Site Lockdown Security

View full plugin documentation – CLICK HERE

Site Lockdown Security gives WordPress administrators, agencies, developers, and support teams a full security command center without hiding the best tools behind a paid upgrade.

Most WordPress security plugins reserve their strongest features for premium plans: firewalls, file change monitoring, malware scanning, scheduled reports, branded client dashboards, email alerts, login protection, cleanup tools, Cloudflare controls, and advanced hardening. Site Lockdown Security includes those kinds of features in one plugin, and they are not treated as upsells.

Use Site Lockdown Security to audit files, lock down important folders, monitor file changes, verify WordPress core integrity, scan for suspicious code, review abandoned folders, enforce password resets, check public file exposure, monitor redirects, protect logins, review risky software, receive branded email alerts, and run a WordPress-aware firewall with Cloudflare and WooCommerce compatibility controls.

Premium Features Without Premium Upgrade Fees

Site Lockdown Security is built around a simple promise: powerful WordPress security features should not require surprise upgrade fees.

Features that are commonly sold as premium add-ons in other WordPress security plugins are included here, including white label branding, firewall controls, file change monitoring, scheduled security reports, infection scanning, cleanup tools, email notification previews, Cloudflare edge actions, login security, and client-ready branded alerts.

We will never charge for plugin upgrades or future features. When Site Lockdown Security improves, your security tools improve with it.

Key Features

• Firewall Security with Smart Block, Monitor Only, WooCommerce Safe, and Emergency Shield protection modes
• WooCommerce-aware firewall handling for checkout, cart, Store API, REST API, AJAX, and payment gateway flows
• Cloudflare integration with visitor IP detection, API credential testing, edge actions, managed challenges, access rule syncing, and automatic rule cleanup
• Firewall Event Timeline with searchable and filterable events, severity details, manual IP actions, pagination, and daily summary alerts
• IP allowlist and blocklist controls for trusted IPs, CIDR ranges, immediate blocks, and manual firewall response management
• Custom blocked request page with editable title, subtitle, message, button, footer note, and live preview
• Site Lock to make important WordPress files and folders read-only after a site is clean and stable
• Watch Dog File Change Monitor with trusted baselines, new/modified/deleted file detection, review actions, scheduled scans, and alerts
• WordPress Core Check using official WordPress.org checksums to detect modified, missing, unreadable, or unexpected core files
• Infection Scanner for suspicious patterns, malware indicators, obfuscated code, backdoors, spam injections, and unwanted scripts
• Scheduled infection scans, security reports, update checks, and digest emails
• Email notification previews for individual alert types before notifications are sent
• Branded security emails for plugin updates, file changes, core changes, reports, infection scans, risk reviews, software health, digests, and firewall summaries
• White Label Branding for agencies, developers, maintenance providers, and support teams
• White Label import and export to move branding settings between client sites
• Custom branding controls for plugin text, colors, icons, dark icons, banners, email imagery, and dashboard presentation
• Folder and file auditing for root files, wp-content, plugins, themes, uploads, .htaccess files, abandoned folders, and suspicious items
• File preview, download, approve, ignore, delete, include, and bulk actions
• Cleanup tools for old backups, temporary files, logs, cache files, abandoned folders, and other clutter
• Plugin Refresher and Theme Refresher to reinstall clean WordPress.org copies of plugins and themes
• Permissions Check for important WordPress files and folders, including Site Lock-aware status
• Software Health to identify outdated, abandoned, or potentially risky plugins and themes
• Risk Review for common local security issues, severity sorting, ignore/include controls, scheduled checks, and alerts
• Redirect Monitor to test public visitor behavior and alert when visitors may be redirected to an unauthorized website
• Update Monitor for pending WordPress core, plugin, and theme updates with alerts only when updates are available
• Password Reset Enforcement by user role, including immediate session logout and secure reset guidance
• Public File Exposure Check for sensitive backup, log, configuration, database, and metadata files
• Login Security with protected login URL controls, login limits, activity tracking, session controls, and role-based expiration
• Security Tools for XML-RPC exposure, author scans, debug exposure, SSL information, blacklist status, file finding, and hardening reviews
• Setup Guide with progress tracking for recommended protection steps
• Responsive AJAX admin interface designed for fast navigation and practical daily use

Built For Agencies And Client Support Teams

Site Lockdown Security includes White Label Branding because security work is often delivered as a professional service.

You can brand the admin experience, email imagery, colors, icons, banners, and plugin presentation around your business or client support program. Branding settings can be exported and imported between sites so the same client-ready experience can be reused across multiple installations.

These are the kinds of client-facing tools that are often locked behind agency or premium licenses elsewhere. In Site Lockdown Security, they are included.

Firewall Security

Firewall Security helps protect WordPress from suspicious requests, exploit payloads, scanner signatures, bot signatures, dangerous methods, XML-RPC abuse, REST API exposure, suspicious query strings, and excessive request rates.

Read the full description on the official page →