codegee0958

GhostGate is a lightweight yet powerful WordPress security plugin that eliminates the login page as an attack surface. Instead of just defending, it erases the entrance entirely with dynamic login URLs and multi-layer access verification.
<ul>
<li>🔒 Hide your login URL with a custom slug and time-based code</li>
<li>🔑 Built-in 2FA via email verification</li>
<li>🚫 Auto-block brute force attacks by IP</li>
<li>🧱 Disable/limit unused endpoints like XML-RPC and REST API</li>
<li>👤 Prevent user enumeration via REST, RSS, and author queries</li>
<li>🔍 Visualize security status and detect conflicts</li>
<li>📜 Activity logs with optional file rotation</li>
</ul>
GhostGate doesn’t just defend — it disappears. 
Invisible to bots. Intuitive for users.
👉 Full features / screenshots / pricing / docs: 
https://arce-experience.com/product/
<h3>Privacy</h3>
GhostGate can store the following data locally on your site to provide rate-limiting and security auditing: 
– IP addresses (for temporary throttling / block lists) 
– Timestamps and event metadata (login attempts, REST/XML-RPC hits) 
– Optional log files under <code>wp-content/uploads/ghostgate/logs</code> (if enabled)
No data is sent to third-party services. 
Site owners are responsible for informing users/visitors where required by local laws. You can clear blocks/logs from the admin UI or by deleting the log files.

GhostGate

Invisible, intelligent protection for WordPress. GhostGate hides your login page, blocks bots, and turns your site into a ghost fortress.

Svetoslav Marinov

orbisius

This plugin logs and blocks IP address of users who try to login with known bad usernames such as admin, adm etc. 
The plugin intentionally hooks very early (plugins_loaded hook) in order to determine if the user should be blocked or not because that way WordPress doesn’t have to waste resources if the user is supposed to be blocked. 
It stores the IP address in the uploads folder (.htaccess protected) so it doesn’t hit the database for the ip checks. This may not work on some setups.
The user will get blocked in these cases: 
– Tries to login using one of the bad usernames (admin, adm, root, administrator) 
– Tries 7 or more ties to guess any password of any user
Note: If you still have an account whose username matches the logins mentioned above please create a new admin account and use that one instead 
.. or you will get banned when you attempt to login regardless if your password was valid or not.
When the user should be blocked the plugin outputs Internal Server Error message and stop. That way the attacked doesn’t know what’s happening. 
Also the user is has to wait between 3 and 15 seconds before seeing this error message to slow him/her down.
<h4>Features / Benefits</h4>
<ul>
<li>Hooks very early and checks if the user is blocked -> blocks to saves resources</li>
<li>Doesn’t block server’s ip or localhost / 127.0.0.1</li>
<li>The plugin should be capable of detecting multiple IP address of a visitor (some proxies pass the original IP address via different request variable)</li>
<li>If an IP is blocked that user is not allowed to access the whole site not just the login page.</li>
<li>Extensible via hooks (filters, actions).</li>
</ul>
<h3>Demo</h3>
TODO
Bugs? Suggestions? If you want a faster response contact us through our website’s contact form [ orbisius.com ] and not through the support tab of this plugin or WordPress forums. 
We don’t get notified when such requests get posted in the forums.
<blockquote>
Support is handled on our site: <a href="http://club.orbisius.com/forums/" title="[new window]" rel="nofollow ugc">http://club.orbisius.com/forums/</a> 
 Please do NOT use the WordPress forums or other places to seek support.
</blockquote>
<h4>Author</h4>
Svetoslav Marinov (Slavi) | <a href="http://orbisius.com" title="Custom Web Programming, Web Design, e-commerce, e-store, WordPress Plugin Development, Facebook and Mobile App Development in Niagara Falls, St. Catharines, Ontario, Canada" rel="nofollow ugc">Custom Web and Mobile Programming by Orbisius.com</a>

Orbisius Limit Logins

Protect your site from automated logins efficiently!

GhostGate vs Orbisius Limit Logins