Comprehensive, all-in-one security suite for WordPress, designed to protect your website from modern threats with a powerful, local, and modular approach. It combines proactive attack prevention, deep security auditing, and real-time file integrity monitoring into a single, elegant solution.

Key Features & Benefits:

• Proactive Login Shield: Secure your login page by limiting attempts, automatically blocking malicious IPs and countries, and even changing the default login URL to stop brute-force attacks before they start.
• Comprehensive Security Scanner: Run automated, in-depth checks against 25 critical security points. Our scanner identifies vulnerabilities like weak user accounts, exposed files, outdated software, and misconfigurations, providing clear recommendations to harden your site.
• Advanced File Integrity & Malware Detection: Go beyond simple scanning. Our system monitors your core WordPress files for unauthorized changes, actively hunting for webshells and malicious code by detecting dangerous functions, ensuring your site's core integrity.
• Intelligent Web Application Firewall (WAF): Block common web attacks like SQL Injection (SQLi), Cross-Site Scripting (XSS), and Command Injection in real-time. The firewall also filters out bad bots and malicious user agents, displaying a custom block page to unauthorized visitors.
• Professional Security Dashboard: Get a clear, visual overview of your website's security health. Monitor key metrics, blocked attacks, and active threats with modern charts (Chart.js) and export detailed reports in PDF or CSV formats for further analysis.
• Customizable Alert System: Stay informed with professional, HTML-formatted email alerts. Choose which notifications to receive—from failed logins and firewall blocks to critical security scan results—ensuring you're always aware of your site's status.

Login Shield Protection

  - Configurable max login attempts (default: 5)
  - IP blocking with customizable duration
  - Custom login URL capability
  - IP whitelist functionality
  - Real-time login monitoring
  
25-Point Security Scan
  - Comprehensive WordPress security audit
  - Auto-fix capability for several issues
  - Scheduled scanning (hourly/daily/weekly)
  - Detailed recommendations
  
 File Integrity Monitoring
  - SHA256 hash comparison
  - Webshell detection (eval, base64_decode, shell_exec, etc.)
  - False positive marking system
  - File quarantine with backup
  - Monitors: /uploads/, /themes/, /plugins/, /wp-includes/
  
 Firewall Protection
  - SQL Injection detection and blocking
  - XSS attack prevention
  - Command injection protection
  - Malicious user agent blocking
  - Custom block page
  - Auto IP blocking after repeated attempts
  
 Email Alert System
  - Professional HTML email templates
  - Configurable alert types
  - Severity-based notifications
  - Test alert functionality
  
 Dashboard
  - Security score display
  - Real-time statistics
  - Attack counter (7-day view)
  - Active threats monitor
  - Recent activity log
  - CSV export capability
  
Settings & Configuration
  - Easy-to-use interface
  - Import/Export settings (JSON)
  - Setup wizard for quick start
  - Basic and Advanced presets

* Built for WordPress 6.0+

* Requires PHP 8.0+

* Bootstrap 5 UI framework

* Chart.js for visualizations

* Fully translatable (i18n ready)

* GPL v2 compatible

* Follows WordPress Coding Standards

* Optimized database queries with $wpdb->prepare()

* Proper nonce verification and capability checks

* Escaped output for security

DOCUMENTATION:
* Comprehensive HTML documentation
* Inline code comments
* Troubleshooting guide
* FAQ section