WP Guardian – Security Hardening Checklist & Lightweight Firewall

WP Guardian is a simple plugin for practical WordPress safeguards and security checks. It keeps a small set of local protections and helps you identify the higher-impact hardening to request from your host or CDN.

The Hardening Checklist on the Assessment screen checks:

• PHP version and its security support end date
• Abilities API endpoints that anonymous visitors can read
• User enumeration through the REST API and ?author= URLs
• Application passwords held by administrators
• Whether XML-RPC is reachable
• Common security headers (HSTS, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, frame protection)
• Installed plugins that were closed on WordPress.org

Security Measures include Nginx and Caddy equivalents of the Apache rules.

About

WP Guardian keeps WordPress file restrictions, Apache-compatible directory hardening, an optional nG .htaccess firewall, and environment audits in one straightforward place. Its Security Assessment explains where a managed CDN or host should provide rate limiting, bot protection, and DDoS mitigation.

Explore more WordPress Plugins.

From the same author

• Active Contacts – WordPress CRM & Follow-up Plugin
• LazyClone – Copy a WordPress Site Without FTP
• Lighthouse – WordPress Performance & Speed Optimization Plugin
• Active Analytics – Privacy-Friendly WordPress Analytics Plugin
• ImagePress – WordPress Image Gallery & Community Photo Plugin
• eCards – WordPress eCard Plugin with Email Designer
• Repeater for Gravity Forms – Repeater Field Add-on
• Fixtures & Results – WordPress Sports League & GAA Club Plugin
• WP Google Consent Platform (GCP)