SiteGuard WP Plugin

What is SiteGuard WP Plugin?

SiteGuard WP Plugin is a focused security tool built to stop brute force and password list attacks on WordPress login pages. Developed by jp-secure, this plugin has been in active development for 12 years, making it one of the older dedicated security plugins in the directory. It currently holds over 500,000 active installs and maintains a solid 4.3 out of 5 star rating from 15 total ratings. A notable 73% of those ratings are five-star, with zero one-star reviews recorded. The plugin specializes in login-specific protections rather than offering a general site firewall.

version 1.8.6 was last updated on April 22, 2026, reflecting consistent maintenance from its Japanese development team. The plugin's description clearly states it does not support WordPress multisite networks. It also requires Apache 1.3 or 2.x as a web server for full functionality. For the CAPTCHA feature, your PHP installation must include both the "mbstring" and "gd" extension libraries.

Key Features of SiteGuard WP Plugin

• Admin Page IP Filter: Blocks access to wp-admin by returning a 404 error for unrecognized IP addresses, while automatically recording and allowing IPs after a successful login.
• Rename Login: Changes the default wp-login.php URL to a custom name (default is "login_5 random digits") to hide the login page from automated attacks.
• CAPTCHA: Adds a visual challenge to the login and comment forms, with support for both hiragana characters and standard alphanumeric text.
• Login Lock: Temporarily blocks an IP address after a set number of failed login attempts within a defined time period, without locking individual user accounts.
• Login Alert: Sends an email notification to the user each time a successful login occurs, helping site owners detect unauthorized access quickly.
• Fail Once: Forces the first login attempt to fail even with correct credentials, then requires a second attempt within 5 to 60 seconds to succeed.
• Disable Pingback: Turns off the WordPress pingback feature entirely to prevent its abuse in distributed denial-of-service attacks.
• Block Author Query: Prevents user name leakage by blocking the common "/?author=" URL pattern that attackers use to enumerate usernames.

Who Should Use SiteGuard WP Plugin?

This plugin is ideal for site owners who want targeted login security without a heavy feature set. It suits beginners who can install and activate it from the WordPress dashboard with minimal configuration. The 500,000 active installs indicate strong adoption among small to medium sites running on Apache servers. Users who manage a single WordPress site and need protection against brute force attacks will find the core features immediately useful.

More experienced administrators will appreciate the granular controls for IP filtering and CAPTCHA customization. Sites that receive comment spam can benefit from the CAPTCHA option on comment forms. However, users on NGINX or other non-Apache servers should note the mod_rewrite requirement for the rename login and admin page filter features. The plugin's 12-year history and consistent updates suggest it is a stable choice for production environments.

Installation & Setup

You can install SiteGuard WP Plugin directly from the WordPress dashboard by searching for "SiteGuard WP Plugin" in the Plugins menu. After activation, the plugin adds a new "SiteGuard" menu item where you can toggle each security feature on or off. The default settings are conservative, making it beginner-friendly, though the CAPTCHA and rename login features require verifying that your server meets the mbstring and mod_rewrite requirements.

Support & Community

The plugin's support forum shows a mixed picture. Over the past two months, there were 7 open support threads and only 2 resolved, giving a resolution rate of 29%. This is below the average for popular plugins, though the rating data tells a different story. With 73% five-star ratings and zero one-star ratings, most users report a positive experience out of the box. The development team provides documentation and FAQs on both English and Japanese pages, which may help offset the slower forum response times. For a security plugin that handles login access, the 2 resolved threads in two months is a point to consider before relying on rapid support.