Off by default

All extra-protection features are disabled after installation. You choose individually which measures fit your site.

Runtime effect

WM Guard stores only the relevant switch and applies protection through WordPress hooks or filters. It does not modify .htaccess, wp-config.php, or plugin files.

Four measures

• Make username harvesting harder
• Disable XML-RPC
• Block the backend file editor
• Neutralize login error messages

All measures can be disabled again.