GeoGuard WP – GRC

GeoGuard WP – GRC is a lightweight, high-performance security plugin designed to protect your WordPress administrative dashboard and user registration endpoints from unauthorized geographic login and sign-up attempts. By restricting configurable user roles based on visitor country origin, you drastically reduce brute-force and credential-stuffing attacks originating from outside your trusted operating regions.

Key Features

• Zero-Dependency Local MaxMind Parser: Includes a built-in custom binary .mmdb parser capable of reading MaxMind GeoLite2-Country databases directly without requiring external PHP extensions like geoip or maxminddb.
• Intuitive Checkbox Selection: Easily select allowed countries and targeted user roles using clean, scrollable checkbox interface lists in the WordPress backend settings panel.
• Flexible Action Modes: Choose whether to block login requests, block account creations/registrations, block both, or temporarily disable restrictions entirely.
• Automatic Daily Database Updates: Schedules a daily cron event to automatically mirror and update the latest GeoLite2 country database.
• Manual Database Download: Allows administrators to fetch or refresh the database instantly from the settings panel.
• Smart IP Detection: Inspects proxy headers while ensuring protection against header spoofing and filtering out private/reserved IP ranges.
• Fail-Safe Protection: Permanently locks your installer’s country code into the permitted checkbox list, preventing accidental lockouts.