Initial public release.
Features
- Brute-force login protection with configurable lockout thresholds
- Automatic IP banning (brute force, bad bot, scan probe, 404 flood, honeypot, manual)
- Hidden login URL with HMAC gate cookie
- Bad bot detection (SQLMap, Nikto, Nmap, Burp Suite, Nuclei, and more)
- 404 flood protection with instant ban for credential path probes
- Login honeypot
- Security headers (X-Frame-Options, CSP, HSTS, etc.)
- XML-RPC blocking
- User enumeration blocking
- WordPress version hiding
- Cloudflare-aware real IP detection (auto-synced ranges)
- Email ban alerts
- Login log, attempts log, 404 log, banned IPs dashboard
Installation
- Download
ateculus-security.1.1.1.zip - Go to Plugins → Add New → Upload Plugin in your WordPress admin
- Upload the ZIP and activate