Ben Treder

<p><strong>Secure Login Shield</strong> helps you lock down your WordPress login page.<br />
By default, WordPress exposes <code>/wp-login.php</code> and <code>/wp-admin/</code>. Bots hammer these URLs every day.</p>
<p>This plugin gives you a <strong>private login slug</strong> (e.g. <code>/dragon-lair</code>) and hides the default login endpoint:</p>
<ul>
<li>Defaults to <code>/wp-login.php</code> until you change it.</li>
<li>Once changed, <strong>only your custom slug</strong> works.</li>
<li>Direct access to <code>/wp-login.php</code> shows a <strong>404 Not Found</strong> (stealth mode).</li>
<li>Logged-out visitors hitting <code>/wp-admin/</code> are <strong>redirected to the homepage</strong>.</li>
<li>Deactivate the plugin <span aria-hidden="true" class="wp-exclude-emoji">→</span> everything reverts to normal.</li>
</ul>
<p>Made with ❤️ by <a href="https://BenTreder.com" rel="nofollow ugc">Ben Treder</a></p>
<h3>Features</h3>
<ul>
<li><strong>Private login slug</strong> (e.g. <code>/dragon-lair</code>, <code>/control-center</code>, <code>/secret-gate</code>)</li>
<li><strong>Stealth 404 protection</strong>: Bots hitting <code>/wp-login.php</code> see “Not Found”</li>
<li><strong>Homepage redirect</strong>: <code>/wp-admin/</code> (logged out) <span aria-hidden="true" class="wp-exclude-emoji">→</span> homepage</li>
<li><strong>Easy settings page</strong> under Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Secure Login Shield</li>
<li><strong>Safe activation/deactivation</strong>: no core hacks, auto-reverts when disabled</li>
</ul>
<h3>Contribute & Support</h3>
<ul>
<li>Website: <a href="https://BenTreder.com" rel="nofollow ugc">BenTreder.com</a>  </li>
<li>Author: <a href="https://profiles.wordpress.org/bentreder/" rel="nofollow ugc">Ben Treder</a>  </li>
<li>Issues & Feature Requests: Please open a ticket on <a href="https://BenTreder.com" rel="nofollow ugc">BenTreder.com</a>  </li>
<li>Like this plugin? ⭐ Leave a review and help spread the word!  </li>
<li>☕ Support development: <a href="https://www.buymeacoffee.com/bentreder" rel="nofollow ugc">Buy Me a Coffee</a></li>
</ul>


Secure Login Shield

Create a private login URL and hide /wp-login.php with stealth 404s. Logged-out /wp-admin/ visits redirect to your homepage.

Vladimir Marusic

<p>Maroon Horizon Smart Firewall is built for practical WordPress protection: block bad traffic, scan for malware, quarantine suspicious files, and reduce attack surface — without sending your site files off-server.</p>
<p>Advanced Security Check (Quick Scan) gives you an easy-to-understand Overall Security Rating, plus clear details and explanations for each check so you can quickly see what to improve and raise your security level.</p>
<p>This WordPress.org (FREE) build is fully functional for the FREE feature set and is designed to run locally for those features. Advanced capabilities are provided by a separate commercial PRO plugin (not included in this WordPress.org build).</p>
<p>Outbound network requests (if any) are disclosed under “External Services” and “Privacy”.</p>
<h4>What you get in the FREE plugin (local-only)</h4>
<ul>
<li>Advanced Security Check (Quick Scan) with an Overall Security Rating and easy-to-follow explanations so you can improve your security level step by step.</li>
<li>Manual IP blocking and IP management.</li>
<li>Security patch toggles for common hardening actions.</li>
<li>Malware scanning of uploads and theme directories using local pattern detection (no external signatures).</li>
<li>Quarantine management (restore / delete quarantined files).</li>
<li>Quick file integrity checks (where supported in the FREE workflow).</li>
</ul>
<h4>Local-first design (privacy & control)</h4>
<ul>
<li>Malware scans run on your server.</li>
<li>Scanned file contents are not uploaded by the plugin.</li>
<li>External requests (if any) are limited and disclosed below.</li>
</ul>
<h4>Who it’s for</h4>
<ul>
<li>Site owners who want simple, practical protection without complex configuration.</li>
<li>Agencies and developers who need a clean hardening + scanning toolkit.</li>
<li>Anyone who wants a transparent FREE build, with an optional PRO upgrade path.</li>
</ul>
<h4>PRO features (separate commercial plugin, optional)</h4>
<ul>
<li>AI-Powered Threat Feed (encrypted subnet feed) and automatic sync.</li>
<li>Real-Time AI Threat Detection (AI model signatures).</li>
<li>AI-Powered Deep Scan and scheduled email reports.</li>
</ul>
<h4>Commercial PRO plugin</h4>
<p>The PRO edition is a separate commercial plugin (not included in this WordPress.org build).<br />
Learn more: <a href="https://mh.ie/maroon-horizon-smart-firewall/" rel="nofollow ugc">https://mh.ie/maroon-horizon-smart-firewall/</a></p>
<h3>External Services</h3>
<p>This plugin may perform outbound network requests in the following cases:</p>
<p>1) WordPress.org Core Checksums API (FREE: Core Integrity Scan)<br />
* Service provider: WordPress.org<br />
* Endpoint: https://api.wordpress.org/core/checksums/1.0/<br />
* When: Only when you manually run the Core Integrity Scan from Maroon Horizon -> Scanner.<br />
* Data sent: WordPress version and locale via URL query parameters. Your server IP address is inherently shared as part of the HTTPS request.<br />
* Data received: Official JSON containing WordPress core file checksums, used to verify your local core files. No site files or content are uploaded.<br />
* Privacy: https://wordpress.org/about/privacy/</p>
<p>2) Freemius (optional: licensing, updates, opt-in telemetry)<br />
* Service provider: Freemius (freemius.com)<br />
* When: Only if you opt in to Freemius (for example, to manage licensing and receive updates).<br />
* Data sent: Technical information required for licensing and updates (and, if you opt in, diagnostic/usage metadata), as described by Freemius.<br />
* Data received: License status and update metadata needed to deliver plugin updates.<br />
* Terms: https://freemius.com/terms/<br />
* Privacy: https://freemius.com/privacy/</p>
<p>3) Maroon Horizon service (mh.ie) (PRO only: encrypted threat-feed / AI signature bundles)<br />
* Service provider: Maroon Horizon Ltd – <a href="https://mh.ie" rel="nofollow ugc">https://mh.ie</a><br />
* When: Only in the separate PRO plugin, when you use PRO features that require server-side data (e.g., Threat Feed sync / AI signature updates).<br />
* Data sent: Site URL, install ID, product/plan identifiers, license identifiers/keys, plugin/WP/PHP versions, plus standard HTTPS request metadata (including your server IP).<br />
* Data received: A JSON response containing metadata and a time-limited download URL, followed by encrypted bundles used by the PRO engine. No site files or content are uploaded.<br />
* Terms: https://mh.ie/terms<br />
* Privacy: https://mh.ie/privacy-policy</p>
<h3>Privacy</h3>
<p>Maroon Horizon Smart Firewall is designed to minimize data sharing.</p>
<ul>
<li>Most FREE features run locally and do not transmit your site content.</li>
<li>Malware scanning runs locally on your server; scanned file contents are not uploaded by the plugin.</li>
<li>Any outbound requests (and the data exchanged) are disclosed in the “External Services” section above.</li>
<li>PRO-only services are not included in this WordPress.org build.</li>
</ul>


Maroon Horizon Smart Firewall – Malware Scanner & IP Blocking

Firewall, malware scan & IP blocking for WordPress, with Quick Scan Overall Security Rating, hardening, quarantine and integrity checks. PRO adds AI.

Secure Login Shield vs Maroon Horizon Smart Firewall – Malware Scanner & IP Blocking