WP Hardening (discontinued)

What is WP Hardening (discontinued)?

WP Hardening was a free security plugin designed to perform a real-time audit of your WordPress site. It scanned for missing security best practices and offered a single-click fix for many common vulnerabilities. Developed by WebProtect.ai, the plugin was a side project that remained active for 7 years before being discontinued.

At its peak, WP Hardening held 10K+ active installs and maintained a 4.0/5 rating from 20 reviews. The rating distribution reveals a polarized user base: 65% of reviewers gave it 5% awarded only one star. The plugin was last updated on Sep 13, 2024, and its final version is 1.2.8.

The developer has issued a clear discontinuation notice. They recommend deactivating and deleting the plugin immediately. No further updates, bug fixes, or support will be provided.

Key Features of WP Hardening (discontinued)

• Hardening Audit – A scanner that checks your WordPress version, plugin freshness, PHP version, file permissions, database password strength, and firewall status.
• Stop User Enumeration – Prevents attackers from discovering usernames via the ?author=1 URL trick, a common step toward brute-force attacks.
• Change Login URL – Lets you alter the default wp-admin login path to reduce automated brute-force attempts.
• Disable XMLRPC – Blocks a protocol often abused for brute-force and DDoS attacks via pingbacks.
• Disable WP API JSON – Turns off the REST API for sites that don't use it, eliminating another attack vector.
• Disable File Editor – Removes the ability to edit theme and plugin files from the admin dashboard, limiting damage from compromised admin accounts.
• Email Alerts After Scans – Sends you an instant email report each time you run a security audit.

Who Should Use WP Hardening (discontinued)?

The plugin was aimed at site owners who needed a straightforward wordpress security hardening tool without complex configuration. It suited beginners and intermediate users running small to medium sites—blogs, business websites, or e-commerce stores—who wanted a one click wordpress security fix for common issues. The audit results were clear, and the fix buttons required no technical knowledge.

However, because the plugin is now discontinued, it should not be used on any active site. With 10K+ installs at the time of closure, many users relied on it for basic hardening. If you are still running WP Hardening, you are exposed to unpatched vulnerabilities. The developer explicitly states: "We recommend that you deactivate and delete this plugin from your WordPress site as soon as possible."

Installation & Setup

Installation was simple: search for "WP-Hardening" in your admin dashboard under Plugins > Add New, install, and activate. A new button appeared in the bottom-left of your admin menu. Setup was beginner-friendly—no configuration was required to run the initial scan. The plugin worked on WordPress 4.3+ and PHP 5.3+.

Support & Community

Support for WP Hardening has completely ceased. Over the last 2 months, the plugin recorded 0 open support threads and 0 resolved threads, translating to a 0% resolution rate. The developer has confirmed that "support for this plugin is no longer available."

The rating data tells a mixed story. With 65% five-star ratings, many users appreciated the plugin's ease of use for tasks like how to harden wordpress security or applying a wordpress security fix. The 20% one-star ratings likely reflect issues that were never resolved or the eventual abandonment. For any site still using this plugin, the only remaining action is to remove it and migrate to an actively maintained alternative.