Olivier / WP Trigone

WPTrigone Security is a professional WordPress security plugin built for business websites, corporate sites, and WooCommerce stores that require a high level of protection without unnecessary complexity.
<h4>Key features</h4>
🛡️ Hide admin and login pages 
🛡️ Enable CAPTCHA on the login page 
🛡️ Disable PHP information disclosure 
🛡️ Hide PHP version 
🛡️ Disable XML-RPC 
🛡️ Hide WordPress version 
🛡️ Hide WooCommerce version
⚡️ Protection against brute force attacks 
⚡️ WordPress login page hardening 
⚡️ Hardening of sensitive WordPress settings 
⚡️ Disabling unnecessary attack vectors 
⚡️ WordPress admin area protection 
⚡️ Security optimizations with no performance impact 
⚡️ WooCommerce compatible 
⚡️ No external services required 
⚡️ GDPR compliant (no data collection)
<h4>Built for professionals</h4>
WPTrigone Security is ideal for: 
✅ WordPress agencies 
✅ Freelancers 
✅ Managed WordPress hosting providers 
✅ High-value SEO or e-commerce websites 
✅ Clients looking for reliable and controlled security
<h3>External Services</h3>
This plugin integrates with Google reCAPTCHA to protect the login form against spam and automated abuse. Google reCAPTCHA is a security service provided by Google that helps distinguish between human users and automated bots. It is used to enhance login security.
When the login form is displayed, the plugin loads the Google reCAPTCHA JavaScript. When a user submits the login form, the reCAPTCHA response token, the site’s secret key, and the user’s IP address are sent to Google’s reCAPTCHA service.
This verification request is required to validate the reCAPTCHA challenge and determine whether the login attempt is legitimate.
This service is provided by Google LLC: 
Terms of Service: https://policies.google.com/terms Privacy Policy: https://policies.google.com/privacy

WPTrigone Security – Secure your website and store

Professional security plugin focused on hardening, and essential security best practices for business websites and WooCommerce stores.

wpdo

In one click, your WordPress login page will be pretected with the smart brute force attack protection! Any login attempts more than 6 in 10 minutes (default value) will be limited.
Limit the number of login attempts through both the login and the auth cookies.
<ul>
<li>
Two-factor Authentication login.
</li>
<li>
Text SMS message passcode for 2nd step verification support.
</li>
<li>
Cloudflare Turnstile (better than Google reCAPTCHA).
</li>
<li>
GeoLocation (Continent/Country/City) or IP range to limit login attempts.
</li>
<li>
Passwordless login link.
</li>
<li>
Support Whitelist and Blacklist.
</li>
<li>
GDPR compliant. With this feature turned on, all logged IPs get obfuscated (md5-hashed).
</li>
<li>
WooCommerce Login supported.
</li>
<li>
XMLRPC gateway protection.
</li>
</ul>
<h4>API</h4>
<ul>
<li>
Call the function <code>$link = function_exists( 'dologin_gen_link' ) ? dologin_gen_link( 'your plugin name or tag' ) : '';</code> to generate one passwordless login link for the current user.
</li>
<li>
Call the function <code>$link = function_exists( 'dologin_gen_link' ) ? dologin_gen_link( 'note/tip for this generation', $user_id ) : '';</code> to generate a passwordless login link for the user which ID is <code>$user_id</code>.
</li>
</ul>
The generated one-time used link will be expired after 7 days.
<ul>
<li>Define const <code>SILENCE_INSTALL</code> to avoid redirecting to setting page after installtion.</li>
</ul>
<h4>CLI</h4>
<ul>
<li>
List all passwordless links: <code>wp dologin list</code>
</li>
<li>
Generate a passwordless link for one username (for the login name <code>root</code>): <code>wp dologin gen root</code>
</li>
<li>
Delete a passwordless link w/ the ID in list (for the record w/ ID 5): <code>wp dologin del 5</code>
</li>
</ul>
<h4>How GeoLocation works</h4>
When visitors hit the login page, this plugin will lookup the Geolocation info from API, compare the Geolocation setting (if has) with the whitelist/blacklist to decide if allow login attempts.
<h3>Privacy</h3>
The online IP lookup service is provided by https://www.doapi.us. The provider’s privacy policy is https://www.doapi.us/privacy.
Based on the original code from Limit Login Attemps plugin and Limit Login Attemps Reloaded plugin.

DoLogin Security

Easy Login. 2FA login. Passwordless login. Cloudflare Turnstile reCAPTCHA. GeoLocation (Continent/Country/City)/IP range to limit login attempts.

WPTrigone Security – Secure your website and store vs DoLogin Security