Kashif Ahmed Khan

VigiGuard Security provides essential WordPress protection without complexity. One-click hardening, brute force protection, and file integrity monitoring – all with zero configuration required.
Key Features:
<ul>
<li>One-Click Fix – Secure your site instantly with one button</li>
<li>Brute Force Protection – Blocks repeated login attempts automatically </li>
<li>Security Health Score – Visual A-F grade showing your security status</li>
<li>File Integrity Monitor – Scans 3,000+ WordPress core files weekly</li>
<li>Activity Logging – Track all security events and login attempts</li>
<li>Security Hardening – Disables XML-RPC, hides WP version, blocks user enumeration</li>
</ul>
Perfect For:
<ul>
<li>Small business owners who need security without the hassle</li>
<li>Bloggers who want “set and forget” protection</li>
<li>Freelancers managing multiple client sites</li>
<li>Anyone who finds other security plugins too complicated</li>
</ul>

VigiGuard Security

Simple one-click WordPress security. Protect your site in 30 seconds.

Nazmul Hasan Robin

Keep your WordPress site safe with minimal effort. NHR Secure helps you:
<ul>
<li>Hide or protect your admin area from unauthorized access.</li>
<li>Limit login attempts to prevent brute-force attacks.</li>
<li>Hide debug logs to prevent sensitive information disclosure.</li>
<li>Add 2FA to your WordPress site.</li>
<li>Scan core files, plugins, and themes for known vulnerabilities.</li>
<li>Monitor site health with one-click security recommendations.</li>
<li>Protect against SQL injection, XSS, and LFI attacks.</li>
<li>Block malicious IPs and entire countries.</li>
</ul>
<h3>Features at a glance:</h3>
<h3>🔒 Limit Login Attempts</h3>
Stop brute-force attacks by temporarily blocking IPs after repeated failed login attempts. 
– Configurable attempt limit (1-20, default: 5) 
– Blocks based on IP + Username combination 
– Auto-unblock after 2 hours
<h3>🔐 Custom Login Page</h3>
Hide wp-login.php and use a custom login URL. 
– Default custom URL: <code>/hidden-access-52w</code> 
– Blocks direct access to wp-login.php and wp-admin for guests
<h3>🛡️ Protect Debug Log File</h3>
Blocks direct access to <code>/wp-content/debug.log</code> 
– Returns 403 Forbidden for all users
<h3>⚙️ Modern Settings Page</h3>
Configure everything from a beautiful React-powered interface. 
– Located under Tools → NHR Secure 
– Dark Mode support for comfortable viewing 
– Enable/disable each feature
<h3>🔐 Two-Factor Authentication (2FA)</h3>
Enable two-factor authentication for users. 
– Support for Authenticator Apps and Email OTP 
– Enforce 2FA for specific user roles (e.g., Administrators) 
– Recovery Codes for emergency access 
– QR code setup for Authenticator Apps
<h3>🛡️ Vulnerability Checker</h3>
Automatically scan your installed plugins, themes, and WordPress core against a known vulnerability database. 
– Daily automatic scans 
– Alerts for critical security issues 
– Check file integrity
<h3>🖥️ User Session Management</h3>
Monitor and control active user sessions to prevent unauthorized access. 
– View Active Sessions: See IP, location, device, and login time for all logged-in users. 
– Remote Logout: Instantly log out suspicious sessions or all other devices. 
– Idle Timeout: Automatically log out inactive users after a set period.
<h3>🧱 Hardening & Firewall</h3>
Essential security hardening to lock down your WordPress site. 
– Disable XML-RPC: Prevent remote attacks and brute-force attempts. 
– Disable File Editor: Stop file modifications from the dashboard. 
– Hide WP Version: Obscure your WordPress version from attackers. 
– Block User-Agents: Prevent bad bots and scrapers from accessing your site. 
– Disable User Enumeration: Stop attackers from harvesting usernames via REST API.
<h3>📝 Activity Audit Log</h3>
Keep a record of important security events on your site. 
– Tracks logins, failed attempts, file changes, and settings updates. 
– View user, IP, and event details. 
– Configurable log retention policy.
<h3>🏥 Security Health Check & One-Click Secure</h3>
Get an instant overview of your site’s security posture. 
– Security Score: View your overall protection percentage and grade (A+ to F). 
– Health Dashboard: See which security features are active and which need attention. 
– One-Click Secure: Apply recommended security settings instantly. 
– 11 Security Checks: Comprehensive analysis of your security status.
<h3>🛡️ Advanced Firewall (IPS)</h3>
Proactive intrusion prevention system that blocks malicious requests in real-time. 
– SQL Injection Protection: Detect and block SQLi attacks automatically. 
– XSS Prevention: Stop cross-site scripting attempts. 
– LFI Protection: Prevent local file inclusion attacks. 
– Pattern Matching: Advanced regex-based detection for common attack vectors. 
– Automatic Blocking: Suspicious requests are blocked before they reach WordPress.
<h3>🌍 IP & Country Management</h3>
Control access to your site with granular IP and geographic filtering. 
– IP Whitelist: Allow trusted IPs to bypass all security filters. 
– IP Blacklist: Block malicious IPs permanently from your site. 
– CIDR Support: Use CIDR notation for blocking entire IP ranges (e.g., 192.168.1.0/24). 
– Country Blocking: Block access from 90+ countries using GeoIP lookup. 
– Smart Caching: GeoIP lookups are cached for 24 hours for optimal performance. 
– Private IP Detection: Automatically skip local/private IPs.
<h3>⚡ Lightweight & Minimal</h3>
Designed to deliver maximum security with minimal code. No bloat, no complexity. 
– Compatible with most WordPress themes and plugins.
<h3>External Services</h3>
This plugin utilizes the <a href="https://wpvulnerability.com/" rel="nofollow ugc">WPVulnerability</a> API to check for vulnerabilities. 
– Service: WPVulnerability 
– Data: Only plugin slugs and versions are sent. No personal data is collected.

NHR Secure – Login Security, Firewall, 2FA & Audit Log

A lightweight WordPress security plugin to protect your admin area with a custom login URL, hide debug logs, limit login attempts, and add 2FA.

VigiGuard Security vs NHR Secure – Login Security, Firewall, 2FA & Audit Log