WPThumbs
Themes Plugins By purpose By industry Best-of lists Fix it guides
Free Plugin by jp-secure v1.8.9

SiteGuard WP Plugin

Adds WordPress login and admin protections, including CAPTCHA, login lock, login alerts, renamed login URLs, and SiteGuard WAF tuning support.

SiteGuard WP Plugin

The facts

Rating
4.3★ from 15
Active installs
500k+
Price
Free
Last updated
19 Aug 2026
Added
Oct 2014
Requires WP
6.0
Tested up to
WP 7.1
Downloads
7,387,592

Our analysis

AI-assisted

SiteGuard WP Plugin is a security plugin for WordPress that enhances the protection of login and admin areas. It helps mitigate risks associated with brute-force attacks, comment spam, and unauthorized access to the admin panel by implementing various security measures.

The plugin includes features such as IP filtering for admin access, CAPTCHA integration, login alerts, and the ability to rename the login page. It is suitable for WordPress site owners looking to improve their site's security without incurring costs, although it does not support multisite installations.

Best for: This plugin suits WordPress site owners who want to enhance security without additional costs.

What it does well

  • Free to use from the WordPress.org directory
  • Helps reduce brute-force login attacks
  • Includes CAPTCHA for enhanced security
  • Sends email notifications for login and updates
  • Supports Apache and Nginx servers

Where it falls short

  • Multisite installations are not supported
  • CAPTCHA requires specific PHP extensions
  • Conflicts may arise with other plugins altering login URLs

Verdict

SiteGuard WP Plugin offers useful security features for WordPress sites, but users should be aware of its limitations, particularly regarding multisite support and compatibility with other plugins.

From the developer

jp-secure's own description of SiteGuard WP Plugin, lightly tidied.

SiteGuard WP Plugin helps protect WordPress sites by strengthening login and admin-area security. It helps reduce brute-force login attacks, password list attacks, comment spam, and unauthorized access to /wp-admin/.

Main Features

  • Admin Page IP Filter: Restricts wp-admin access to IP addresses that have successfully logged in.
  • Rename Login: Changes the URL of the login page from wp-login.php to a custom path.
  • CAPTCHA: Adds CAPTCHA to login, comment, password reset, and user registration forms.
  • Login Lock: Temporarily locks out IP addresses after repeated failed login attempts.
  • Login Alert: Sends email notifications when users log in.
  • Fail Once: Intentionally rejects the first valid login attempt and requires the user to try again shortly after.
  • Protect XML-RPC: Disables pingbacks or all XML-RPC access to help prevent abuse.
  • Block Author Query: Helps prevent username leakage through /?author=<number> requests.
  • Update Notifications: Sends email notifications when updates are available for WordPress core, plugins, or themes.
  • WAF Tuning Support: Creates exclusion rules to help prevent false positives when SiteGuard Server Edition WAF is installed.

Requirements and Compatibility

  • WordPress multisite is not supported.
  • Apache 1.3, Apache 2.x, and Nginx are supported.
  • Rename Login cannot be combined with a login page URL change feature in another plugin. Enable it in only one plugin; using both can leave two login URLs available, or stop the login page from loading.
  • CAPTCHA requires the PHP extensions mbstring and gd.
  • WAF Tuning Support requires SiteGuard Server Edition on Apache.

Documentation

Documentation, FAQs, and more details are available in English and Japanese.

Translations

This plugin is translated by the community. We appreciate your help with translations on the WordPress translation platform.

Read the full description on the official page →

Tagged as

Alternatives

Other plugins for stopping spam.

Akismet Anti-spam: Spam Protection

The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...

Free 5M+ installs 4.7★ (1,186)
Disable Comments

Allows administrators to globally disable comments on their site. Comments can be disabled according to post t...

Free 1M+ installs 4.7★ (280)
Antispam Bee

Sophisticated antispam plugin for effective daily comment and trackback spam-fighting. Built with data protect...

Free 700k+ installs 4.8★ (226)
Advanced Google reCAPTCHA

Captcha protection against spam comments &amp; brute force login attacks using Google reCAPTCHA.

Free 200k+ installs 4.8★ (430)