pieceagency

<p>Sovaryx Login Security strengthens your WordPress site’s login security while staying lightweight and easy to operate.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Dashboard</strong> – Security score display with quick overview of your site’s security status</li>
<li><strong>Security Headers Scan</strong> – HTTP header validation and security recommendations</li>
<li><strong>REST API Scan</strong> – Comprehensive API endpoint security verification (18 checks)</li>
<li><strong>Login Security</strong> – Multi-layer login protection including brute force protection (enabled by default), IP restrictions with trusted proxy support, XML-RPC disable option, reCAPTCHA, Email OTP authentication with IP-based rate limiting, and threat intelligence integration</li>
<li><strong>API Protection</strong> – REST API rate limiting and user enumeration prevention</li>
</ul>
<h4>Highlights</h4>
<ul>
<li>Lightweight design – Minimal impact on site performance</li>
<li>Multi-language support – English and Japanese</li>
<li>Plugin conflict detection – Automatic detection and warnings</li>
</ul>
<h4>System Requirements</h4>
<ul>
<li>WordPress 6.0 or higher</li>
<li>PHP 7.4 or higher</li>
<li>MySQL 5.7+ / MariaDB 10.2+</li>
</ul>
<h3>External Services</h3>
<p>This plugin connects to external services for certain features. Below is a description of each service, what data is sent, and when.</p>
<h4>Google reCAPTCHA (Optional)</h4>
<p>When you enable reCAPTCHA protection for the login page, this plugin loads Google reCAPTCHA scripts and sends verification requests.</p>
<ul>
<li><strong>Service Provider:</strong> Google LLC</li>
<li><strong>What it is used for:</strong> Protecting the login page from automated bots and brute force attacks</li>
<li><strong>Data sent:</strong> User IP address, browser information, and interaction data for bot detection</li>
<li><strong>When data is sent:</strong> When the login page is loaded and when a login form is submitted</li>
<li><strong>Terms of Service:</strong> https://policies.google.com/terms</li>
<li><strong>Privacy Policy:</strong> https://policies.google.com/privacy</li>
</ul>
<h4>Threat Intelligence Services (Optional)</h4>
<p>When threat intelligence features are enabled in Login Security settings, the plugin queries external threat databases to check visitor IP addresses for malicious activity. This helps protect your login page from known attackers.</p>
<p><strong>Spamhaus</strong><br />
* What it is used for: Checking if an IP is listed in spam/threat databases<br />
* Data sent: Visitor IP address<br />
* When data is sent: When a visitor accesses the site and threat intelligence is enabled<br />
* Website: https://www.spamhaus.org<br />
* Terms: https://www.spamhaus.org/legal/</p>
<p><strong>AbuseIPDB</strong><br />
* What it is used for: Checking IP abuse reports<br />
* Data sent: Visitor IP address<br />
* When data is sent: When a visitor accesses the site and threat intelligence is enabled<br />
* Terms of Service: https://www.abuseipdb.com/legal<br />
* Privacy Policy: https://www.abuseipdb.com/privacy</p>
<p><strong>Project Honey Pot</strong><br />
* What it is used for: Identifying harvesters, spammers, and malicious bots<br />
* Data sent: Visitor IP address<br />
* When data is sent: When a visitor accesses the site and threat intelligence is enabled<br />
* Website: https://www.projecthoneypot.org<br />
* Terms: https://www.projecthoneypot.org/terms_of_service_use.php</p>
<p><strong>Cloudflare Radar</strong><br />
* What it is used for: Checking if an IP address is associated with malware, botnets, phishing, or spam<br />
* Data sent: Visitor IP address<br />
* When data is sent: When a visitor accesses the site and threat intelligence is enabled<br />
* Terms of Service: https://www.cloudflare.com/terms/<br />
* Privacy Policy: https://www.cloudflare.com/privacypolicy/</p>
<p><strong>IP2Location / IP2Proxy</strong><br />
* What it is used for: Detecting proxy, VPN, and Tor connections from visitor IP addresses<br />
* Data sent: Visitor IP address<br />
* When data is sent: When a visitor accesses the site and threat intelligence is enabled<br />
* Terms of Service: https://www.ip2location.com/terms<br />
* Privacy Policy: https://www.ip2location.com/privacy-policy</p>


Sovaryx Login Security

A free WordPress security plugin focused on login protection, security diagnostics, and API protection.

Ryan Hellyer

<p>This plugin has been actively maintained since 2012 and is used on over 20,000 websites worldwide.</p>
<h4>Features</h4>
<p>The <a href="https://geek.hellyer.kiwi/products/unique-headers/" rel="nofollow ugc">Unique Headers Plugin</a> adds a custom header image box to the post/page edit screen. You can use this to upload a unique header image for that post, or use another image from your WordPress media library. When you view that page on the front-end of your site, the default header image for your site will be replaced by the unique header you selected.</p>
<p>This functionality also works with categories and tags.</p>
<h4>Requirements</h4>
<p>You must use a theme which utilizes the built-in custom header functionality of WordPress. If your theme implement it’s own header functionality, then this plugin will not work with it.</p>
<h4>Paid WordPress development</h4>
<p>If you would like to pay for assistance, additional features to be added to the plugin or are just looking for general WordPress development services, please contact me via <a href="https://ryan.hellyer.kiwi/contact/" rel="nofollow ugc">my contact form</a>.</p>
<h3>Development</h3>
<p>This section is only relevant for developers building the plugin from source (e.g. cloning from GitHub). If you installed via WordPress.org, the plugin is ready to use — no build steps required.</p>
<p>The plugin uses Composer for PHP autoloading and dependencies, npm for JavaScript tooling, and TypeScript for admin JavaScript.</p>
<p>To set up a development environment:</p>
<ol>
<li>Install PHP dependencies: <code>composer install</code></li>
<li>Install JavaScript dependencies: <code>npm install</code></li>
<li>Compile TypeScript to JavaScript: <code>npm run build</code></li>
</ol>
<p>To run tests and analysis:</p>
<ul>
<li>PHPCS (PSR-12 coding standards): <code>composer phpcs</code></li>
<li>Auto-fix PHPCS violations: <code>composer phpcbf</code></li>
<li>PHP-CS-Fixer (dry-run): <code>composer cs</code></li>
<li>PHP-CS-Fixer (auto-fix): <code>composer cs:fix</code></li>
<li>PHPStan static analysis: <code>composer phpstan</code></li>
<li>PHPUnit unit tests: <code>composer test</code></li>
<li>TypeScript type checking: <code>npm run typecheck</code></li>
</ul>
<p>TypeScript source files are in <code>src/ts/</code>. The compiled output is written to <code>assets/admin.js</code> and is what WordPress loads on the admin side.</p>
<h4>Credits</h4>
<p>Thanks to the following for help with the development of this plugin:<br />
* <a href="http://www.redactsolutions.co.uk" rel="nofollow ugc">redactuk – Assistance with debugging.<br />
* </a><a href="http://www.datamind.co.uk/" rel="nofollow ugc">crabsallover – Assitance with debugging.<br />
* </a><a href="http://onmytodd.org" rel="nofollow ugc">Todd</a> – Assistance with implementing support for tags.<br />
* <a href="http://westoresolutions.com/" rel="nofollow ugc">Mariano J. Ponce</a> – Spanish translation.<br />
* <a href="http://www.graphicana.de/" rel="nofollow ugc">Tobias Klotz</a> – Deutsch (German) language translation.<br />
* <a href="http://nakri.co.uk/" rel="nofollow ugc">Nadia Tokerud</a> – Proof-reading of Norsk Bokmål (Norwegian) translation.<br />
* <a href="http://bjornjohansen.no/" rel="nofollow ugc">Bjørn Johansen</a> – Proof-reading of Norwegian Bokmål translation.<br />
* <a href="https://www.facebook.com/kaljam/" rel="nofollow ugc">Karl Olofsson</a> – Proof-reading of Swedish translation.<br />
* <a href="http://www.jennybeaumont.com/" rel="nofollow ugc">Jenny Beaumont</a> – French translation.</p>


Unique Headers

Great plugin!

Use it on every site. Why would soneone like to have the same header on every page? Should be in core. =)

Should have been core since .. ever?

Add unique custom header images to individual pages, posts, categories, or tags.

Sovaryx Login Security vs Unique Headers