Plugin Pulse Beta
← Pulse

Site Lockdown Security

by WP Fix It - WordPress Experts · Security

Also makes 10 other plugins · 8.2K+ installs across the portfolio →

Audit, protect, monitor, firewall, and secure WordPress with premium tools at no cost.

Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.

⚠ Few reviews

Health

A 85/100

Few reviews

Active installs

700+

≈790 estimated

Momentum

+17%

downloads vs prior 30d

Biggest opportunity: Add “backdoor” and “checksums” to your wp.org tags. You rank #15 and #24 for them without listing them, close enough for a declared tag to move you up. WordPress.org counts only your first five tags, so with 3 listed these are the slots worth spending.

How scoring works →
85 Health · A
Maintenance 98/100
Rating quality 81/100
Support 70/100

85 health vs 66 average across 1,775 Security plugins

Install conversion

How it's measured →

4.7%

of downloads still active

At least 700 of 14.9K lifetime downloads are still running, above its category: the median Security plugin keeps 1.4%, across 1,059 plugins.

Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other Security plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.

This plugin shipped 41 releases in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.

Details

Version
9.2
Last updated
3mo ago
Added
2025-08-29 · 1 yr old
Requires WP
5.0
Tested up to
7.0.8
Requires PHP
7.4

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

73 / 100

Well optimized

Most to gain: Support resolution

Update recency 100/100

Updated 103 days ago

WP compatibility 100/100

Tested up to WordPress 7.0.8, the current branch or newer

Rating quality 57/100

5.0★ over 5 reviews, smoothed to 4.18★ and held back under 25 reviews

Listing tuning 84/100

3 of 5 tags set · short description in place

Support resolution 0/100

0 of 1 support threads resolved in the last 2 months

To rank higher: Mark more forum threads resolved — the resolved ratio feeds the ranking.

Get the full rank-higher report →

Daily downloads

Since 30 Aug 2025 · 428 days · wp.org + Plugin Pulse archive

+17% vs prior 30d
1131 Oct 2026

30-day downloads

Rolling 30-day volume · peak 3.2K · peaks are release surges

57031 Oct 2026

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Site Lockdown Securi · #7661youMalCare WordPress Se · #287Watchdog Security Li · #19397Security Optimizer · #51

Health trend

Composite health score, snapshotted daily

8531 Oct 2026

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

81431 Oct 2026

Release cadence

Actively maintained
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

41

releases in the last 12 months

3mo ago

latest release · v9.2 · 20 Jul 2026

74

tagged releases on record

Recent releases

9.2 · 20 Jul 20269.1.1 · 30 Jun 20269.1 · 28 Jun 20269.0 · 25 Jun 20268.7 · 18 Jun 20268.6.1 · 15 Jun 20268.6 · 14 Jun 20268.5.1 · 13 Jun 20268.0 · 11 Jun 20268.5 · 11 Jun 20268.0.1 · 7 Jun 20267.7.4 · 22 May 20267.7.3 · 21 May 20267.7.2 · 20 May 2026

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v9.1 81%
v8.7 5.3%
Older / other versions 14%

Estimated active installs

The public count shows “700+”. Our estimate pins where the real number sits.

tracked estimate
700–800 ≈790

Crossed into this band 20 days ago and a band this size takes about a year or more to cross, so the real count is still just under 800.

At the current install trend, crossing 800+ in roughly 30 days.

Install history since 29 Aug 2025

70031 Oct 2026

Recent reviews

All reviews on wp.org ↗
  1. ★★★★★ Fred
    5mo ago

    As someone who regularly cleans hacked WordPress websites and performs security audits for clients, Site Lockdown Security has quickly become one of the first tools I install. What makes this plugin particularly valuable is that it focuses on visibility, prevention, and security posture rather than simply reacting after a compromise has already occurred. The ability to identify orphaned folders, hidden files, abandoned plugin directories, and other remnants left behind over the years provides insights that most traditional security plugins simply don’t offer. From a malware removal perspective, this is an incredibly useful tool. In many compromised websites, malicious files are hidden in locations that site owners rarely inspect. Site Lockdown Security makes it much easier to spot unusual directories, unexpected files, and remnants of old plugins or themes that may present a security risk. I also appreciate the Site Lock functionality. Being able to quickly place a site into a protected state while performing maintenance, updates, investigations, or malware cleanup is a practical feature that I have not seen implemented this well elsewhere.As someone who regularly performs malware investigations, I can say this plugin can save a tremendous amount of time. Instead of manually reviewing hundreds or even thousands of files and directories, Site Lockdown Security quickly highlights areas that deserve attention, allowing you to focus your investigation where it matters most. No security or malware solution can ever offer a 100% guarantee. Security is always about reducing risk through multiple layers of protection. However, tools like Site Lockdown Security significantly improve a site’s visibility and security posture, helping administrators identify weaknesses before they become serious problems. Another major advantage is its lightweight approach. Nothing runs on the frontend, there is no noticeable impact on performance, and the plugin focuses on providing actionable information rather than overwhelming users with unnecessary alerts. To be honest, I expected nothing less from the team behind WPFixIt. They have been supporting WordPress users since 2009 and have built a strong reputation by solving real-world WordPress problems every day. Site Lockdown Security reflects that experience: practical, focused, lightweight, and genuinely useful for both website owners and WordPress professionals.

    Read on wp.org ↗
  2. ★★★★★ bmccloskey
    10mo ago

    WPFixIt has been an absolute lifesaver for my business. They’ve fixed countless number of issues for me. I trust them so much so I signed up for their hosting service. This plugin is the perfect addition! Easy to get rolling. Install and lock. The plugin is smart enough to know what to lock and not. So if you have an ecommerce site for example it will not lock the features that allows woocommerce to work for example. Having to manually update wordpress, themes, plugins is a minor VERY MINOR complaint I have as I prefer using MainWP but for the security peace of mind it works for me. Update: WPFixIt has made huge strides in this plugin! Including an addon for MainWP so I can still use its functionality to update everything in one place! They are also developing a firewall into the plugin. This plugin will soon not only rival but top Wordfence, Sucuri, and others and best of all its free! This topic was modified 2 weeks, 1 day ago by bmccloskey.

    Read on wp.org ↗
  3. ★★★★★ LearnToDoIt
    1.1y ago

    I can’t say enough good things about Folder Auditor. It does exactly what it promises, but what really blew me away is the site lock feature. With just a click, I can lock down my entire site and know it’s 100% secure while I’m doing updates or troubleshooting. No more worrying about visitors running into broken pages or sneaky bots taking advantage while I work. The lock is instant, reliable, and gives me total peace of mind. I’ve tried other plugins with similar functionality, but nothing comes close to how smooth and effective this is. Combine that with the clean interface and lightweight performance, and you’ve got an absolute must-have for any WordPress site owner. If you value security and control, Folder Auditor is hands-down one of the best plugins you can install. Highly recommended!

    Read on wp.org ↗
  4. ★★★★★ WP Rocks
    1.1y ago

    I installed Folder Auditor & Site Lock after noticing my /wp-content/ had turned into the wild west over the years, and I’m genuinely impressed with how clean and practical this plugin is. What I love most is the clear, no-nonsense workflow. The plugin adds a Tools → Folder Auditor screen and immediately scans the places that matter: your WordPress root, wp-content, plugins, themes, uploads, and even .htaccess. It compares what’s actually on disk with what WordPress recognizes, which makes it dead simple to spot orphaned or hidden plugin/theme directories and other leftovers that accumulate after updates or partial uninstalls. No guesswork, no hunting through folders. Just a concise list of what needs attention and why. The UI is thoughtfully organized into tabs (Root, Content, Plugins, Themes, Uploads, .htaccess), with a dashboard that summarizes findings at a glance. When you’re ready to dive deeper, the details view makes it easy to review suspicious directories and understand what’s safe to investigate or remove. I also appreciate the “view file” action buttons for quick spot-checks when something looks off. The Site Lock feature is the icing on the cake. With a couple of clicks, you can lock folders and files read-only to block unauthorized changes. That’s exactly the kind of damage-prevention control I want on sites that shouldn’t be changing at the file level. Pair that with the ability to set sensible security headers, and you’ve got a lightweight, practical layer of protection that complements your existing security stack. Performance-wise, it’s a breath of fresh air. Nothing is running on the frontend; scans only happen when you open the tool. That means zero impact on visitors and no mystery cron jobs to worry about. It’s truly “install, activate, audit.” No complex configuration, no fiddly setup. Highlights: Instantly surfaces orphaned/hidden plugin and theme folders you won’t see on the normal Plugins/Themes screens. Flags missing plugin folders referenced by active/installed plugins (great for catching half-removed code). Tabbed interface for Root, wp-content, Plugins, Themes, Uploads, and .htaccess, with a summary dashboard. Site Lock to make folders/files read-only and apply security headers. Minimal footprint: runs only when you open the tool; nothing loads for site visitors. If you manage WordPress professionally or if your site has a few years of history, this is a must-have maintenance and hardening tool. It turns what used to be a tedious, risky manual cleanup into a confident, guided process. Five stars all the way. ⭐⭐⭐⭐⭐

    Read on wp.org ↗
  5. ★★★★★ Anonymous
    1.1y ago

    While I consider myself a fairly advanced WordPress user, I’m not technical enough to mess with MySQL tables. I’ve had my site since 2004 and it is crazy how much stuff has been left behind, how many outdated an unused files I have. Folder Auditor & Site Lock has done an amazing job pin pointing in a clear to understand way what is out of place, unused, potentially causing security issues and more. From my plugins, themes, main content – all of it. This is going to be a must-install for my old sites, and a will install on any new sites

    Read on wp.org ↗

Behavioral tests

via WP Hive

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

✓ Low memory footprint
✓ Low page-speed impact
✕ Runs on latest PHP + WP
✕ No PHP errors
✕ No JS errors
✓ Activates cleanly
✓ No resource errors
✓ No external HTTP errors
✓ Optimized database use
✕ Frequently updated

Languages

via translate.wordpress.org

Translated into 1 language, 0 at 90% or more

Russian 3%

AI assistants

How it's measured →

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Readme readiness

8 of 8 pass · checked 26 Oct 2026

Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.

  • ✓ Says what it does "Audit, protect, monitor, firewall, and secure WordPress with premium tools at no cost."
  • ✓ Has a FAQ 16 questions in the FAQ.
  • ✓ FAQ asks real questions 16 of 16 read like questions a user would type.
  • ✓ Names who it is for Names its audience or use cases ("for agencies", "designed for", "built for").
  • ✓ Names what it works with Mentions WooCommerce, Cloudflare, REST API.
  • ✓ Headings and lists 23 headings and 2 lists.
  • ✓ Enough to quote 12,851 characters of description.
  • ✓ Tags match the text 2 of 3 tags appear in the text; "malware scanner" does not.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2026-10-11 800+ → 700+ down after 2 days in tier
  2. 2026-10-09 700+ → 800+ up after 13 days in tier
  3. 2026-09-26 600+ → 700+ up after 1 days in tier
  4. 2026-09-25 700+ → 600+ down after 2 days in tier
  5. 2026-09-23 600+ → 700+ up after 1 days in tier
  6. 2026-09-22 700+ → 600+ down after 1 days in tier
  7. 2026-09-21 600+ → 700+ up after 31 days in tier
  8. 2026-08-21 500+ → 600+ up after 6 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Site Lockdown Security into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/folder-auditor" width="480" height="300" style="border:0" loading="lazy" title="Site Lockdown Security — Plugin Pulse"></iframe>
Preview card ↗

Site Lockdown Security: 700+ active installs, 5.0★ (5 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/folder-auditor

Spotted a number that looks wrong? Report a data issue and we'll check it against the source.