SiteGround Security

Plugin bem seguro.

Really nice produce (I also use their hosting and SiteGround Optimizer). It all works very nicely

excellent. Does simply the job

I like the way it is simple to use.

Plugin works well.

Yesterday I started researching a new security plugin that I could switch to for all my WordPress sites (about 50). Skimming the plugin directory I found SiteGround Security and I must say this is the most promising looking plugin I have ever encountered! The biggest PRO for me: SiteGround is a professional hosting service and they are using this plugin on all WordPress sites they host, so they will have a strong motivation to keep sg-security as high-quality as possible, without the need to upsell it like so many other plugins are doing it. I have two questions: 1. Is there a place where you host the plugin's source publicly, like for example on GitHub? I couldn't find anything except a security warning about 2FA in an earlier version (1.2.5, can't post link here due to WP guidelines). 2. What was your reasoning behind not making the limit_login_attempts periods (1 hour, 1 day, 1 week) un-filterable? I wanted to immediately reduce the first period to something like 20 minutes, but those periods are hard-coded right now inside SG_SecurityLogin_ServiceLogin_Service->log_login_attempt( $error ) (Version 1.3.7). Thanks again.

I used their Login Security for only IP Login Access. And it's working well and perfect. I haven't got any hacks since then!

I love Siteground and all their features / plugins. But ever since v1.3.5 it started causing issues logging in because of certain characters I was using in my custom login URL, namely $ and = signs. Initially with v1.3.5 they stopped supporting the $ sign, so I had to login via ftp, disable the plugin, then login to the Wordpress backend, then renable the plugin via ftp, then update the custom login URL in the plugin, then everything worked ok. Then v1.3.7 came out and they stopped supporting the = sign, so I had to go through all that process again. I manage 105 websites so this was an absolute nightmare, plus having to email all my clients with new login URLs twice in the space of a month, didn't go down to well at all. I hate to say this, but if your an agency, avoid using this plugin...

Great stuff!

I know very little about WordPress security. This plugin allowed me to strengthen security in one shot. It was designed carefully. Options are explained. (The PDF guide available from Siteground is also informative.) The activity log filters are particularly powerful. I was able to spot some suspicious 404s and block the IPs. I am more aware and more protected with this plugin.