PlugIndex

Directory / plugin

WP Guardian – Security Hardening Checklist & Lightweight Firewall

v2.1.0 · by Ciprian Popescu

For site owners who want an honest hardening checklist, not a heavy security suite: what to fix in WordPress, and what to ask your host for.

View on WordPress.orgHomepage

About this plugin

WP Guardian is a simple plugin for practical WordPress safeguards and security checks. It keeps a small set of local protections and helps you identify the higher-impact hardening to request from your host or CDN.

The Hardening Checklist on the Assessment screen checks:

  • PHP version and its security support end date
  • Abilities API endpoints that anonymous visitors can read
  • User enumeration through the REST API and ?author= URLs
  • Application passwords held by administrators
  • Whether XML-RPC is reachable
  • Common security headers (HSTS, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, frame protection)
  • Installed plugins that were closed on WordPress.org

Security Measures include Nginx and Caddy equivalents of the Apache rules.

About

WP Guardian keeps WordPress file restrictions, Apache-compatible directory hardening, an optional nG .htaccess firewall, and environment audits in one straightforward place. Its Security Assessment explains where a managed CDN or host should provide rate limiting, bot protection, and DDoS mitigation.

Explore more WordPress Plugins.

From the same author

Plugin tags