Iron Security – WordPress Security Plugin
Iron Security is your WordPress security bodyguard. It shields your site from brute force attacks, unauthorized admin access, file injections, and common exploits like XML-RPC and REST API abuse. Whether you’re a solo creator or managing client sites, Iron Security delivers essential protection without the performance hit. 🔒 Don’t wait until your site is compromised. Secure it now — effortlessly. Iron Security includes real-time brute-force protection, custom login URLs, HTTP headers, session control, malware upload prevention, and much more. All from a single, easy-to-use plugin dashboard. Protects Against: – 🔐 Brute Force Attacks (Limit login attempts, 2FA) – 👮 Unauthorized Admin Access (Custom login URL, admin limit) – 👤 User Enumeration – 🎯 Admin Account Targeting (Admin ID & username protection) – 💣 XML-RPC & REST API Exploits – 🛡️ Code Injection & PHP Malware Uploads – 📂 Direct Access to Sensitive Files – 📛 MIME Sniffing & Content-Type Exploits – 🖼️ Clickjacking – 🧬 Cross-Site Scripting (XSS) – 🌐 Referrer Leakage 🔐 Key Features 🛠 General Hardening Disable XML-RPC & REST API Hide WordPress & WooCommerce versions Block AI & scraping bots Disable file editor Enable plugin & core auto-updates 🔍 Security Logs View detailed logs of login attempts and alerts Filter logs by IP, message, or date Audit suspicious activity easily 🔑 Login & Authentication Custom login/admin URL Limit login attempts with lockouts Session timeout for idle users Limit number of administrators Block user enumeration Change default Admin ID and Username Enable 2FA (Google Authenticator) 🗂 Files & Directory Protection Block PHP file uploads Prevent direct access to core/system files 📦 HTTP Security Headers X-Content-Type-Options X-Frame-Options X-XSS-Protection Strict-Transport-Security Referrer-Policy Content-Security-Policy Permissions-Policy Iron Security is built for creators who care about speed, simplicity, and security. If you’re not securing your site, you’re risking everything. Credits Developed and maintained by WPIron License This plugin is licensed under the GPLv2 or later.
Top keywords
- security8×2.89%
- admin7×2.53%
- login7×2.53%
- access4×1.44%
- iron4×1.44%
- iron security4×1.44%
- limit4×1.44%
- protection4×1.44%
- api3×1.08%
- attempts3×1.08%
- block3×1.08%
- custom3×1.08%
Login With Ajax – Fast Logins, 2FA, Redirects
Login With Ajax is for sites that need user logins or registrations and would like to avoid the normal wordpress login pages, or add AJAX effects to the regular login pages. This plugin adds the capability of placing a login widget in the sidebar with smooth AJAX login effects. Some of the features: AJAX-powered logins, no screen refreshes! Login Registration Remember/Reset Password PassKeys (new in 4.4) Next-Generation security, no passwords required! Users can log in without a username AND password. Biometric support (fingerprint, face ID, etc.) 2FA – Two-Factor Authentication TOTP – Time-based One-Time Password Scan a QR code with popular authenticator apps like Google Authenticator, Authy, etc. Email – Send a code to the user’s email address Backup Codes – Generate and use backup codes Integrate 2FA setup options in other plugin account pages WooCommerce BuddyPress BuddyBoss “AJAXify” other login forms Create a better login experience in the default WP login form with AJAX effects for logins, password recovery and registration. Regular WP login and registration forms WooCommerce login forms Events Manager login forms Many ways to display and customize your login form: Gutenberg Blocks Full-site editor compatible Widgets (classic and blocks) Shortcode Template Tags PHP API Flexible templates and options Multiple templates to choose from Including Modal/Pop-Up login forms Responsive and Accessible! Choose a base color for each individual login form. Individual display options via all display methods (e.g. Gutenberg Blocks, Shortcode etc.) Create your own upgrade-safe templates, or override our own ones. Custom Login/Logout redirections Redirect users to custom URLs on Login and Logout Redirect users with different roles to custom URLs WPML – Language-specific redirects Modify registration email templates Other Features Disable CSS styling (via shortcode or PHP display methods) SSL-compatible Fallback mechanism, will still work on javascript-disabled browsers Compatible with WordPress, MultiSite, BuddyPress and many other plugins Developer Friendly Multiple PHP and JS hooks Overridable CSS and JS files Easy-to-customize and overridable template files Well-documented First released in 2009, the oldest login plugin for WordPress, regularly maintained and updated since then! Pro Add-On Features As of version 4.0, we now offer a Pro add-on which extends Login With AJAX with multiple new features: Security Features – Harden the security of your login forms 2FA – Additional Two-Factor Authentication Methods: SMS – Send a code to the user’s phone WhatsApp – Send a message, user clicks a button, done! Telegram – Send a message, user clicks a button, done! reCaptcha (v2, v2 Invisible and v3) Login limiter 3rd Party Page Builder Blocks/Widgets/Modules Divi Elementor More on the way! Getting Help/Support Version 4 is a major overhaul of the plugin, which has remained largely unchanged for 11 years yet remained a staple tool for logins to WordPress! Changes include a complete rewrite of login templates updated to modern stadnards and practices, as well as new WP features such as Gutenberg Blocks. If you’re stuck, we strongly suggest visiting our Documentation Site which contains exensive information and advice on setup and troubleshooting. If you have any problems with the plugin after reading our Troubleshooting, please visit our freely supported community forums, or Go Pro for premium support. Notes Please visit our documentation site, which is regularly and extensively maintained and updated with all the information relevant to getting started, advanced setup and troubleshooting common issues.
