Hamdi Saidani

Fortress Login Pro is a battle-ready security plugin that replaces your WordPress login page (<code>wp-login.php</code>) with a private, rotating URL that only you control.
🛡️ It doesn’t just hide the login—it lets you track, rotate, and control it.
Perfect for freelancers, agencies, eCommerce owners, and anyone tired of blind brute-force attacks.
<h3>🔐 Key Features</h3>
<ul>
<li>Custom Login URL: Hide <code>wp-login.php</code> and set your own private login path </li>
<li>Auto-Rotate Slugs: Automatically change your login URL on a custom schedule </li>
<li>Dual-Slug Rotation Safety: Keep the old URL live until the new one is used (fail-safe) </li>
<li>Slug Generator: Choose readable word combos or full-random slugs (with number support) </li>
<li>Access Logs & Charts: See IPs, timestamps, referrers, and user-agents by login attempt </li>
<li>Export Logs: Download access history or slug changes in CSV or JSON </li>
<li>Slug History Panel: Restore, archive, or delete old slugs anytime </li>
<li>SMTP Configuration: Set up outgoing email for login slug alerts and rotation notices </li>
<li>Test Email & Rotation: Built-in checks before activating rotation so you don’t get locked out </li>
<li>System File Protection: Optional toggle to block access to <code>install.php</code> and <code>setup-config.php</code> via <code>.htaccess</code> </li>
<li>Clean UI: Fast, modern dashboard with zero bloat or upsell traps </li>
</ul>
<h3>✅ Works With</h3>
<ul>
<li>WooCommerce, Easy Digital Downloads, and major eCommerce plugins </li>
<li>Membership systems like MemberPress, Paid Memberships Pro </li>
<li>Popular security plugins: Wordfence, iThemes, Sucuri </li>
<li>Caching tools like WP Rocket, Cloudflare, W3 Total Cache </li>
</ul>
<h3>🚀 Why Fortress (vs limit login or captcha plugins)?</h3>
Most plugins try to respond to brute-force. 
Fortress prevents it by removing the login form from public view.
No login page = no attack surface.
<h3>Final Word</h3>
Fortress Login Pro doesn’t just hide your login—it makes you smarter about who’s trying to reach it.
Real logs. Real control. No BS. 
Ready to lock down WordPress the way it should’ve shipped.
Try our companion plugin: <a href="https://wordpress.org/plugins/notification-blocker/" rel="ugc">Notification Blocker</a> — hide noisy dashboard alerts with one click.

Fortress Login Pro – Secure, Hide & Rename Login URL

Hide and rotate your WordPress login URL. Track access, export logs, and prevent brute-force attacks with real-time visibility.

Ralf Naumann

eSherpa Login Guard effectively and intelligently protects your WordPress site from brute-force attacks – Swiss precision, completely without external dependencies.
Key Features:
<ul>
<li>Honeypot-first bot defense: JavaScript Honeypot detects non-browser bots and triggers immediate lockout logic.</li>
<li>Protected username trap: Immediate lockout for defined usernames (e.g., “admin”, “test”), independent of the regular counter.</li>
<li>Proactive User-Agent blocking: Block known bot signatures before login processing (exact match or substring mode).</li>
<li>Blocked User-Agent attempt log: Separate log table for blocked User-Agent requests including matching pattern.</li>
<li>WordPress hardening options: Disable XML-RPC (with fake-user honeypot response), hide REST user endpoint, and block author archive enumeration.</li>
<li>Optional bot password capture: Store attempted passwords from detected JS-honeypot bots for incident analysis.</li>
<li>Neutral login error option: Hide username enumeration by using neutral WordPress login error responses.</li>
<li>Live security visibility: Live alarm in admin, lockout badge in menu, and detailed failed-attempt logs with IP/User-Agent filters.</li>
<li>Progressive lockout durations: Lockout time increases on repeat offenses (e.g., 15 → 30 → 60 → 120 minutes).</li>
<li>Login page guidance: Clear countdown and “X attempts remaining” notice for transparent lock state.</li>
<li>Privacy-compliant: IPs stored only as anonymized hashes.</li>
<li>Automatic cleanup of old failed attempts (configurable).</li>
<li>Mobile-friendly admin tables: Horizontal scrolling for wide security tables on small screens, including swipe hint.</li>
<li>Email notification to admin on attacks against existing users.</li>
</ul>
Developed in Switzerland – fast, clean, performant, and multilingual ready.
Compatible with WordPress 6.9 and tested up to PHP 8.5.3.

eSherpa Login Guard

Intelligent login protection with honeypot detection, WordPress hardening, and a clear security admin overview.

Fortress Login Pro – Secure, Hide & Rename Login URL vs eSherpa Login Guard