Hide My WP Ghost

Hide My WP Ghost (now WP Ghost) is a WordPress security plugin that hides your installation from hacker bots and vulnerability scanners. It adds filters and security layers against script and SQL injection, brute force and XML-RPC attacks.

You change and hide common paths for WP, plugins and themes, and set a custom login URL to block unauthorized access to wp-admin. URL and text mapping remaps revealing URLs in source code. Brute force protection applies rate limiting and lockouts, XML-RPC can be disabled, and security headers guard against cross-site scripting.

A security check runs 35+ tasks and gives fixes, and an activity log tracks important actions. Two-factor authentication, the 7G and 8G firewall by Jeff Starr and time-limited temporary logins for contractors are included. It works on WordPress multisite and alongside Wordfence, WP Cerber, Sucuri and Solid WP.