Digital Web Tutor

DominoGuard is a focused, minimalistic security solution for WordPress. Designed to be fast and lightweight, it provides the essential security features every website needs with a clean configuration.
<h4>Key Features</h4>
<ul>
<li>Limit Login Attempts: Automatically block IPs for 15 minutes after 5 continuous failed login attempts, keeping brute-force attacks at bay.</li>
<li>Email Two-Factor Authentication (2FA): Add an extra layer of security for Administrators. When enabled, logging in requires a 6-digit code sent to the admin’s email address.</li>
<li>Brute Force Protection: Easily disable XML-RPC, a common vector for brute force and pingback attacks.</li>
<li>Block User Enumeration: Prevent attackers from discovering your administrator username by blocking <code>/?author=N</code> query scans.</li>
<li>Basic Firewall: A lightweight WAF that silently blocks simple directory traversal attempts (<code>../</code>) and basic malicious query strings commonly found in automated SQL injections.</li>
</ul>
<h4>Why DominoGuard?</h4>
Many security plugins suffer from excessive features that can impact performance. DominoGuard focuses on delivering efficient performance by utilizing standard WordPress functions, keeping your site secure with minimal resource usage.

DominoGuard Security

A minimalistic, lightweight security plugin offering limit login attempts, brute force protection, email 2FA, and a basic firewall.

codegee0958

GhostGate is a lightweight yet powerful WordPress security plugin that eliminates the login page as an attack surface. Instead of just defending, it erases the entrance entirely with dynamic login URLs and multi-layer access verification.
<ul>
<li>🔒 Hide your login URL with a custom slug and time-based code</li>
<li>🔑 Built-in 2FA via email verification</li>
<li>🚫 Auto-block brute force attacks by IP</li>
<li>🧱 Disable/limit unused endpoints like XML-RPC and REST API</li>
<li>👤 Prevent user enumeration via REST, RSS, and author queries</li>
<li>🔍 Visualize security status and detect conflicts</li>
<li>📜 Activity logs with optional file rotation</li>
</ul>
GhostGate doesn’t just defend — it disappears. 
Invisible to bots. Intuitive for users.
👉 Full features / screenshots / pricing / docs: 
https://arce-experience.com/product/
<h3>Privacy</h3>
GhostGate can store the following data locally on your site to provide rate-limiting and security auditing: 
– IP addresses (for temporary throttling / block lists) 
– Timestamps and event metadata (login attempts, REST/XML-RPC hits) 
– Optional log files under <code>wp-content/uploads/ghostgate/logs</code> (if enabled)
No data is sent to third-party services. 
Site owners are responsible for informing users/visitors where required by local laws. You can clear blocks/logs from the admin UI or by deleting the log files.

GhostGate

Invisible, intelligent protection for WordPress. GhostGate hides your login page, blocks bots, and turns your site into a ghost fortress.

DominoGuard Security vs GhostGate