Proactive WordPress security and hardening
WP Ghost Premium is a paid edition of WP Ghost, a WordPress security and firewall solution focused on reducing the visible signals that automated attackers use during reconnaissance. It combines Paths Security and Site Hardening with security intelligence, automated response, monitoring, and copyright protection features.
WordPress sites commonly expose paths such as /wp-admin, /wp-login.php, /wp-content, and /wp-includes. WP Ghost can change and secure common WordPress, plugin, and theme paths, helping reduce the attack surface presented to automated scanners. Premium also includes Ghost Mode, a maximum security preset that changes all paths, hides file extensions, and enables all hiding options in one click.
Understand findings and respond to threats
WP Ghost Premium includes AI Security Explanations that analyze findings using the website’s configuration, including server type, rewrite rules status, configuration-file writability, and security mode. The returned report provides a plain-language summary, a clearer description of what is at stake, one suggested action per finding, and additional reasoning about why a finding matters and how it was ranked.
These explanations require a connected WP Ghost account with an active subscription and include a monthly allowance of AI checks. The Security Check scan, score, prioritized list, severity bands, and task details work independently. Findings can be organized by real exposure, with failing paths and hardening tasks presented together in priority order.
For automated response, IP Block Automation can block IP addresses that trigger repeated security threats. Real-time email alerts notify you of brute-force attempts or suspicious activity, helping you follow events as they occur.
Review activity and retain records
- Security Threats Log: Review unlimited entries with filters for threat type, status, country, and time range, plus full-text search, pagination, and CSV export.
- User Events Log: Review unlimited user-event entries with search, pagination, and CSV export.
- Cloud Event Storage: Retain events in the cloud for 30 days for audits and incident reports.
- Security score: Track a score from 0 to 100 that reflects completed security tasks and enabled features.
Control AI crawler access
AI Copyright Protection blocks more than 30 AI training crawlers at the firewall level, including GPTBot, ClaudeBot, PerplexityBot, CCBot, and Bytespider. The crawler list is updated with plugin releases, and the feature also adds Disallow rules to robots.txt. The supplied information states that this does not affect regular Google, Bing, or Yahoo search visibility.
Installation and configuration
Install and activate WP Ghost Premium in WordPress, then review the security settings and enable the hardening features appropriate for your site. Use the Overview and Security Check areas to review the score, findings, and prioritized tasks. WP Ghost changes frontend paths by default for compatibility. To harden administrative paths as well, add define(‘HMW_ALWAYS_CHANGE_PATHS’, true); to wp-config.php and save the settings again.
