Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Free
3M+ installs 4.9★ (8,862)
Security Control by Reflecters
WordPress security plugin detects new devices, blocks them with a password, triggers siren alerts, and lets master admin control user access.
The facts
- Rating
- 5★ from 21
- Price
- Free
- Last updated
- 13 Sep 2025
- Added
- Sep 2025
- Requires WP
- 5.5
- Tested up to
- WP 6.8.8
- Requires PHP
- 7.4
- Downloads
- 388
Our analysis
AI-assistedSecurity Control by Reflecters is a WordPress plugin designed to enhance security in multi-user environments. It detects new devices accessing the admin area, blocking them with a password overlay and notifying users through alerts. The plugin aims to ensure that only trusted devices can log in while keeping authorized users informed of any potential threats.
Key features include new device detection using secure cookies, a customizable siren alert, and the ability for a master admin to manage settings and trusted devices. It is suitable for WordPress sites that require robust security measures to protect sensitive areas from unauthorized access.
Best for: This plugin is best for WordPress sites with multiple users needing enhanced security measures.
What it does well
- ✓Detects new devices using a secure cookie-based system
- ✓Blocks new devices with a password overlay
- ✓Notifies users with siren sounds and warning banners
- ✓Allows management of trusted devices by admins
- ✓Sends email notifications for new device logins and blocks
Where it falls short
- •Limited information on user adoption or support options
Verdict
Security Control by Reflecters provides essential security features for WordPress sites, particularly in multi-user scenarios. It offers a straightforward approach to managing device access and alerts.
From the developer
Reflecters's own description of Security Control by Reflecters, lightly tidied.
Security Control by Reflecters secures WordPress by detecting new devices, blocking them with a password overlay, and alerting users with sirens and banners.
Key Features
- New Device Detection: Identifies new devices using a secure cookie-based system.
- Siren Password Overlay: Blocks new devices with a full-screen password prompt (default password:
2210). - Broadcast Alerts: Notifies all admin, editor, and author users with a siren sound and warning banner when a new device logs in.
- Master Admin Control: Only the designated master admin can manage settings, block/unblock users, or reset trusted devices.
- IP Blocking: Temporarily blocks IPs after multiple failed password attempts.
- Email Notifications: Sends alerts to admins, editors, and authors for new device logins, blocks, or trusted devices (configurable).
- Trusted Device Management: Allows users to trust their devices after verification and admins to manage trusted devices.
- Customizable Siren: Upload custom MP3 audio for the siren alert.
- Security Headers: Adds X-Frame-Options, X-Content-Type-Options, and Referrer-Policy headers for admin pages.
This plugin is ideal for WordPress sites needing robust security for multi-user environments, ensuring only trusted devices access the admin area while keeping authorized users informed of potential threats.
Additional Notes
- Default Password: The default siren stop password is
2210. Change it in the settings for security. - Security: The plugin uses nonces for AJAX security, secure cookies for device tracking, and hashes passwords client-side before transmission.
- Performance: Uses transients for temporary data (new device detection, IP blocking) to minimize database load.
- Compatibility: Tested with WordPress 6.8. Requires PHP 7.4+ for modern features like typed arrays.
For support, contact Reflecters at support@reflecters.com or visit https://reflecters.com.
Tagged as
purpose
Security & Malware Protection
quality
Security
Alternatives
Other plugins for securing a site.
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....
Free
5M+ installs 4.7★ (4,983)
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Loginizer
93Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
Free
1M+ installs 4.8★ (1,030)
Safe SVG
93Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
Free
1M+ installs 4.9★ (79)
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...
Free
1M+ installs 4.7★ (1,715)