Featured Plugin
NibbleSecure - Clean, powerful protection built without bloat to strengthen your WordPress site from the ground up.
NibbleSecure
Version 1.1.0 • Pro Features Available
Security down to the smallest detail.
NibbleSecure is an all-in-one website security suite that protects your site from the smallest security weaknesses to major threats, including malware, brute-force attacks, unauthorized access, and server-level attacks.
Why NibbleSecure? In computing, a nibble is four bits, half of a byte. It's a small but fundamental unit of digital information. NibbleSecure takes inspiration from that idea: security should start with the smallest details. NibbleSecure provides layered protection across your website, from authentication and files to malware detection, firewall protection, hardening, and DDoS attack prevention.
Key Capabilities
🛡️ Application Layer (L7) DDoS Protection
Shields your server against HTTP/HTTPS request floods, bad bot storms, and resource exhaustion attacks by automatically throttling aggressive traffic bursts before they hit your database.
🚪 Stealth Login Protection
Hides your login page from automated bots and brute-force attacks using a custom login URL.
🔒 Built-in 2FA Authentication
Adds secure two-factor authentication using authenticator apps like Google Authenticator or 1Password, with emergency recovery options.
🛡️ Smart IP Lockouts
Automatically blocks suspicious IP addresses after repeated failed login attempts with escalating penalties.
📧 One-Time Login Recovery
Allows locked-out admins to securely regain access via a one-time login link sent to their registered email.
🚨 Real-Time Security Alerts
Sends instant email notifications when brute-force attacks are blocked or important security events occur.
🌍 Active Session Control
Protect against session hijacking by monitoring active login sessions and instantly terminating suspicious or unwanted sessions with one click.
🛰️ Real-Time Geo-Anomaly Lockdown
Detects unexpected logins from new countries or devices in real time, immediately force-resets the password, destroys every active session, and emails the admin a new secure password within seconds.
🔍 Malware & Threat Scanning
Scans your files for obfuscated code, malicious scripts, and suspicious patterns that could indicate compromise.
🔬 Tier-2 AST Deep Inspection
Uses Abstract Syntax Tree behavioral analysis to catch obfuscated malware that signature-based regex scans miss, scoring every threat by structural risk and severity.
🤖 Bad Bot & Scraper Firewall
Blocks common malicious user-agents, content scrapers, and automated crawlers before they can probe your site, harvest data, or consume server resources.
🖼️ Anti-Clickjacking & Hotlink Shield
Prevents iframe embedding attacks and blocks raw media hotlinking to stop clickjacking attempts and protect your server bandwidth from theft.
🛠️ One-Click File Restoration
Restore core WordPress files directly from the official repository if any files are modified or corrupted.
🔄 Automatic Self-Healing
Automatically detects and restores important plugin files if they are modified or deleted.
🗓️ Schedule Automatic WP Backups
Set it and forget it. NibbleSecure automatically creates full backups of your database, files, and configuration on a schedule you control, so a recent restore point is always ready when you need it.
