Polanger Admin Suite — WordPress Security Plugin

Polanger Admin Suite at a glance

Is Polanger Admin Suite well maintained?

• Lightweight, WordPress-aware Firewall designed to protect common attack surfaces without turning every visitor request into a heavy security scan
• Three protection modes: Monitor Only for observation, Safe Protection for everyday websites, and Strict for more aggressive protection when stronger security…
• Blocks common bot probes, exposed-file scans, suspicious paths, traversal attempts, unsafe requests, and other high-risk traffic before it can reach sensitive…
• Protects native WordPress login, registration, and password-reset flows with identity and IP-based rate limiting
• Hardens the REST API and XML-RPC against common abuse, including anonymous request pressure, user enumeration, multicall attacks, and optional anonymous write…
• Uses a request scoring engine that combines multiple suspicious signals before deciding whether traffic should be monitored or blocked
• Malicious Outbound Redirect Protection helps protect visitors when compromised or injected frontend code attempts to open known malicious destinations or…
• A compact local PhishTank reputation index strengthens outbound protection without sending each visitor, URL, or destination to a remote reputation API
• Supports IP allowlists and denylists, IPv4/IPv6 CIDR ranges, trusted proxy configurations, and temporary cooldowns for repeated abusive traffic
• Country Access Control can block visitors from selected countries using a local DB-IP Country Lite database. Visitor IP addresses are not sent to an external…
• Country data is prepared only when country blocking is configured, checked periodically for updates, and removed when the country policy is cleared
• Adds practical security response headers, username enumeration protection, and controls for WordPress Application Password usage