“breached-passwords”

Security for WordPress: brute-force lockouts on every way in, account names kept private, breached passwords refused, with a journal and statistics. Runs on your server.