Lightweight attack detection for WordPress. Logs brute force, XML-RPC abuse, SQL injection, XSS attempts and more. No bloat, no blocking — just data.
Alternatives to PF Secure Toolkit
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Hide and manage external download and redirect URLs behind customizable buttons and a clean titanium.download endpoint.
A lightweight plugin to disable XML-RPC, restrict the REST API, and hide the WordPress version.
Version Cloakv1.0.4
Hide or decoy plugin, theme and core versions from scanners. Neutralize XML-RPC and lock down WP-Cron.
Lock down the WordPress comment attack surface with layered protections while preserving existing comment data.
Agency Toolkitv1.0.40
Lightweight, modular client-site tools for agencies: security hardening, admin clean-up, notifications and maintenance settings.
Wonderful Secure Cleanupv1.4.0
A simple way to clean and secure WordPress by disabling unnecessary features like comments, XML-RPC, and RSS feeds.
Practical WordPress hardening, two-factor authentication, login protection, file monitoring, and transparent security checks.
Cerrojo Security Toolkitv0.3.0
Review security diagnostics and apply reversible WordPress hardening controls with explicit compatibility guidance.
Block comment spam, disable XML-RPC, restrict the REST API, stop user enumeration and block IPs, without a heavy security suite.