kolmic1

Kortech Shieldora is a high-performance security command center for WordPress. It provides professional-grade protection against modern attack vectors without compromising site performance.
This plugin focuses on core system integrity and login security, ensuring your WordPress installation is hardened against the most common entry points for hackers.
Free Core Features:
Brute-Force Mitigation: Intelligent IP lockouts after repeated failed login attempts to prevent credential stuffing.
Autonomous Hardening: One-click toggles to disable the built-in file editor and restrict REST API user enumeration.
Security Command Center: A beautiful, real-time dashboard that calculates a dynamic “System Score” based on your current site configuration.
Live Audit Logs: Detailed tracking of every blocked threat and system event stored directly in your database.
Complete Cleanup: Includes a full uninstallation routine to ensure no data is left behind if you ever choose to remove the plugin.
PRO Intelligence Upgrades:
For high-traffic businesses and e-commerce stores, Kortech Shieldora PRO offers:
Anti-Carding Engine: Protect Paystack, Flutterwave, and Stripe gateways from automated checkout bots.
WhatsApp & SMS 2FA: Military-grade login security using real-time OTP via the Termii API.
Virtual Patching: Automatically protect your site from known plugin vulnerabilities before updates are released.
Geo-Fencing: Block traffic from entire high-risk countries to eliminate 90% of global bot noise.

Kortech Shieldora

Enterprise-grade security engine featuring brute-force mitigation, autonomous system hardening, and a real-time command center.

sweetwatermedia

Steel Security & Hardening – Site Audit Tools focuses on practical security hygiene for WordPress administrators.
The free plugin provides:
<ul>
<li>on-demand security scans</li>
<li>risk summaries grouped by severity and category</li>
<li>checks for common WordPress hardening gaps</li>
<li>checks for exposed root-level artifacts such as <code>.env</code>, SQL dumps, <code>phpinfo</code> files, and backup archives</li>
<li>a quarantine vault for operator-reviewed file isolation</li>
<li>uploads PHP execution blocking on supported server environments</li>
<li>manual guidance when automatic server hardening is not safely supported</li>
</ul>
This plugin is positioned as an auditing and hardening tool. It helps surface risk and apply selected preventive controls, but it does not promise malware removal, incident response, or complete server protection.
<h4>Included checks</h4>
The scan currently looks for items such as:
<ul>
<li>PHP error display exposure</li>
<li><code>WP_DEBUG</code> and <code>debug.log</code> exposure</li>
<li>XML-RPC availability</li>
<li>author and REST user enumeration exposure</li>
<li>theme/plugin file editor availability</li>
<li>WordPress generator meta output</li>
<li>comments enabled by default</li>
<li>uploads PHP execution hardening status</li>
<li>root-level sensitive files and archives</li>
</ul>
<h4>Server-aware behavior</h4>
This plugin only auto-applies server config changes where it can do so in a scoped and reversible way.
<ul>
<li>Apache and LiteSpeed: uploads PHP blocking is managed through a Steel Security-marked <code>.htaccess</code> block</li>
<li>IIS: uploads PHP blocking is managed through a Steel Security-marked <code>web.config</code> section</li>
<li>Nginx and unsupported environments: Steel Security provides manual guidance instead of claiming automatic protection</li>
</ul>
<h4>Pro companion</h4>
This plugin can work with a separate Pro companion plugin that adds features such as scheduled scans, scan history, reports, and managed server-level controls such as directory listing protection and baseline security headers. The free plugin remains usable on its own.

Steel Security & Hardening – Site Audit Tools

High-signal WordPress security auditing and hardening with practical site audit tools for administrators.

Kortech Shieldora vs Steel Security & Hardening – Site Audit Tools