New: hide login (custom login URL) and activity log.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3610419,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3610419,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3610419,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3610419,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.6","1.0.7","1.1.0"],"block_files":[],"assets_screenshots":{"screenshot-1-fr_FR.png":{"filename":"screenshot-1-fr_FR.png","revision":3772823,"resolution":"1","location":"assets","locale":"fr_FR","width":2520,"height":2138},"screenshot-1.png":{"filename":"screenshot-1.png","revision":3772823,"resolution":"1","location":"assets","locale":"","width":2520,"height":2036},"screenshot-10-fr_FR.png":{"filename":"screenshot-10-fr_FR.png","revision":3772823,"resolution":"10","location":"assets","locale":"fr_FR","width":2520,"height":3116},"screenshot-10.png":{"filename":"screenshot-10.png","revision":3772823,"resolution":"10","location":"assets","locale":"","width":2520,"height":2850},"screenshot-11-fr_FR.png":{"filename":"screenshot-11-fr_FR.png","revision":3772823,"resolution":"11","location":"assets","locale":"fr_FR","width":2520,"height":2966},"screenshot-11.png":{"filename":"screenshot-11.png","revision":3772823,"resolution":"11","location":"assets","locale":"","width":2520,"height":2788},"screenshot-12-fr_FR.png":{"filename":"screenshot-12-fr_FR.png","revision":3772823,"resolution":"12","location":"assets","locale":"fr_FR","width":2520,"height":3044},"screenshot-12.png":{"filename":"screenshot-12.png","revision":3772823,"resolution":"12","location":"assets","locale":"","width":2520,"height":2938},"screenshot-2-fr_FR.png":{"filename":"screenshot-2-fr_FR.png","revision":3772823,"resolution":"2","location":"assets","locale":"fr_FR","width":2520,"height":5102},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3772823,"resolution":"2","location":"assets","locale":"","width":2520,"height":4884},"screenshot-3-fr_FR.png":{"filename":"screenshot-3-fr_FR.png","revision":3772823,"resolution":"3","location":"assets","locale":"fr_FR","width":2520,"height":2826},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3772823,"resolution":"3","location":"assets","locale":"","width":2520,"height":2758},"screenshot-4-fr_FR.png":{"filename":"screenshot-4-fr_FR.png","revision":3772823,"resolution":"4","location":"assets","locale":"fr_FR","width":2520,"height":2336},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3772823,"resolution":"4","location":"assets","locale":"","width":2520,"height":2268},"screenshot-5-fr_FR.png":{"filename":"screenshot-5-fr_FR.png","revision":3772823,"resolution":"5","location":"assets","locale":"fr_FR","width":2520,"height":3854},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3772823,"resolution":"5","location":"assets","locale":"","width":2520,"height":3744},"screenshot-6-fr_FR.png":{"filename":"screenshot-6-fr_FR.png","revision":3772823,"resolution":"6","location":"assets","locale":"fr_FR","width":2520,"height":2966},"screenshot-6.png":{"filename":"screenshot-6.png","revision":3772823,"resolution":"6","location":"assets","locale":"","width":2520,"height":2788},"screenshot-7-fr_FR.png":{"filename":"screenshot-7-fr_FR.png","revision":3772823,"resolution":"7","location":"assets","locale":"fr_FR","width":2520,"height":2478},"screenshot-7.png":{"filename":"screenshot-7.png","revision":3772823,"resolution":"7","location":"assets","locale":"","width":2520,"height":2410},"screenshot-8-fr_FR.png":{"filename":"screenshot-8-fr_FR.png","revision":3772823,"resolution":"8","location":"assets","locale":"fr_FR","width":2520,"height":2050},"screenshot-8.png":{"filename":"screenshot-8.png","revision":3772823,"resolution":"8","location":"assets","locale":"","width":2520,"height":1944},"screenshot-9-fr_FR.png":{"filename":"screenshot-9-fr_FR.png","revision":3772823,"resolution":"9","location":"assets","locale":"fr_FR","width":2520,"height":2432},"screenshot-9.png":{"filename":"screenshot-9.png","revision":3772823,"resolution":"9","location":"assets","locale":"","width":2520,"height":2364}},"screenshots":{"1":"Dashboard: your security score, based on real checks, and your protection modules at a glance.","2":"Firewall: application firewall, rate limiting, and blocking of bots and vulnerability scanners.","3":"Traffic analysis: real-time visitors, bots, and blocked attacks.","4":"Threat log: every blocked attempt, explained in plain language.","5":"Recommendations: prioritized, plain-language steps to secure your site.","6":"Login and access: brute-force protection, lockout, and login alerts.","7":"Camouflage: hide WordPress and harden your site against bots.","8":"File scan: detect suspicious files in your media and check the WordPress core files.","9":"Settings: email alerts, reports and general preferences.","10":"PHP vulnerability check: a clear alert and a ready-to-send message for your host.","11":"Hide login: move wp-login.php to a custom login URL in one click.","12":"Activity log: who did what on your site, with filters and CSV export."}},"plugin_section":[262246],"plugin_tags":[8531,1174,25642,1184,600],"plugin_category":[54],"plugin_contributors":[271903],"plugin_business_model":[],"class_list":["post-340834","plugin","type-plugin","status-publish","hentry","plugin_section-dashboard-widgets","plugin_tags-activity-log","plugin_tags-firewall","plugin_tags-hide-login","plugin_tags-malware","plugin_tags-security","plugin_category-security-and-spam-protection","plugin_contributors-sylvainmarchandwalkercorp","plugin_committers-sylvainmarchandwalkercorp"],"banners":{"banner":"https:\/\/ps.w.org\/walkercorp-sentinelle\/assets\/banner-772x250.png?rev=3610419","banner_2x":"https:\/\/ps.w.org\/walkercorp-sentinelle\/assets\/banner-1544x500.png?rev=3610419","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/walkercorp-sentinelle\/assets\/icon-128x128.png?rev=3610419","icon_2x":"https:\/\/ps.w.org\/walkercorp-sentinelle\/assets\/icon-256x256.png?rev=3610419","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/walkercorp-sentinelle\/assets\/screenshot-1.png?rev=3772823","caption":"Dashboard: your security score, based on real checks, and your protection modules at a glance."},{"src":"https:\/\/ps.w.org\/walkercorp-sentinelle\/assets\/screenshot-2.png?rev=3772823","caption":"Firewall: application firewall, rate limiting, and blocking of bots and vulnerability scanners."},{"src":"https:\/\/ps.w.org\/walkercorp-sentinelle\/assets\/screenshot-3.png?rev=3772823","caption":"Traffic analysis: real-time visitors, bots, and blocked attacks."},{"src":"https:\/\/ps.w.org\/walkercorp-sentinelle\/assets\/screenshot-4.png?rev=3772823","caption":"Threat log: every blocked attempt, explained in plain language."},{"src":"https:\/\/ps.w.org\/walkercorp-sentinelle\/assets\/screenshot-5.png?rev=3772823","caption":"Recommendations: prioritized, plain-language steps to secure your site."},{"src":"https:\/\/ps.w.org\/walkercorp-sentinelle\/assets\/screenshot-6.png?rev=3772823","caption":"Login and access: brute-force protection, lockout, and login alerts."},{"src":"https:\/\/ps.w.org\/walkercorp-sentinelle\/assets\/screenshot-7.png?rev=3772823","caption":"Camouflage: hide WordPress and harden your site against bots."},{"src":"https:\/\/ps.w.org\/walkercorp-sentinelle\/assets\/screenshot-8.png?rev=3772823","caption":"File scan: detect suspicious files in your media and check the WordPress core files."},{"src":"https:\/\/ps.w.org\/walkercorp-sentinelle\/assets\/screenshot-9.png?rev=3772823","caption":"Settings: email alerts, reports and general preferences."},{"src":"https:\/\/ps.w.org\/walkercorp-sentinelle\/assets\/screenshot-10.png?rev=3772823","caption":"PHP vulnerability check: a clear alert and a ready-to-send message for your host."},{"src":"https:\/\/ps.w.org\/walkercorp-sentinelle\/assets\/screenshot-11.png?rev=3772823","caption":"Hide login: move wp-login.php to a custom login URL in one click."},{"src":"https:\/\/ps.w.org\/walkercorp-sentinelle\/assets\/screenshot-12.png?rev=3772823","caption":"Activity log: who did what on your site, with filters and CSV export."}],"raw_content":"\n
Walkercorp Sentinelle is a free, lightweight WordPress security plugin for site owners who are not developers. It brings together what usually takes several plugins: a firewall, a custom login URL to hide wp-login.php, an activity log (audit log) of what your team does, limits on login attempts against brute force attacks, and a malware scan of your uploads. Every protection is explained in plain language, the plugin works on its own with no account, and every indicator it shows is checked on your site.<\/p>\n\n
Move your login page from wp-login.php to an address only you know (for example yoursite.com\/private-access-x7k2p). Bots that hammer wp-login.php and \/wp-admin get your theme's \"page not found\" error instead, which stops most brute force attacks before they start.<\/p>\n\n
A clear audit log of user activity, stored only in your own database:<\/p>\n\n
Filter by type, user or keyword, show sensitive changes only, and export to CSV. You choose how long events are kept (30 days by default). An email alert warns you at once when a new administrator appears or when the default role is set to Administrator.<\/p>\n\n
Basic filtering of known attack patterns (SQL injection, XSS, directory traversal) in addresses, forms and API requests, rate limiting per address and per network, blocking of vulnerability scanners and aggressive crawlers (Baidu, Bytespider, SEO and AI bots), anti-crawl protection for shop filter URLs, automatic banning of scanners, IP allow and deny lists (IPv4 and IPv6), and XML-RPC protection. On Apache or LiteSpeed, rules can also be written into the .htaccess file to block before PHP runs; ready-to-copy rules are provided for Nginx and Cloudflare.<\/p>\n\n
Limits login attempts per address and per account, refuses attempts on common usernames that do not exist, hides login error details, alerts you when a team member logs in from a new IP address, and can shorten sessions.<\/p>\n\n
Checks the uploads folder for hidden PHP code and dangerous server configuration files, and compares WordPress core files with the official checksums.<\/p>\n\n
Anti-lockout safeguards: your team (accounts that can write content) is never filtered, the address of an administrator who just logged in is never banned automatically for 24 hours, and the plugin refuses to block your own IP address.<\/p>\n\n