GhostGate
Invisible, intelligent protection for WordPress. GhostGate hides your login page, blocks bots, and turns your site into a ghost fortress.
00
·20 active installs·Updated 2 months agoAs of April 2026, GhostGate is a WordPress xml-rpc plugin with 20 active installations and a 0/5 rating0. It has been downloaded 438 times in total. Requires WordPress 5.8+ and PHP 7.4+. Available on WordPress.org since 2025. Recently updated within the last 3 months. Top alternative: Disable XML-RPC Pingback.
0/5Rating
20active installs
438total downloads
1 yearsince 2025
Overview
GhostGate is a lightweight yet powerful WordPress security plugin that eliminates the login page as an attack surface. Instead of just defending, it erases the entrance entirely with dynamic login URLs and multi-layer access verification.
- 🔒 Hide your login URL with a custom slug and time-based code
- 🔑 Built-in 2FA via email verification
- 🚫 Auto-block brute force attacks by IP
- 🧱 Disable/limit unused endpoints like XML-RPC and REST API
- 👤 Prevent user enumeration via REST, RSS, and author queries
- 🔍 Visualize security status and detect conflicts
- 📜 Activity logs with optional file rotation
GhostGate doesn’t just defend — it disappears.
Invisible to bots. Intuitive for users.
👉 Full features / screenshots / pricing / docs:
https://arce-experience.com/product/
Privacy
GhostGate can store…
Screenshots
Ratings & Reviews
00 reviews
5 ★
0
4 ★
0
3 ★
0
2 ★
0
1 ★
0
Compatibility
| WordPress | 5.8+ requiredTested up to 6.9.4 |
| PHP | 7.4+ required |
Top Alternatives to GhostGate
Frequently Asked Questions
Changelog
1.3.3 – 2026-01-21
- Compatibility: Verified support for WordPress 6.9.
- Fix: Enhanced PHP 8.x compatibility (stricter type casting in internal key generation).
- Fix: Improved login slug detection to strictly handle trailing slashes, preventing 404 errors in some server configurations.
Contributors
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.