maheshsharmads

<p><strong>Dotsquares Custom Login URL & Security Suite</strong> helps secure your WordPress site by allowing you to change the default login URL and apply additional security layers — all from one beautifully designed dashboard.</p>
<h4>🔑 Login Security</h4>
<ul>
<li>Custom login slug — redirect wp-login.php to your own secret URL</li>
<li>Optionally hide wp-login.php (returns 404 for guests)</li>
<li>Optionally block wp-admin for non-logged-in users</li>
<li>Brute force protection with configurable lockout thresholds</li>
<li>Login honeypot trap (hidden field that catches bots)</li>
<li>Two-Factor Authentication (TOTP — works with Google Authenticator, Authy, etc.)</li>
<li>Weak username detection (blocks “admin”, “root”, “test”, etc.)</li>
<li>Force logout after inactivity (configurable timeout)</li>
<li>Manual approval for new user registrations</li>
<li>Prevent display name from matching username</li>
</ul>
<h4>🛡️ Firewall</h4>
<ul>
<li>Disable XML-RPC (common attack vector)</li>
<li>Block bad bots and fake user agents (40+ known bots)</li>
<li>Block POST requests with empty User-Agent headers</li>
<li>Rate limiting per IP address</li>
<li>IP blacklist and whitelist (supports CIDR ranges)</li>
<li>Geo-blocking by country code</li>
<li>Restrict REST API for non-logged-in users</li>
<li>Prevent user enumeration via ?author= scans</li>
</ul>
<h4>🔍 Malware & File Scanner</h4>
<ul>
<li>Deep scan of WordPress core, plugins, themes and uploads</li>
<li>40+ malware signature patterns (PHP shells, backdoors, crypto miners, pharma hacks, SEO spam injections)</li>
<li>Detects known web shells by filename (c99, r57, WSO, b374k, adminer, etc.)</li>
<li>WordPress core file integrity check (compares against official api.wordpress.org checksums)</li>
<li>Detects PHP files hidden inside the uploads folder</li>
<li>Suspicious code pattern detection (eval, exec, base64_decode combos, etc.)</li>
<li>File change detection using MD5 hash baseline</li>
<li>File permission scanner (755/644 standards)</li>
<li>.htaccess security rules generator</li>
</ul>
<h4>👥 User & Session Management</h4>
<ul>
<li>View and kill active user sessions</li>
<li>Session tracking with IP and user-agent logging</li>
<li>Manual user approval workflow</li>
</ul>
<h4>📊 Monitoring & Logs</h4>
<ul>
<li>Security event log (login, logout, failed attempts, plugin/theme changes)</li>
<li>IP blocking log with unblock controls</li>
<li>Real-time security score (A–F grade with per-check breakdown)</li>
</ul>
<h4>⚙️ Other Features</h4>
<ul>
<li>Maintenance mode with custom message</li>
<li>Database backup download</li>
<li>Email alerts for security events</li>
<li>Beautiful admin dashboard with quick-toggle switches</li>
</ul>
<h3>Important</h3>
<p>Hardening actions such as <strong>DB prefix change</strong> and <strong>wp-content rename</strong> are advanced operations.<br />
Always run these features on a <strong>staging environment</strong> and ensure you have a <strong>full backup</strong> before applying them on production.</p>


Dotsquares Custom Login URL & Security Suite

Change your WordPress login URL, design the login page, and enhance your site's security with built-in protection tools.

kolmic1

<p>Kortech Shieldora is a high-performance security command center for WordPress. It provides professional-grade protection against modern attack vectors without compromising site performance.</p>
<p>This plugin focuses on core system integrity and login security, ensuring your WordPress installation is hardened against the most common entry points for hackers.</p>
<p>Free Core Features:</p>
<p>Brute-Force Mitigation: Intelligent IP lockouts after repeated failed login attempts to prevent credential stuffing.</p>
<p>Autonomous Hardening: One-click toggles to disable the built-in file editor and restrict REST API user enumeration.</p>
<p>Security Command Center: A beautiful, real-time dashboard that calculates a dynamic “System Score” based on your current site configuration.</p>
<p>Live Audit Logs: Detailed tracking of every blocked threat and system event stored directly in your database.</p>
<p>Complete Cleanup: Includes a full uninstallation routine to ensure no data is left behind if you ever choose to remove the plugin.</p>
<p>PRO Intelligence Upgrades:</p>
<p>For high-traffic businesses and e-commerce stores, Kortech Shieldora PRO offers:</p>
<p>Anti-Carding Engine: Protect Paystack, Flutterwave, and Stripe gateways from automated checkout bots.</p>
<p>WhatsApp & SMS 2FA: Military-grade login security using real-time OTP via the Termii API.</p>
<p>Virtual Patching: Automatically protect your site from known plugin vulnerabilities before updates are released.</p>
<p>Geo-Fencing: Block traffic from entire high-risk countries to eliminate 90% of global bot noise.</p>


Kortech Shieldora

Enterprise-grade security engine featuring brute-force mitigation, autonomous system hardening, and a real-time command center.

Dotsquares Custom Login URL & Security Suite vs Kortech Shieldora