Site Lockdown Security — WordPress White Label Plugin
by WP Fix It - WordPress Experts · WordPress.org page · Website
Site Lockdown Security has 600+ active installs on WordPress.org and 13,858 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on July 20, 2026, tested up to WordPress 7.0.4.
Site Lockdown Security at a glance
Is Site Lockdown Security well maintained?
Features
The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.
- Firewall Security with Smart Block, Monitor Only, WooCommerce Safe, and Emergency Shield protection modes
- WooCommerce-aware firewall handling for checkout, cart, Store API, REST API, AJAX, and payment gateway flows
- Cloudflare integration with visitor IP detection, API credential testing, edge actions, managed challenges, access rule syncing, and automatic rule cleanup
- Firewall Event Timeline with searchable and filterable events, severity details, manual IP actions, pagination, and daily summary alerts
- IP allowlist and blocklist controls for trusted IPs, CIDR ranges, immediate blocks, and manual firewall response management
- Custom blocked request page with editable title, subtitle, message, button, footer note, and live preview
- Site Lock to make important WordPress files and folders read-only after a site is clean and stable
- Watch Dog File Change Monitor with trusted baselines, new/modified/deleted file detection, review actions, scheduled scans, and alerts
- WordPress Core Check using official WordPress.org checksums to detect modified, missing, unreadable, or unexpected core files
- Infection Scanner for suspicious patterns, malware indicators, obfuscated code, backdoors, spam injections, and unwanted scripts
- Scheduled infection scans, security reports, update checks, and digest emails
- Email notification previews for individual alert types before notifications are sent
Site Lockdown Security reviews and ratings
5 reviews on WordPress.org, with the most recent ones as their authors posted them.
5 reviews
- 5★
-
5
- 4★
-
0
- 3★
-
0
- 2★
-
0
- 1★
-
0
-
Highly recommended.
As someone who regularly cleans hacked WordPress websites and performs security audits for clients, Site Lockdown Security has quickly become one of the first tools I install. What makes this plugin particularly valuable is that it focuses on visibility, prevention, and security posture rather than simply reacting after a compromise has already occurred. The ability to identify orphaned folders, hidden files, abandoned plugin directories, and other remnants left behind over the years provides insights that most traditional security plugins simply don't offer. From a malware removal perspective, this is an incredibly useful tool. In many compromised websites, malicious files are hidden in locations that site owners rarely inspect. Site Lockdown Security makes it much easier to spot unusual directories, unexpected files, and remnants of old plugins or themes that may present a security risk. I also appreciate the Site Lock functionality. Being able to quickly place a site into a protected state while performing maintenance, updates, investigations, or malware cleanup is a practical feature that I have not seen implemented this well elsewhere.As someone who regularly performs malware investigations, I can say this plugin can save a tremendous amount of time. Instead of manually reviewing hundreds or even thousands of files and directories, Site Lockdown Security quickly highlights areas that deserve attention, allowing you to focus your investigation where it matters most. No security or malware solution can ever offer a 100% guarantee. Security is always about reducing risk through multiple layers of protection. However, tools like Site Lockdown Security significantly improve a site's visibility and security posture, helping administrators identify weaknesses before they become serious problems. Another major advantage is its lightweight approach. Nothing runs on the frontend, there is no noticeable impact on performance, and the plugin focuses on providing actionable
Fred -
Easy to use!
WPFixIt has been an absolute lifesaver for my business. They've fixed countless number of issues for me. I trust them so much so I signed up for their hosting service. This plugin is the perfect addition! Easy to get rolling. Install and lock. The plugin is smart enough to know what to lock and not. So if you have an ecommerce site for example it will not lock the features that allows woocommerce to work for example. Having to manually update wordpress, themes, plugins is a minor VERY MINOR complaint I have as I prefer using MainWP but for the security peace of mind it works for me. Update: WPFixIt has made huge strides in this plugin! Including an addon for MainWP so I can still use its functionality to update everything in one place! They are also developing a firewall into the plugin. This plugin will soon not only rival but top Wordfence, Sucuri, and others and best of all its free!
bmccloskey -
Absolutely Essential – The Site Lock is a Game Changer!
I can’t say enough good things about Folder Auditor. It does exactly what it promises, but what really blew me away is the site lock feature. With just a click, I can lock down my entire site and know it’s 100% secure while I’m doing updates or troubleshooting. No more worrying about visitors running into broken pages or sneaky bots taking advantage while I work. The lock is instant, reliable, and gives me total peace of mind. I’ve tried other plugins with similar functionality, but nothing comes close to how smooth and effective this is. Combine that with the clean interface and lightweight performance, and you’ve got an absolute must-have for any WordPress site owner. If you value security and control, Folder Auditor is hands-down one of the best plugins you can install. Highly recommended!
LearnToDoIt -
Finally, a straightforward way to uncover orphaned folders plus a Site Lock
I installed Folder Auditor & Site Lock after noticing my /wp-content/ had turned into the wild west over the years, and I’m genuinely impressed with how clean and practical this plugin is. What I love most is the clear, no-nonsense workflow. The plugin adds a Tools → Folder Auditor screen and immediately scans the places that matter: your WordPress root, wp-content, plugins, themes, uploads, and even .htaccess. It compares what’s actually on disk with what WordPress recognizes, which makes it dead simple to spot orphaned or hidden plugin/theme directories and other leftovers that accumulate after updates or partial uninstalls. No guesswork, no hunting through folders. Just a concise list of what needs attention and why. The UI is thoughtfully organized into tabs (Root, Content, Plugins, Themes, Uploads, .htaccess), with a dashboard that summarizes findings at a glance. When you’re ready to dive deeper, the details view makes it easy to review suspicious directories and understand what’s safe to investigate or remove. I also appreciate the “view file” action buttons for quick spot-checks when something looks off. The Site Lock feature is the icing on the cake. With a couple of clicks, you can lock folders and files read-only to block unauthorized changes. That’s exactly the kind of damage-prevention control I want on sites that shouldn’t be changing at the file level. Pair that with the ability to set sensible security headers, and you’ve got a lightweight, practical layer of protection that complements your existing security stack. Performance-wise, it’s a breath of fresh air. Nothing is running on the frontend; scans only happen when you open the tool. That means zero impact on visitors and no mystery cron jobs to worry about. It’s truly “install, activate, audit.” No complex configuration, no fiddly setup. Highlights: Instantly surfaces orphaned/hidden plugin and theme folders you won’t see on the normal Plugins/Themes screens. Flags missing plugin folders referen
WP Rocks -
Didn't Know How Much I Needed This
While I consider myself a fairly advanced WordPress user, I'm not technical enough to mess with MySQL tables. I've had my site since 2004 and it is crazy how much stuff has been left behind, how many outdated an unused files I have. Folder Auditor & Site Lock has done an amazing job pin pointing in a clear to understand way what is out of place, unused, potentially causing security issues and more. From my plugins, themes, main content - all of it. This is going to be a must-install for my old sites, and a will install on any new sites
Where Site Lockdown Security ranks on WordPress.org
The rankings we track that Site Lockdown Security appears in, and how its position changed over 30 days.
| Ranking | WordPress.org placement | Position | 30 days |
|---|---|---|---|
| Best White Label Plugins | #34 in search, not tagged | #58 | – |
| Best Security Plugins | #52 in search, not tagged | #83 | – |
Details
Audit, protect, monitor, firewall, and secure WordPress with premium tools at no cost.
The full description, screenshots and every review live on the WordPress.org page.
Rankings Site Lockdown Security competes in
Tags
- firewall
- malware scanner
- wordpress security
More from WP Fix It - WordPress Experts
-
WC Order Test 6,000+ installs -
WC Speed Repair 1,000+ installs -
Fresh Plugins 300+ installs -
Conflict Finder 100+ installs
- Version
- 9.2
- Last updated
- Jul 20, 2026
- First published
- Aug 29, 2025
- Requires WordPress
- 5.0
- Tested up to
- 7.0.4
- Requires PHP
- 7.4
- Pricing
- Free on WordPress.org
Site Lockdown Security FAQ
What does Site Lockdown Security do?
According to its WordPress.org readme, Site Lockdown Security offers Firewall Security with Smart Block, Monitor Only, WooCommerce Safe, and Emergency Shield protection modes, WooCommerce-aware firewall handling for checkout, cart, Store API, REST API, AJAX, and payment gateway flows, Cloudflare integration with visitor IP detection, API credential testing, edge actions, managed challenges, access rule syncing, and automatic rule cleanup, Firewall Event Timeline with searchable and filterable events, severity details, manual IP actions, pagination, and daily summary alerts and IP allowlist and blocklist controls for trusted IPs, CIDR ranges, immediate blocks, and manual firewall response management.
How many active installs does Site Lockdown Security have?
WordPress.org reports 600+ active installs for Site Lockdown Security as of September 7, 2026.
Is Site Lockdown Security still maintained?
Yes. The last release was on July 20, 2026 and it is tested up to WordPress 7.0.4.
Does Site Lockdown Security have good support?
On the WordPress.org forum, 1 of 1 recent support threads for Site Lockdown Security are marked resolved. That is the developer's free support; a paid version usually comes with its own channel.
Is Site Lockdown Security free?
Site Lockdown Security is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.
Where does Site Lockdown Security rank among White Label Plugins?
Site Lockdown Security is #58 in the WordPress.org White Label Plugins ranking.