Ben Treder

<p><strong>Secure Login Shield</strong> helps you lock down your WordPress login page.<br />
By default, WordPress exposes <code>/wp-login.php</code> and <code>/wp-admin/</code>. Bots hammer these URLs every day.</p>
<p>This plugin gives you a <strong>private login slug</strong> (e.g. <code>/dragon-lair</code>) and hides the default login endpoint:</p>
<ul>
<li>Defaults to <code>/wp-login.php</code> until you change it.</li>
<li>Once changed, <strong>only your custom slug</strong> works.</li>
<li>Direct access to <code>/wp-login.php</code> shows a <strong>404 Not Found</strong> (stealth mode).</li>
<li>Logged-out visitors hitting <code>/wp-admin/</code> are <strong>redirected to the homepage</strong>.</li>
<li>Deactivate the plugin <span aria-hidden="true" class="wp-exclude-emoji">→</span> everything reverts to normal.</li>
</ul>
<p>Made with ❤️ by <a href="https://BenTreder.com" rel="nofollow ugc">Ben Treder</a></p>
<h3>Features</h3>
<ul>
<li><strong>Private login slug</strong> (e.g. <code>/dragon-lair</code>, <code>/control-center</code>, <code>/secret-gate</code>)</li>
<li><strong>Stealth 404 protection</strong>: Bots hitting <code>/wp-login.php</code> see “Not Found”</li>
<li><strong>Homepage redirect</strong>: <code>/wp-admin/</code> (logged out) <span aria-hidden="true" class="wp-exclude-emoji">→</span> homepage</li>
<li><strong>Easy settings page</strong> under Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Secure Login Shield</li>
<li><strong>Safe activation/deactivation</strong>: no core hacks, auto-reverts when disabled</li>
</ul>
<h3>Contribute & Support</h3>
<ul>
<li>Website: <a href="https://BenTreder.com" rel="nofollow ugc">BenTreder.com</a>  </li>
<li>Author: <a href="https://profiles.wordpress.org/bentreder/" rel="nofollow ugc">Ben Treder</a>  </li>
<li>Issues & Feature Requests: Please open a ticket on <a href="https://BenTreder.com" rel="nofollow ugc">BenTreder.com</a>  </li>
<li>Like this plugin? ⭐ Leave a review and help spread the word!  </li>
<li>☕ Support development: <a href="https://www.buymeacoffee.com/bentreder" rel="nofollow ugc">Buy Me a Coffee</a></li>
</ul>


Treder Secure Login Shield

Create a private login URL and hide /wp-login.php with stealth 404s. Logged-out /wp-admin/ visits redirect to your homepage.

sweetwatermedia

<p>Steel Security & Hardening – Site Audit Tools focuses on practical security hygiene for WordPress administrators.</p>
<p>The free plugin provides:</p>
<ul>
<li>on-demand security scans</li>
<li>risk summaries grouped by severity and category</li>
<li>checks for common WordPress hardening gaps</li>
<li>checks for exposed root-level artifacts such as <code>.env</code>, SQL dumps, <code>phpinfo</code> files, and backup archives</li>
<li>a quarantine vault for operator-reviewed file isolation</li>
<li>uploads PHP execution blocking on supported server environments</li>
<li>manual guidance when automatic server hardening is not safely supported</li>
</ul>
<p>This plugin is positioned as an auditing and hardening tool. It helps surface risk and apply selected preventive controls, but it does not promise malware removal, incident response, or complete server protection.</p>
<h4>Included checks</h4>
<p>The scan currently looks for items such as:</p>
<ul>
<li>PHP error display exposure</li>
<li><code>WP_DEBUG</code> and <code>debug.log</code> exposure</li>
<li>XML-RPC availability</li>
<li>author and REST user enumeration exposure</li>
<li>theme/plugin file editor availability</li>
<li>WordPress generator meta output</li>
<li>comments enabled by default</li>
<li>uploads PHP execution hardening status</li>
<li>root-level sensitive files and archives</li>
</ul>
<h4>Server-aware behavior</h4>
<p>This plugin only auto-applies server config changes where it can do so in a scoped and reversible way.</p>
<ul>
<li>Apache and LiteSpeed: uploads PHP blocking is managed through a Steel Security-marked <code>.htaccess</code> block</li>
<li>IIS: uploads PHP blocking is managed through a Steel Security-marked <code>web.config</code> section</li>
<li>Nginx and unsupported environments: Steel Security provides manual guidance instead of claiming automatic protection</li>
</ul>
<h4>Pro companion</h4>
<p>This plugin can work with a separate Pro companion plugin that adds features such as scheduled scans, scan history, reports, and managed server-level controls such as directory listing protection and baseline security headers. The free plugin remains usable on its own.</p>


Steel Security & Hardening – Site Audit Tools

High-signal WordPress security auditing and hardening with practical site audit tools for administrators.

Treder Secure Login Shield vs Steel Security & Hardening – Site Audit Tools