WP Manifestindependent plugin directory
manifest / security / wp-ago-harden

aGo Harden

aGo Harden: WordPress security hardening dashboard (custom login URL, brute-force, headers)

by aGo Lab · github.com/sixtovaldese/wp-ago-harden · website

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/sixtovaldese/wp-ago-harden/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/sixtovaldese/wp-ago-harden ↗

Security hardening dashboard for WordPress: custom login URL, brute-force protection, security headers, file editor lockdown and real-time score. Free, no Pro tier.

English · Español

English

aGo Harden is a single dashboard with reversible toggles to harden a WordPress site. Each switch ships with a 1-line summary plus an expandable explanation. Safe defaults are seeded on first activation.

Features

  • Custom login URL.
  • Brute-force login protection with cooldown.
  • Security HTTP headers.
  • Disable file editor and plugin editor.
  • Disable PHP execution in /wp-content/uploads/.
  • Disable directory listing.
  • Block author enumeration probes.
  • XML-RPC disabled or pingback-only.
  • Real-time security score.
  • No external services.
  • English, Spanish (es_ES) and Brazilian Portuguese (pt_BR) bundled.

Installation

  1. Upload the ago-harden folder to /wp-content/plugins/ or install via the Plugins screen.
  2. Activate the plugin.
  3. Go to aGo Tools, then Harden. Toggle switches as needed.

License

GPL-2.0-or-later.

Español

aGo Harden es un dashboard unico con toggles reversibles para fortalecer la seguridad de WordPress. Cada switch trae un resumen de una linea y una explicacion expandible. Valores seguros se siembran en la primera activacion.

Caracteristicas

  • URL de login personalizada.
  • Proteccion brute-force con cooldown.
  • Headers HTTP de seguridad.
  • Desactivar editor de archivos y plugins.
  • Bloquear ejecucion PHP en /wp-content/uploads/.
  • Desactivar directory listing.
  • Bloquear sondeo de author enumeration.
  • XML-RPC desactivado o pingback-only.
  • Score de seguridad en tiempo real.
  • Sin servicios externos.
  • Ingles, espanol (es_ES) y portugues brasileno (pt_BR) incluidos.

Instalacion

  1. Sube la carpeta ago-harden a /wp-content/plugins/.
  2. Activa el plugin.
  3. Ve a aGo Tools, luego Harden y configura los toggles.

Licencia

GPL-2.0-or-later.