WP Ghost — WordPress Security Plugin
WP Ghost (Hide My WP Ghost) – Security & Firewall
by John Darrel · WordPress.org page · Website
WP Ghost has 100,000+ active installs on WordPress.org and 2,786,803 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on September 3, 2026, tested up to WordPress 7.1.
WP Ghost at a glance
Is WP Ghost well maintained?
Features
The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.
- AI Security Explanations: Your findings explained for your own website and re-ranked by what actually exposes you, with a monthly allowance of AI checks…
- Ghost Mode: Maximum security preset, changes all paths, hides all file extensions, and enables all hiding options in one click
- IP Block Automation: Automatically block IP addresses that trigger repeated security threats
- AI Copyright Protection: Block 30+ AI training crawlers (GPTBot, ClaudeBot, PerplexityBot, and others) at the firewall level. List auto-updated with each…
- Full Security Threats Log: Unlimited entries with filters by threat type, status, country, and time range, full-text search, pagination, and CSV export
- Full User Events Log: Unlimited entries with filters, search, pagination, and CSV export
- Cloud Event Storage: 30-day cloud retention for audits and incident reports
- Real-time Email Alerts: Get notified instantly of brute-force attempts or suspicious activity
- Geo-Security (Country Blocking): Block entire countries or specific paths by country
- Advanced File Hardening: Hide file extensions (PHP, CSS, JS, JSON), secure wp-config.php, php.ini, and debug.log
- Database & Server Hardening: Fix file permissions, change database prefix, regenerate SALT keys
- Priority Support: Direct access to our security experts and founder-led assistance
WP Ghost reviews and ratings
372 reviews on WordPress.org, with the most recent ones as their authors posted them.
372 reviews
- 5★
-
316
- 4★
-
5
- 3★
-
8
- 2★
-
9
- 1★
-
34
-
WP Ghost has saved my ass MANY times
Hosting over a hundred WordPress sites is not for the timid. WP Ghost has made this responsibility much less of a stressor. Even when exploits are being actively compromised in the wild, WP Ghost helps to at least slow down any hacks hitting my sites. So far this year... zero hacks on any of the sites where I have WP Ghost installed. That it worth its weight in gold for sure!
mphaynes -
A very, very great addition
A truly fantastic addition! And the technical support team is incredibly helpful. Every day we see new and improved updates that, with God's grace, help the website achieve complete protection. Thank you, wpghost team!
tguhany -
Muito bom, funcional e prático!
O Hide My WP Ghost é fácil de usar e possui praticamente todos os recursos para proteger seu site WordPress. Continuem assim, vocês estão fazendo um ótimo trabalho! Hide My WP Ghost is easy to use with great, has almost ever feature to protect your WordPress website. Keep moving guys you are doing great.
Ivison Ramos -
WP Ghost has realy good support
WP Ghost is a really good plugin. I used Lite mode on most of my websites but now use a paid Pro Version of my main four websites that was getting attacked by rogue bots. The pro verson allows me to see a log and what the bots are with an IP Address. I noticed the rogues are using Cloudflare so it can be difficult to tell at first. Support is really good because I was help with a compatiblity problem with Windows Internet Information services and the URL Rewrite duplicating lines of code in the web.config file causing a 500 internal error. I do reccomend this plugin if you want to protect your websites against rogue bots.
Adrian McMaster -
A must have
Once you set up a WordPress site, you'll begin attracting visitors, not to buy, but to your login page and access like XML-RPC from automated servers worldwide, all aiming to access your WordPress dashboard. You may not even notice if they succeed, but your paid campaigns could inadvertently redirect your clients elsewhere. This tool helps ghost your WordPress site, changing you loging page, even making it more challenging for competitors to discover and replicate your strategies, or make it more professional like changing wp-content path to content o anything you like like files, so make your site looks is custom made. The support team is excellent; I recently raised an issue regarding compatibility between aaPanel, multi-server Nginx + LiteSpeed, and they promptly provided a solution along with compatibility details. Their support is excellent, you fell like talking to people no those support that just blame others.
sebastian -
WP Ghost is a plugin you won't regret using.
I've been using WP Ghost for over three years. I've used other paid plugins, but they've caused various issues, including speed issues, on my site. However, WP Ghost, along with the caching and SEO plugins, has always worked flawlessly. The customer service is also excellent.
uknew
Where WP Ghost ranks on WordPress.org
The rankings we track that WP Ghost appears in, and how its position changed over 30 days.
| Ranking | WordPress.org placement | Position | 30 days |
|---|---|---|---|
| Best Security Plugins | #31 by tag, #35 in search | #23 | – |
| Best Login Plugins | #8 by tag, not in search | #44 | – |
WP Ghost alternatives
Plugins that solve the same problem, ranked by how closely they overlap with WP Ghost.
-
Security Plugin, Firewall & Malware Scanner with Auto Removal 40,000+ installs · 4.8 -
Security Optimizer 1 million+ installs · 4.5 -
WP Hide & Security Enhancer 50,000+ installs · 4.4 -
Loginizer 1 million+ installs · 4.8 -
Login Security Captcha 10,000+ installs · 4.9
Details
Hide and Secure WP paths with the 8G Firewall, Brute Force protection and Passkeys. AI security explanations available with a subscription.
The full description, screenshots and every review live on the WordPress.org page.
Rankings WP Ghost competes in
Tags
- Brute Force
- firewall
- hide my wp
- login
- security
More from John Darrel
-
Website Security Check 100+ installs
- Version
- 7.0.10
- Last updated
- Sep 3, 2026
- First published
- Jul 1, 2016
- Requires WordPress
- 5.8
- Tested up to
- 7.1
- Requires PHP
- 7.4
- Pricing
- Free on WordPress.org
WP Ghost FAQ
What does WP Ghost do?
According to its WordPress.org readme, WP Ghost offers AI Security Explanations: Your findings explained for your own website and re-ranked by what actually exposes you, with a monthly allowance of AI checks, Ghost Mode: Maximum security preset, changes all paths, hides all file extensions, and enables all hiding options in one click, IP Block Automation: Automatically block IP addresses that trigger repeated security threats, AI Copyright Protection: Block 30+ AI training crawlers (GPTBot, ClaudeBot, PerplexityBot, and others) at the firewall level. List auto-updated with each and Full Security Threats Log: Unlimited entries with filters by threat type, status, country, and time range, full-text search, pagination, and CSV export.
How many active installs does WP Ghost have?
WordPress.org reports 100,000+ active installs for WP Ghost as of September 7, 2026.
Is WP Ghost still maintained?
Yes. The last release was on September 3, 2026 and it is tested up to WordPress 7.1.
Is WP Ghost free?
WP Ghost is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.
Where does WP Ghost rank among Security Plugins?
WP Ghost is #23 in the WordPress.org Security Plugins ranking.