WP Ghost Premium

Harden WordPress paths with Ghost Mode

WP Ghost Premium extends WP Ghost, a WordPress security and firewall solution, with path hardening, automated responses, event monitoring, and crawler controls. WP Ghost can change and secure common WordPress, extension, and theme paths, including /wp-admin, /wp-login.php, /wp-content, and /wp-includes. This changes the public routes automated scanners may probe; it does not fix vulnerable extension code or replace login authentication.

Ghost Mode is a maximum security preset that changes all paths, hides file extensions, and enables all hiding settings in one click. Frontend paths change by default for compatibility. To include administrative paths, add define('HMW_ALWAYS_CHANGE_PATHS', true); to wp-config.php, then save the WP Ghost options again.

Review findings and pick actions

Security Check runs independently of AI Security Explanations. It provides a score from 0 to 100, prioritized findings, severity bands, and task details. Findings can be reviewed by exposure, with failing paths and hardening tasks grouped in priority order.

AI Security Explanations turn findings into a site-specific report with a plain-language summary, what is at stake, one suggested action per finding, and more detail about why each entry matters and how it was ranked. The analysis uses configuration details such as server type, rewrite-rule status, configuration-file writability, and security mode. It requires a connected WP Ghost account with an active subscription and uses a monthly allowance of checks. The request includes Security Check findings and setup details; it excludes page content, visitor records, passwords, and database rows.

Block repeat threats and keep event records

IP Block Automation can block addresses that trigger repeated security threats. Email alerts notify you about brute-force attempts or suspicious activity so you can follow events as they occur.

• Security Threats Log: Keep unlimited entries, filter by threat type, status, country, or time range, search the records, and export them as CSV.
• User Events Log: Review unlimited user-event entries with search, pagination, and CSV export.
• Cloud Event Storage: Retain event records in the cloud for 30 days for audits and incident reports.
• Security score: Track a score from 0 to 100 based on completed security tasks and enabled features.

Set AI crawler rules with visibility in mind

AI Copyright Protection blocks more than 30 AI crawlers at the firewall level and includes rules to robots.txt. The crawler list is updated with plugin releases and includes rules for GPTBot, ClaudeBot, PerplexityBot, CCBot, and Bytespider. The supplied information states that these controls do not affect regular Google, Bing, or Yahoo search visibility. PerplexityBot works with AI search discovery rather than foundation-model training, so blocking it can limit discovery through that service.

Configure path security

Install and activate WP Ghost Premium in WordPress, review the security settings, and enable the hardening capabilities that fit your site. Use Overview and Security Check to review the score, findings, and prioritized tasks. If you want to harden administrative paths too, add the configuration line above to wp-config.php and save the settings again.