WP Force Field is a lightweight security plugin for WordPress that hardens your site in minutes. It blocks brute force attacks, scans for malware, protects login pages, and enforces best practices automatically. Built for speed and simplicity, it works with any theme or plugin and requires zero coding.
- One-click hardening for core WordPress security
- Real-time brute force protection and rate limiting
- Login security: reCAPTCHA, 2FA, and lockout rules
- Malware scanning and file integrity monitoring
- Firewall rules to block bad bots and IPs
- Automatic core, theme, and plugin vulnerability checks
- Hide wp-admin and wp-login URLs to stop bots
- Disable XML-RPC and REST endpoints selectively
- Force strong passwords and role-based policies
- Security headers: HSTS, X-Frame-Options, CSP presets
- SSL/HTTPS enforcement and mixed content fixer
- Activity logs with alerts for critical changes
- Geo/IP blocking and allowlist controls
- Backup and restore of security settings
- Lightweight, fast, and compatible with popular hosts
