Ben Treder

<p>Treder Security Snapshot gives WordPress site owners a simple local security health report.</p>
<p>It is not a firewall, malware removal tool, or all-in-one security suite. It focuses on clear visibility, practical recommendations, and easy reporting.</p>
<p>The plugin checks common WordPress security basics and gives you a security score from 0 to 100.</p>
<h4>Included Features</h4>
<ul>
<li>Security score from 0 to 100</li>
<li>Dashboard tab</li>
<li>Detailed audit tab</li>
<li>Scan history tab</li>
<li>WordPress dashboard widget</li>
<li>Beginner-friendly explanations</li>
<li>Suggested fixes</li>
<li>Local scan history</li>
<li>Local HTML report download</li>
<li>Email latest report to a chosen address</li>
</ul>
<h4>Security Checks</h4>
<ul>
<li>WordPress core update status</li>
<li>Plugin update status</li>
<li>Theme update status</li>
<li>Default admin usernames</li>
<li>User enumeration risk</li>
<li>XML-RPC status</li>
<li>File editing status</li>
<li>Debug mode status</li>
<li>Directory browsing indicators</li>
<li>HTTPS and SSL status</li>
<li>Database prefix check</li>
<li>WordPress version visibility</li>
<li>Public registration status</li>
<li>Inactive plugins</li>
</ul>
<h4>Separate Pro Companion</h4>
<p>A separate Pro companion plugin is available from the author’s website for users who want additional tools such as advanced checks, scheduled reports, file integrity monitoring, white-label reporting, and AI-assisted fix plans.</p>
<p>The WordPress.org plugin includes all functionality described in this readme.</p>


Treder Security Snapshot

A lightweight WordPress security health report with a simple score, clear findings, local reports, and beginner-friendly suggested fixes.

<p><strong>Secure Login Shield</strong> helps you lock down your WordPress login page.<br />
By default, WordPress exposes <code>/wp-login.php</code> and <code>/wp-admin/</code>. Bots hammer these URLs every day.</p>
<p>This plugin gives you a <strong>private login slug</strong> (e.g. <code>/dragon-lair</code>) and hides the default login endpoint:</p>
<ul>
<li>Defaults to <code>/wp-login.php</code> until you change it.</li>
<li>Once changed, <strong>only your custom slug</strong> works.</li>
<li>Direct access to <code>/wp-login.php</code> shows a <strong>404 Not Found</strong> (stealth mode).</li>
<li>Logged-out visitors hitting <code>/wp-admin/</code> are <strong>redirected to the homepage</strong>.</li>
<li>Deactivate the plugin <span aria-hidden="true" class="wp-exclude-emoji">→</span> everything reverts to normal.</li>
</ul>
<p>Made with ❤️ by <a href="https://BenTreder.com" rel="nofollow ugc">Ben Treder</a></p>
<h3>Features</h3>
<ul>
<li><strong>Private login slug</strong> (e.g. <code>/dragon-lair</code>, <code>/control-center</code>, <code>/secret-gate</code>)</li>
<li><strong>Stealth 404 protection</strong>: Bots hitting <code>/wp-login.php</code> see “Not Found”</li>
<li><strong>Homepage redirect</strong>: <code>/wp-admin/</code> (logged out) <span aria-hidden="true" class="wp-exclude-emoji">→</span> homepage</li>
<li><strong>Easy settings page</strong> under Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Secure Login Shield</li>
<li><strong>Safe activation/deactivation</strong>: no core hacks, auto-reverts when disabled</li>
</ul>
<h3>Contribute & Support</h3>
<ul>
<li>Website: <a href="https://BenTreder.com" rel="nofollow ugc">BenTreder.com</a>  </li>
<li>Author: <a href="https://profiles.wordpress.org/bentreder/" rel="nofollow ugc">Ben Treder</a>  </li>
<li>Issues & Feature Requests: Please open a ticket on <a href="https://BenTreder.com" rel="nofollow ugc">BenTreder.com</a>  </li>
<li>Like this plugin? ⭐ Leave a review and help spread the word!  </li>
<li>☕ Support development: <a href="https://www.buymeacoffee.com/bentreder" rel="nofollow ugc">Buy Me a Coffee</a></li>
</ul>


Treder Secure Login Shield

Create a private login URL and hide /wp-login.php with stealth 404s. Logged-out /wp-admin/ visits redirect to your homepage.

Treder Security Snapshot vs Treder Secure Login Shield