| Feature | Free | PRO |
|---|---|---|
| Private login URL (single slug) | ✔️ | ✔️ |
| Multiple secret URLs (global / role / user) | — | ✔️ |
Stealth 404 for /wp-login.php | ✔️ | ✔️ (plus honeypot option) |
| Honeypot fake login + auto-block | — | ✔️ |
| IP whitelist/blacklist (IPv4/IPv6/CIDR) | — | ✔️ |
| Country allow/deny (via GeoIP filter) | — | ✔️ |
| Schedule-based access (days & times) | — | ✔️ |
| Role-based post-login redirects | — | ✔️ |
| Logging & dashboard table | — | ✔️ |
| Export logs (CSV/JSON) | — | ✔️ |
Secure Login Shield PRO
Advanced Login Stealth for WordPress
Multiple secret URLs per user/role, IP allow/deny & country rules, schedule-based access, honeypot at /wp-login.php, logging, and CSV/JSON exports — all in a clean dashboard.
Stop bots at the door: hide
/wp-login.php and route them into a safe honeypot.Lock access by IP, country, and schedule—your team gets in, the noise stays out.
See everything: real-time logs and one-click exports for audits & forensics.
⚙️ Requires WordPress 6.0+ · Works with most caching/CDNs · GPL-compatible license.
What PRO Adds
Multiple Secret URLs
✓Global secrets, per-role, and per-user slugs (e.g., /dragon-ben, /editor-door).
IP & Country Rules
✓Whitelist/blacklist IPs & CIDR; optional country allow/deny via GeoIP filter.
Schedule-Based Access
✓Allow logins only on selected days & time windows (e.g., Mon–Fri 9–5).
Honeypot for /wp-login.php
✓Fake login form silently logs hits & auto-blocks IPs for N minutes.
Logs & Reports
✓Dashboard table, filters, retention trimming, and visibility into attempts.
Exports
✓One-click CSV or JSON export of events for audits/forensics.
Free vs PRO
Pricing
1 Site
$59 one-time
- Use on 1 WordPress site
- All PRO features
- Lifetime updates
- Email support
Best value
5 Sites
$129 one-time
- Use on up to 5 sites
- All PRO features
- Lifetime updates
- Email support
Unlimited Sites
$199 one-time
- Use on unlimited personal & client sites
- All PRO features
- Lifetime updates
- Priority support
FAQ
Will it work with my cache/CDN?
Yes. After changing secret URLs, visit Settings → Permalinks and click “Save”. Clear your cache/CDN so new rewrite rules propagate.
Can I set different secrets per role or person?
Yep. Define global & role secrets in the settings, and a personal secret in each user profile (Admin-only field).
Does PRO collect personal data?
It logs IP, path, user-agent, referrer, and event type for security. You set retention days; exports are on-demand.
How do country rules work?
Use any GeoIP plugin to provide ISO-2 via the sls_pro_detect_country filter. Then pick allow/deny mode and a country list.
Compatibility & Requirements
- WordPress 6.0+ · PHP 7.4+ (PHP 8.x recommended)
- Works with most themes & plugins; rewrite rules integrate with core.
- Optional: GeoIP provider for country rules (via filter).