Login protection and account alerts
SiteGuard WP Plugin provides several ways to harden login and admin access against unauthorized entry and repeated attempts.
- Admin Page IP Filter: Restricts access to the admin area to IP addresses that have successfully logged in, which may suit sites with predictable admin access locations.
- Rename Login: Replaces the standard login URL with a custom path, making the login page less exposed to requests at the default address.
- CAPTCHA: Adds a challenge to login, password reset and user registration forms to help deter automated submissions.
- Login Lock: Temporarily blocks an IP address after repeated failed login attempts, limiting repeated guesses from that address.
- Login Alert: Emails users when an account logs in, giving them a prompt to investigate access they do not recognize.
- Fail Once: Rejects the first valid login attempt and requires another try shortly afterward, adding friction to automated login attempts.
Comment, XML-RPC and username protections
The plugin also addresses comment spam, XML-RPC abuse and information that could help identify usernames.
- Comment CAPTCHA: Adds a CAPTCHA to comments, which can help reduce automated spam but adds a step for commenters.
- XML-RPC controls: Lets administrators disable pingbacks or all XML-RPC access, so the setting can be matched to whether a site relies on that access.
- Block Author Query: Helps prevent username exposure through author-number queries, reducing one route for discovering account names.
- Update notifications: Sends email notices when WordPress core, plugins or themes have updates available, helping administrators track maintenance.
- WAF exclusion support: Creates exclusion rules for SiteGuard Server Edition to help avoid false positives; this is relevant to sites using that WAF.
A broad security toolkit with limited support evidence
The documented controls cover several common WordPress entry points, while public signals point to broad adoption and recent maintenance.
SiteGuard WP Plugin is widely installed and was updated within the last week. That combination suggests an actively maintained tool with substantial reach, though the update timing alone does not establish how quickly support issues are handled.
Its rating is good but based on few reviews, and half of its support threads are marked resolved. The range of protections may suit administrators seeking a multi-purpose security layer; those weighing ongoing support should treat the limited review and support record as a reason to check current documentation and support activity.
