Guard — Website protection from hacking and bots
A plugin for WordPress: login protection against password brute-forcing, bot and spam blocking, and an activity log — free.
Everything you need for protection
Guard protects your site from common login-form attacks. Zero external APIs, minimal server load.
Attempt limit
Automatic IP blocking after a configurable number of failed login attempts.
Login log
A full log of attempts with IP, username, status and time. Search and sorting.
Blacklist
Manual blocking of suspicious IP addresses. Permanently or for a set time.
Hiding errors
Replaces “Wrong password” and “No such user” with a single generic message.
XML-RPC blocking
Full or partial blocking of XML-RPC — the main vector for brute-force attacks.
Bot trap
An invisible field on the login form. Bots fill it in — and are instantly blocked.
Three simple steps
Place your order
Choose a product and a pricing plan and place your order on the site.
Get access
The license key and download link are available immediately — in your personal account and in the authorized messenger.
Install and activate
Upload the file to WordPress and enter the license key — everything is activated automatically.
Privacy
Guard does not collect personal data. reCAPTCHA/hCaptcha load only if you enable them. No data is transmitted beyond what is necessary.
FAQ — Guard
Are programming skills needed for setup?
No. Guard is configured through the WordPress admin panel without editing code; after installation the plugin is ready to work with sensible default settings.
How do I protect WordPress from hacking and bots?
Close off the login and limit authorization attempts: Guard blocks password brute-forcing, bots and spam, and keeps an activity log.
Support the project
All plugins have a free version.
If they’re useful, support their development.
Protecting a WordPress site from hacking
Guard protects WordPress from password brute-forcing, bots and spam: login-attempt limiting, an activity log and blocking of suspicious IPs. The vulnerable wp-login page is closed off from automated attacks. The plugin is free.