About this plugin
Vyntic Guard helps secure WordPress against brute-force login attacks, suspicious file changes, weak security configuration, and unwanted access attempts.
The free plugin combines a malware scanner, brute-force protection, login security controls, IP blocking, activity logging, WordPress hardening, security checks, and a custom login URL in one dashboard. It runs locally without requiring a Vyntic account or license key.
Malware Scanner
Review potential file-security issues before taking action.
- Malware scanner with administrator review
- WordPress core integrity checks using official WordPress checksums when available
- Encrypted quarantine for selected files
- Recovery-copy downloads before destructive actions
- Permanent delete controls for administrator-reviewed findings
- No automatic deletion of scan findings
Brute Force & Login Protection
Reduce repeated login attacks and control access to your WordPress login route.
- Brute-force protection with progressive lockouts
- Blocked IP manager with manual unblock controls
- Custom public login URL
- WordPress-generated login links updated for the custom route
- No renaming of WordPress core login files
Activity Log, IP Blocking & Hardening
Monitor important activity and strengthen common WordPress security settings.
- Activity logging with configurable retention
- Security dashboard with configuration score
- Security configuration check
- WordPress hardening controls
- Fingerprint-reduction controls
- Central blocked-IP management
Local-First Privacy
Vyntic Guard Free does not require a Vyntic account. Activity logs and blocked-IP data are stored in the site’s WordPress database and are not sent to Vyntic servers.
Vyntic Guard Pro
Vyntic Guard Pro is an optional add-on distributed separately. It adds:
- Two-factor authentication (2FA)
- Authenticator App (TOTP) with local QR enrollment
- Email, SMS, and WhatsApp OTP
- Passkey verification
- CAPTCHA and Google reCAPTCHA integration
- SMTP and Twilio provider configuration
- Stealth Engine for public WordPress path virtualization
- Drag-and-drop Login and 2FA Verification Page Builder
com/vyntic-guard
External Services
WordPress Core Checksum API
org when performing core-file integrity checks. The request contains the installed WordPress version and locale required by the WordPress checksum API. No Vyntic account is required for this request.
Site Self-Check
The Security Check can request the site’s own public home page to inspect visible WordPress fingerprints. This request targets the site itself.
Privacy
Vyntic Guard Free does not require a Vyntic account and does not send site security logs to Vyntic servers. Activity logs and blocked-IP data are stored in the site’s WordPress database.
The malware scanner can contact the official WordPress checksum API for core-file integrity checks as described in the External Services section.