View full plugin documentation – CLICK HERE Site Lockdown Security gives WordPress administrators, agencies, developers, and support teams a full security command center without hiding the best tools behind a paid upgrade. Most WordPress security plugins reserve their strongest features for premium
PricingFree downloadThe WordPress.org download is free. Pro versions, add-ons or external services may cost extra.
CompatibilityRequires WordPress 5.0 and PHP 7.4.
SourceWordPress plugins · Nov 13, 2026
01 / Source details
Aboutthistool.
View full plugin documentation – CLICK HERE
Site Lockdown Security gives WordPress administrators, agencies, developers, and support teams a full security command center without hiding the best tools behind a paid upgrade.
Most WordPress security plugins reserve their strongest features for premium plans: firewalls, file change monitoring, malware scanning, scheduled reports, branded client dashboards, email alerts, login protection, cleanup tools, Cloudflare controls, and advanced hardening. Site Lockdown Security includes those kinds of features in one plugin, and they are not treated as upsells.
Use Site Lockdown Security to audit files, lock down important folders, monitor file changes, verify WordPress core integrity, scan for suspicious code, review abandoned folders, enforce password resets, check public file exposure, monitor redirects, protect logins, review risky software, receive branded email alerts, and run a WordPress-aware firewall with Cloudflare and WooCommerce compatibility controls.
Premium Features Without Premium Upgrade Fees
Site Lockdown Security is built around a simple promise: powerful WordPress security features should not require surprise upgrade fees.
Features that are commonly sold as premium add-ons in other WordPress security plugins are included here, including white label branding, firewall controls, file change monitoring, scheduled security reports, infection scanning, cleanup tools, email notification previews, Cloudflare edge actions, login security, and client-ready branded alerts.
We will never charge for plugin upgrades or future features. When Site Lockdown Security improves, your security tools improve with it.
Key Features
Firewall Security with Smart Block, Monitor Only, WooCommerce Safe, and Emergency Shield protection modes
WooCommerce-aware firewall handling for checkout, cart, Store API, REST API, AJAX, and payment gateway flows
Cloudflare integration with visitor IP detection, API credential testing, edge actions, managed challenges, access rule syncing, and automatic rule cleanup
Firewall Event Timeline with searchable and filterable events, severity details, manual IP actions, pagination, and daily summary alerts
IP allowlist and blocklist controls for trusted IPs, CIDR ranges, immediate blocks, and manual firewall response management
White Label Branding for agencies, developers, maintenance providers, and support teams
White Label import and export to move branding settings between client sites
Custom branding controls for plugin text, colors, icons, dark icons, banners, email imagery, and dashboard presentation
Folder and file auditing for root files, wp-content, plugins, themes, uploads, .htaccess files, abandoned folders, and suspicious items
File preview, download, approve, ignore, delete, include, and bulk actions
Cleanup tools for old backups, temporary files, logs, cache files, abandoned folders, and other clutter
Plugin Refresher and Theme Refresher to reinstall clean WordPress.org copies of plugins and themes
Permissions Check for important WordPress files and folders, including Site Lock-aware status
Software Health to identify outdated, abandoned, or potentially risky plugins and themes
Risk Review for common local security issues, severity sorting, ignore/include controls, scheduled checks, and alerts
Redirect Monitor to test public visitor behavior and alert when visitors may be redirected to an unauthorized website
Update Monitor for pending WordPress core, plugin, and theme updates with alerts only when updates are available
Password Reset Enforcement by user role, including immediate session logout and secure reset guidance
Public File Exposure Check for sensitive backup, log, configuration, database, and metadata files
Login Security with protected login URL controls, login limits, activity tracking, session controls, and role-based expiration
Security Tools for XML-RPC exposure, author scans, debug exposure, SSL information, blacklist status, file finding, and hardening reviews
Setup Guide with progress tracking for recommended protection steps
Responsive AJAX admin interface designed for fast navigation and practical daily use
Built For Agencies And Client Support Teams
Site Lockdown Security includes White Label Branding because security work is often delivered as a professional service.
You can brand the admin experience, email imagery, colors, icons, banners, and plugin presentation around your business or client support program. Branding settings can be exported and imported between sites so the same client-ready experience can be reused across multiple installations.
These are the kinds of client-facing tools that are often locked behind agency or premium licenses elsewhere. In Site Lockdown Security, they are included.
Firewall Security
Firewall Security helps protect WordPress from suspicious requests, exploit payloads, scanner signatures, bot signatures, dangerous methods, XML-RPC abuse, REST API exposure, suspicious query strings, and excessive request rates.
Protection modes include Smart Block for high-confidence malicious traffic, Monitor Only for tuning without blocking, WooCommerce Safe for checkout and payment compatibility, and Emergency Shield for active attack situations where public traffic needs to be restricted while administrators retain access.
Firewall Security also includes event logging, severity tracking, searchable timelines, IP allow/block actions, Cloudflare-aware IP detection, Cloudflare edge actions, notification settings, email summaries, and a customizable blocked request page.
Site Lock
Site Lock helps prevent unwanted file additions, injected scripts, unauthorized edits, and accidental deletions by making selected WordPress files and folders read-only.
You can unlock the site when legitimate updates or maintenance are needed, then apply Site Lock again when finished.
Site Lock is useful after a site has been cleaned, audited, updated, or stabilized and you want to reduce the chance of future unexpected file changes.
Watch Dog
Watch Dog creates a trusted baseline of your site files and compares future scans against that baseline.
It reports new, modified, and deleted files so administrators can quickly review changes after updates, maintenance, cleanup work, or suspicious activity.
Watch Dog includes file change monitoring, baseline rebuilding, review actions, scheduled scans, protected baseline storage, and email alerts when changes are detected.
Watch Dog Baseline Storage
Watch Dog stores protected baseline data under:
wp-content/uploads/site-lock/watch-dog/
This keeps baseline data outside the plugin folder so it is not removed during plugin updates.
Sites updating from older versions automatically migrate Watch Dog baseline storage from the previous location:
wp-content/uploads/guard-dog/watch-dog/
After a successful migration, the old storage folder is safely removed and the new Watch Dog storage path remains excluded from Site Lock so baseline files can continue to be updated when needed.
Redirect Monitor
Redirect Monitor tests public site behavior as different visitor types and alerts when visitors may be redirected to an unauthorized website.
It can test the homepage, login page, custom paths, and same-site navigation menu URLs using a focused scan strategy designed to avoid oversized scan jobs.
Core Check
Core Check compares installed WordPress core files against the official WordPress.org checksum API.
It reports modified, missing, unreadable, or unexpected files in WordPress core areas so administrators can review potential core file integrity problems.
Update Monitor
Update Monitor checks pending WordPress core, plugin, and theme updates and sends email alerts only when updates are available.
Infection Scanner
The infection scanner reviews site files for suspicious patterns commonly associated with malware, backdoors, obfuscated scripts, spam injections, and unwanted code.
Scans can be run manually or scheduled, and results can be included in reports and notifications.
Email Notifications
Site Lockdown Security includes configurable email alerts for important security events and scheduled checks.
Supported notification types include:
Plugin Update Notification
Security Snapshot Digest
Scheduled Infection Scan
Automated Security Report
File Change Notification
Core Change Notification
Software Health Alert
Risk Review Alert
Firewall Realtime Alerts
Firewall Summary Notifications
Each individual alert includes a preview option so administrators can review the email layout before using it.
The global email notification settings form allows administrators to set the default frequency and recipient email for alerts in one place.
White Label Branding
White Label Branding is one of the standout features of Site Lockdown Security because it lets agencies and service providers present security work under their own brand.
Administrators can customize branding text, colors, icons, dark icons, banners, email imagery, and dashboard presentation.
White Label settings can be exported to a JSON file and imported on another site, making it easier to reuse the
See it in action
Screenshots & previews.
Command Center showing security score and important folder issues present on your site.Main Folder Auditor displaying folders and files in the root of your WordPress installation.Content Folder Auditor listing folders and files found inside the wp-content directory.Plugins Folder Auditor showing installed plugin folders and hidden or orphaned plugin directories.Themes Folder Auditor displaying theme folders on disk and alerting you to invalid or unrecognized themes.Uploads Folder Auditor showing upload folders and identifying PHP files present in uploads..htaccess Auditor listing every .htaccess file detected across your site for review and management.Security Settings page where you can configure Site Lock, security headers, and user hardening features.Infection Scanner selection screen allowing you to choose which areas of your site to scan.Security Tools section providing access to File Finder & Remover, Blacklist Checker, SSL Checker, and Plugin Refresher.File Finder & Remover tool for searching specific filenames or detecting files with no extension.Blacklist Checker results showing your domain/IP status across multiple blacklist and reputation services.Plugin Refresher tool for reinstalling a fresh copy of a WordPress.org plugin.Site Lock prevention notice informing you that Site Lock is enabled and blocking file changes.Settings screen for auto lock, Site Lock admin bar status, scheduled scans, automated reports, email notifications, and white label branding.Watch Dog area for file change monitor, core check, software health, and risk review security tools.File Change Monitor to create a trusted file baseline, scan for changes, and review individual files.Core Check to compare WordPress core files against the official WordPress.org core checksum API.Theme Refresher tool for reinstalling a fresh copy of a WordPress.org theme.Permissions Check to view important file and folder permissions.
02 / Source details
Gettingstarted.
01Upload the plugin files to the /wp-content/plugins/ directory, or install through the WordPress Plugins screen.
02Activate the plugin through the Plugins screen in WordPress.
03Navigate to Site Lockdown to begin auditing and protecting your site.
04Use Site Lock to lock files when your site is clean and stable.
05Use Watch Dog > File Change Monitor to create a trusted baseline and scan for file changes.
06Use Watch Dog > Core Check to verify WordPress core file integrity.
07Use Setup Guide to complete recommended protection steps.
08Configure email alerts, scheduled scans, reports, and white label branding as needed.
03 / Source details
Frequently asked questions.
Why do I need this plugin?
Site Lockdown Security helps you identify leftover folders, suspicious files, unexpected file changes, weak security settings, risky permissions, and WordPress core file issues. It gives administrators better visibility into what exists on the server and what may need review.
Does Site Lockdown Security automatically delete orphaned folders or suspicious files?
No. Site Lockdown Security is built to help you review and take informed action. Files and folders are shown with action buttons so you can decide whether to view, download, ignore, include, delete, approve, refresh, or lock them.
What is Site Lock?
Site Lock makes protected files and folders read-only to help prevent unauthorized changes. You can unlock the site when updates or maintenance are needed, then lock it again when finished.
What is Watch Dog File Change Monitor?
Watch Dog File Change Monitor creates a trusted baseline of your site files. Future scans compare the current site against that baseline and report new, modified, or deleted files.
What is Watch Dog Core Check?
Watch Dog Core Check compares your installed WordPress core files against the official WordPress.org checksum API. It helps detect modified, missing, unreadable, or unexpected files in WordPress core areas.
Does Core Check scan plugins and themes?
No. Core Check only verifies WordPress core files in the WordPress root, wp-admin, and wp-includes areas. Plugins, themes, uploads, and custom content are handled by other Site Lockdown Security tools.
Will Watch Dog work when Site Lock is enabled?
Yes. Watch Dog stores baseline and scan data in its protected uploads storage folder, and Site Lockdown Security allows that required Watch Dog path to remain writable while Site Lock is active.
Where is Watch Dog baseline data stored?
Watch Dog stores protected baseline data under wp-content/uploads/site-lock/watch-dog/. This keeps baseline data outside the plugin folder so it is not removed during plugin updates. Sites updating from older versions automatically migrate baseline storage from the previous wp-content/uploads/guard-dog/watch-dog/ location.
Does Watch Dog email me when file changes or core issues are found?
Yes. File Change Monitor and Core Check each include email alert settings. Emails are sent only when the related scan finds issues.
Can I preview email notifications?
Yes. Individual email alert settings include preview tools so you can review how each notification type will look. Preview layouts are available for plugin update alerts, security snapshot digests, scheduled infection scans, automated security reports, file change notifications, core change notifications, software health alerts, and risk review alerts.
What makes the White Label options unique?
Most WordPress security plugins focus only on scanning, hardening, firewalls, or alerts. Site Lockdown Security also includes built-in White Label Branding, allowing agencies, developers, and support providers to present the security dashboard, branding assets, and notification imagery with their own identity. This makes it especially useful for client management, maintenance services, and branded support programs.
Can I white label Site Lockdown Security?
Yes. Site Lockdown Security includes White Label settings for customizing plugin branding text, colors, icons, dark icons, banners, and email imagery.
Can I move White Label settings to another site?
Yes. Use White Label Export to download the current branding settings as a JSON file. Use White Label Import on another site to upload and apply those settings. Imported settings are validated and sanitized before being saved.
What happens when I reset White Label settings?
Reset Settings restores the default Site Lockdown theme. When the settings return to the default theme, the default support contact button is shown again.
Will this slow down my website frontend?
No. Site Lockdown Security tools run inside the WordPress admin area and do not run on the public frontend during normal page visits.
Does it work on multisite?
Site Lockdown Security is currently designed for single-site WordPress installations. Multisite support may be added in a future release.
FinderPress Media Auditor helps site administrators scan for broken images, missing Media Library files, unreachable media URLs, and other media issues across WordPress content. Use it to audit images, video, audio, PDFs, featured images, and attachment files without sending scan data to an external
The Accepted Payment Methods plugin is a straightforward, lightweight solution that enhances your website by displaying visually appealing icons of the payment methods you accept. This plugin is ideal for a variety of websites, including e-commerce platforms, service-oriented websites, and informati
