learnhowwp

Login Gatekeeper adds an extra layer of security to your WordPress login page by requiring a custom key and value in the login URL (e.g. <code>/wp-login.php?secret=myvalue</code>). You can restrict which user roles require the key, helping to prevent brute force and bot login attempts.
Stealth Protection: 
The plugin does not modify the appearance or behavior of the default WordPress login page. Anyone accessing the login page without the correct secret and value will see the standard WordPress error message, even if they enter the correct username and password. This means attackers cannot detect that extra protection is in place.
Easily configure your login key, value, and restricted roles from the WordPress admin settings page. The plugin also includes a risk confirmation step to prevent accidental lockout.
Lost your secret or value? 
If you forget your login key or value, you can use the default WordPress “Lost your password?” feature. The secret key and value will be included in the password reset email, allowing you to regain access without needing to disable the plugin.
Features:
<ul>
<li>Require a custom key/value in the login URL</li>
<li>Restrict login by user role</li>
<li>Easy-to-use settings page</li>
<li>Prevents brute force and bot login attempts</li>
<li>No visible changes to the login page for added stealth</li>
<li>Secret and value included in password reset email if forgotten</li>
</ul>
Check Out Our Other Plugins
<ul>
<li><a href="https://wordpress.org/plugins/contact-form-db-divi/" rel="ugc">Divi Contact Form DB</a></li>
<li><a href="https://wordpress.org/plugins/overlay-image-divi-module/" rel="ugc">Divi Overlay on Images Module</a></li>
<li><a href="https://wordpress.org/plugins/post-carousel-divi/" rel="ugc">Divi Post Carousel Module</a></li>
<li><a href="https://wordpress.org/plugins/menu-cart-divi/" rel="ugc">Divi Menu Cart Module</a></li>
<li><a href="https://wordpress.org/plugins/flip-cards-module-divi/" rel="ugc">Divi Flip Cards Module</a></li>
<li><a href="https://wordpress.org/plugins/image-carousel-divi/" rel="ugc">Divi Image Carousel</a></li>
<li><a href="https://wordpress.org/plugins/breadcrumbs-divi-module/" rel="ugc">Divi Breadcrumbs Module</a></li>
</ul>

Login Gatekeeper

Protect your login page by requiring a secret key and value in the login URL.

RedSecLabs

Guardian Gaze is a powerful WordPress security plugin developed by <a href="https://www.redseclabs.com" rel="nofollow ugc">RedSec Labs</a>. 
It provides real-time protection against common and advanced threats including malware injections, brute force login attempts, and zero-day exploits.
Features include: 
– Dashboard – Get a complete overview of your website security status. 
– Malware Scan – Detect malicious code using regularly updated threat patterns. 
– IP Management – Block, allow, or monitor suspicious IPs. 
– Login Security – Protect your login page with brute-force protection and additional rules. 
– Hardening – Strengthen WordPress core security with recommended hardening practices. 
– Settings – Configure plugin options, license key, and email alerts.
Guardian Gaze integrates with our security intelligence API to keep detection patterns always updated.
<h3>External Services</h3>
This plugin connects to several external services to provide security features and functionality. Below is a detailed explanation of each service, what data is sent, when, and why:
<h4>1. Guardian Gaze API (wp-api.guardiangaze.com)</h4>
Purpose: This is our proprietary API service used for license management, malware pattern updates, and email report delivery.
What data is sent: 
– Admin email address 
– Site URL 
– API/License key 
– Plugin version 
– Malware definitions version 
– IP address (for blocking malicious IPs) 
– Scan report data (when scheduled email reports are enabled)
When data is sent: 
– During plugin activation and license registration 
– When checking for malware pattern updates 
– When sending scheduled scan email reports 
– When blocking malicious IPs globally
Service provider: Guardian Gaze by RedSec Labs 
– Terms of Service: https://wp.guardiangaze.com/terms-of-service/ 
– Privacy Policy: https://wp.guardiangaze.com/privacy-policy/
<h4>2. Guardian Gaze API (wp.guardiangaze.com)</h4>
Purpose: Used to send website url for registration in url querystring.
What data is sent: 
– Site URL
When data is sent: 
– When user register the plugin for the first time
Service provider: Guardian Gaze by RedSec Labs 
– Terms of Service: https://wp.guardiangaze.com/terms-of-service/ 
– Privacy Policy: https://wp.guardiangaze.com/privacy-policy/
<h4>3. WordPress.org API (api.wordpress.org)</h4>
Purpose: Used to check for the latest WordPress core version and verify WordPress core file integrity.
What data is sent: 
– WordPress version number 
– Locale/language setting
When data is sent: 
– When checking if WordPress is up to date (in Hardening section) 
– When verifying WordPress core file checksums during malware scans 
– When checking WordPress.org communication status
Service provider: WordPress.org / Automattic 
– Terms of Service: https://wordpress.org/about/privacy/ 
– Privacy Policy: https://wordpress.org/about/privacy/
<h4>4. IP-API.com Geolocation Service (ip-api.com)</h4>
Purpose: Used to determine the country location of IP addresses for country-based blocking and geographic analytics.
What data is sent: 
– IP addresses (visitor IPs and blocked IPs)
When data is sent: 
– When displaying geographic data on the dashboard 
– When determining country for IP-based blocking rules 
– Results are cached for 24 hours to minimize API calls
Service provider: IP-API.com 
– Terms of Service: https://ip-api.com/docs/legal 
– Privacy Policy: https://ip-api.com/docs/legal 
– Note: This plugin uses the free tier which has usage limits
<h4>5. IPAPI.co Geolocation Service (ipapi.co)</h4>
Purpose: Alternative geolocation service used for determining visitor country information on the dashboard.
What data is sent: 
– Visitor IP addresses
When data is sent: 
– When loading the dashboard to display visitor geographic information
Service provider: IPAPI.co 
– Terms of Service: https://ipapi.co/terms/ 
– Privacy Policy: https://ipapi.co/privacy/
Important Notes: 
– All external API communications use WordPress’s built-in wp_remote_get() and wp_remote_post() functions 
– Data transmission occurs over HTTPS (except ip-api.com which uses HTTP) 
– No sensitive user data (passwords, personal information) is ever transmitted 
– You can disable certain features if you prefer not to use specific external services 
– Geolocation data is cached to minimize external API calls

Guardian Gaze

Safeguard your WordPress website from evolving malware, brute force attacks, and zero-day vulnerabilities.

Login Gatekeeper vs Guardian Gaze