LunarShield
LunarShield helps site administrators reduce common WordPress attack surfaces with a focused set of hardening controls. No bloat, no unnecessary features. Just the protections that actually matter, built by people who deploy and secure WordPress sites for a living.
Designed to be lightweight and conflict-friendly, LunarShield adds meaningful security without slowing down your site or clashing with your existing theme and plugin stack.
Login Rate Limiting
Automatically throttles repeated failed login attempts and tracks blocked IPs. Stops brute-force attacks at the door before they can gain a foothold.
Uploads Directory PHP Protection
Blocks PHP execution inside the WordPress uploads directory, one of the most common vectors for malicious file upload attacks on poorly secured sites.
WordPress Version Hiding
Optionally removes WordPress version information from page source and headers, reducing the information available to automated scanners looking for vulnerable installs.
Hardened Admin Controls
Settings and reports pages are protected with proper WordPress capability checks, ensuring only authorized administrators can view or change security configuration.