Both versions share the same core hack-prevention engine.
Premium adds automated response, advanced hardening, and full security intelligence.
Or download the free version on WordPress.org
WPGhost Free includes full path security, 7G & 8G Firewall, brute force protection, 2FA with passkeys, and security monitoring. It blocks the majority of automated bot attacks at zero cost. Upgrade to Premium when you need automated responses, country blocking, full logs, or priority support.
| FEATURE | FREE | PREMIUM |
|---|---|---|
| 🔒 PATHS SECURITY | ||
| Change wp-admin, wp-login, and all authentication paths | ✓ | ✓ |
| Change wp-content, wp-includes, uploads, plugins, themes paths | ✓ | ✓ |
| Hide plugin and theme names with random names | ✓ | ✓ |
| Ghost Mode (maximum security, one click) PREMIUM | — | ✓ |
| Hide file extensions (PHP, CSS, JS, JSON, media) PREMIUM | — | ✓ |
| Customize each plugin and theme name individually PREMIUM | — | ✓ |
| 🔥 FIREWALL | ||
| 7G & 8G Firewall (SQL injection, XSS, script injection) | ✓ | ✓ |
| Security headers (HSTS, CSP, X-Frame-Options) | ✓ | ✓ |
| IP, user agent, referrer, and hostname blacklist | ✓ | ✓ |
| Automate IP blocking (auto-block repeat offenders) PREMIUM | — | ✓ |
| Block AI Crawler Bots (30+ crawlers, auto-updated)PREMIUM | — | ✓ |
| 🛡 Brute Force Protection | ||
| Login, signup, comments, WooCommerce protection | ✓ | ✓ |
| Google reCAPTCHA v2, v3, Enterprise & Math reCAPTCHA | ✓ | ✓ |
| Custom attempt limits and lockout duration | ✓ | ✓ |
| 🔑 Authentication | ||
| 2FA by code, email, and passkey (Face ID, Touch ID, Windows Hello) | ✓ | ✓ |
| Magic Link login (passwordless email link) | ✓ | ✓ |
| Temporary Logins (time-limited access links) | ✓ | ✓ |
| 👁 Security Monitoring | ||
| Security Optimization Score (0-100) | ✓ | ✓ |
| GEO Threats Map with top 5 countries | ✓ | ✓ |
| Threats prevented chart and lifetime counter | ✓ | ✓ |
| Security Threats Log (last 20 entries) | ✓ | ✓ |
| User Events Log (last 20 entries) | ✓ | ✓ |
| Full logs with filters, search, paginationPREMIUM | — | ✓ |
| Export logs to CSVPREMIUM | — | ✓ |
| Real-time email alertsPREMIUM | — | ✓ |
| Cloud event storage (30-day retention)PREMIUM | — | ✓ |
| 🌍 Geo Security | ||
| GEO Threats Map (view attack origins) | ✓ | ✓ |
| Country Blocking (block entire countries)PREMIUM | — | ✓ |
| Path-based country blockingPREMIUM | — | ✓ |
| 🎨 Login Page Designer | ||
| Custom logo, colors, background, 12 layouts, 10 color presets | ✓ | ✓ |
| Balanced Split layout presetPREMIUM | — | ✓ |
| ⚙️ Hiding & Hardening | ||
| Remove version tags, generator meta, HTML comments | ✓ | ✓ |
| Text Mapping, URL Mapping, CDN Mapping | ✓ | ✓ |
| Disable XML-RPC, REST API, directory browsing | ✓ | ✓ |
| Disable right-click, inspect element, view source | ✓ | ✓ |
| Fix file permissions, database prefix, SALT keysPREMIUM | — | ✓ |
| ⚡ Setup & Support | ||
| One-click security presets | ✓ | ✓ |
| Compatible with WooCommerce, Elementor, 50+ plugins | ✓ | ✓ |
| Compatible with 20+ hosting providers | ✓ | ✓ |
| 16 languages | ✓ | ✓ |
| Priority supportPREMIUM | — | ✓ |
Looking for the full detailed breakdown? See the complete feature list →
Upgrade to Premium and get automated protection, full logs, country blocking, and priority support.