a custom message using geolocation - no API key required.

BruteFort vs WindCodex GeoBlock