Site Lockdown Security
by WP Fix It - WordPress Experts · Security
Also makes 10 other plugins · 8.2K+ installs across the portfolio →
Audit, protect, monitor, firewall, and secure WordPress with premium tools at no cost.
Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.
Health
A 85/100
Few reviews
Active installs
700+
≈790 estimated
Momentum
+17%
downloads vs prior 30d
Biggest opportunity: Add “backdoor” and “checksums” to your wp.org tags. You rank #15 and #24 for them without listing them, close enough for a declared tag to move you up. WordPress.org counts only your first five tags, so with 3 listed these are the slots worth spending.
85 health vs 66 average across 1,775 Security plugins
Install conversion
How it's measured →4.7%
of downloads still active
At least 700 of 14.9K lifetime downloads are still running, above its category: the median Security plugin keeps 1.4%, across 1,059 plugins.
Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other Security plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.
This plugin shipped 41 releases in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.
Details
Directory ranking optimization
How it's scored →How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.
Well optimized
Most to gain: Support resolution
Updated 103 days ago
Tested up to WordPress 7.0.8, the current branch or newer
5.0★ over 5 reviews, smoothed to 4.18★ and held back under 25 reviews
3 of 5 tags set · short description in place
0 of 1 support threads resolved in the last 2 months
To rank higher: Mark more forum threads resolved — the resolved ratio feeds the ranking.
Get the full rank-higher report →Search visibility
How it's tracked →Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.
39
Momentum
Losing ground
-0.3
Velocity
places per keyword, 28d
23%
Breadth
of keywords climbing, 28d
-0.2
Acceleration
recent half vs earlier
wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.
| Keyword | wp.org | On merit | wp.org move, 90 days |
|---|---|---|---|
| lockdown | #3 | #10 | 0 |
| backdoor | #15 | #14 | up 1 |
| checksums | #24 | #16 | down 4 |
| firewall your tag | Not in the top 24 | ||
| malware scanner your tag | Not in the top 24 | ||
| wordpress security your tag | Not in the top 24 | ||
75 searches this plugin appeared in over the last 90 days, 3 listed. 72 left out as unrelated or noise (years, numbers, stray words). 3 of its tags aren't in the top 24 for their own search.
What to do about it
- Add “backdoor” and “checksums” to your wp.org tags. You rank #15 and #24 for them without listing them, close enough for a declared tag to move you up. WordPress.org counts only your first five tags, so with 3 listed these are the slots worth spending.
Daily downloads
Since 30 Aug 2025 · 428 days · wp.org + Plugin Pulse archive
30-day downloads
Rolling 30-day volume · peak 3.2K · peaks are release surges
Directory rank vs rivals
wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you
Health trend
Composite health score, snapshotted daily
Update activity
How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.
Release cadence
Actively maintainedHow often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.
41
releases in the last 12 months
3mo ago
latest release · v9.2 · 20 Jul 2026
74
tagged releases on record
Recent releases
What its installed base runs
via wordpress.orgShare of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.
Estimated active installs
The public count shows “700+”. Our estimate pins where the real number sits.
Crossed into this band 20 days ago and a band this size takes about a year or more to cross, so the real count is still just under 800.
At the current install trend, crossing 800+ in roughly 30 days.
Install history since 29 Aug 2025
Recent reviews
All reviews on wp.org ↗- ★★★★★ Fred5mo ago
As someone who regularly cleans hacked WordPress websites and performs security audits for clients, Site Lockdown Security has quickly become one of the first tools I install. What makes this plugin particularly valuable is that it focuses on visibility, prevention, and security posture rather than simply reacting after a compromise has already occurred. The ability to identify orphaned folders, hidden files, abandoned plugin directories, and other remnants left behind over the years provides insights that most traditional security plugins simply don’t offer. From a malware removal perspective, this is an incredibly useful tool. In many compromised websites, malicious files are hidden in locations that site owners rarely inspect. Site Lockdown Security makes it much easier to spot unusual directories, unexpected files, and remnants of old plugins or themes that may present a security risk. I also appreciate the Site Lock functionality. Being able to quickly place a site into a protected state while performing maintenance, updates, investigations, or malware cleanup is a practical feature that I have not seen implemented this well elsewhere.As someone who regularly performs malware investigations, I can say this plugin can save a tremendous amount of time. Instead of manually reviewing hundreds or even thousands of files and directories, Site Lockdown Security quickly highlights areas that deserve attention, allowing you to focus your investigation where it matters most. No security or malware solution can ever offer a 100% guarantee. Security is always about reducing risk through multiple layers of protection. However, tools like Site Lockdown Security significantly improve a site’s visibility and security posture, helping administrators identify weaknesses before they become serious problems. Another major advantage is its lightweight approach. Nothing runs on the frontend, there is no noticeable impact on performance, and the plugin focuses on providing actionable information rather than overwhelming users with unnecessary alerts. To be honest, I expected nothing less from the team behind WPFixIt. They have been supporting WordPress users since 2009 and have built a strong reputation by solving real-world WordPress problems every day. Site Lockdown Security reflects that experience: practical, focused, lightweight, and genuinely useful for both website owners and WordPress professionals.
Read on wp.org ↗ - ★★★★★ bmccloskey10mo ago
WPFixIt has been an absolute lifesaver for my business. They’ve fixed countless number of issues for me. I trust them so much so I signed up for their hosting service. This plugin is the perfect addition! Easy to get rolling. Install and lock. The plugin is smart enough to know what to lock and not. So if you have an ecommerce site for example it will not lock the features that allows woocommerce to work for example. Having to manually update wordpress, themes, plugins is a minor VERY MINOR complaint I have as I prefer using MainWP but for the security peace of mind it works for me. Update: WPFixIt has made huge strides in this plugin! Including an addon for MainWP so I can still use its functionality to update everything in one place! They are also developing a firewall into the plugin. This plugin will soon not only rival but top Wordfence, Sucuri, and others and best of all its free! This topic was modified 2 weeks, 1 day ago by bmccloskey.
Read on wp.org ↗ - ★★★★★ LearnToDoIt1.1y ago
I can’t say enough good things about Folder Auditor. It does exactly what it promises, but what really blew me away is the site lock feature. With just a click, I can lock down my entire site and know it’s 100% secure while I’m doing updates or troubleshooting. No more worrying about visitors running into broken pages or sneaky bots taking advantage while I work. The lock is instant, reliable, and gives me total peace of mind. I’ve tried other plugins with similar functionality, but nothing comes close to how smooth and effective this is. Combine that with the clean interface and lightweight performance, and you’ve got an absolute must-have for any WordPress site owner. If you value security and control, Folder Auditor is hands-down one of the best plugins you can install. Highly recommended!
Read on wp.org ↗ - ★★★★★ WP Rocks1.1y ago
I installed Folder Auditor & Site Lock after noticing my /wp-content/ had turned into the wild west over the years, and I’m genuinely impressed with how clean and practical this plugin is. What I love most is the clear, no-nonsense workflow. The plugin adds a Tools → Folder Auditor screen and immediately scans the places that matter: your WordPress root, wp-content, plugins, themes, uploads, and even .htaccess. It compares what’s actually on disk with what WordPress recognizes, which makes it dead simple to spot orphaned or hidden plugin/theme directories and other leftovers that accumulate after updates or partial uninstalls. No guesswork, no hunting through folders. Just a concise list of what needs attention and why. The UI is thoughtfully organized into tabs (Root, Content, Plugins, Themes, Uploads, .htaccess), with a dashboard that summarizes findings at a glance. When you’re ready to dive deeper, the details view makes it easy to review suspicious directories and understand what’s safe to investigate or remove. I also appreciate the “view file” action buttons for quick spot-checks when something looks off. The Site Lock feature is the icing on the cake. With a couple of clicks, you can lock folders and files read-only to block unauthorized changes. That’s exactly the kind of damage-prevention control I want on sites that shouldn’t be changing at the file level. Pair that with the ability to set sensible security headers, and you’ve got a lightweight, practical layer of protection that complements your existing security stack. Performance-wise, it’s a breath of fresh air. Nothing is running on the frontend; scans only happen when you open the tool. That means zero impact on visitors and no mystery cron jobs to worry about. It’s truly “install, activate, audit.” No complex configuration, no fiddly setup. Highlights: Instantly surfaces orphaned/hidden plugin and theme folders you won’t see on the normal Plugins/Themes screens. Flags missing plugin folders referenced by active/installed plugins (great for catching half-removed code). Tabbed interface for Root, wp-content, Plugins, Themes, Uploads, and .htaccess, with a summary dashboard. Site Lock to make folders/files read-only and apply security headers. Minimal footprint: runs only when you open the tool; nothing loads for site visitors. If you manage WordPress professionally or if your site has a few years of history, this is a must-have maintenance and hardening tool. It turns what used to be a tedious, risky manual cleanup into a confident, guided process. Five stars all the way. ⭐⭐⭐⭐⭐
Read on wp.org ↗ - ★★★★★ Anonymous1.1y ago
While I consider myself a fairly advanced WordPress user, I’m not technical enough to mess with MySQL tables. I’ve had my site since 2004 and it is crazy how much stuff has been left behind, how many outdated an unused files I have. Folder Auditor & Site Lock has done an amazing job pin pointing in a clear to understand way what is out of place, unused, potentially causing security issues and more. From my plugins, themes, main content – all of it. This is going to be a must-install for my old sites, and a will install on any new sites
Read on wp.org ↗
Behavioral tests
via WP HiveAutomated install-time checks, tested on PHP 8.1.12 · WP 7.0.1
Languages
via translate.wordpress.orgTranslated into 1 language, 0 at 90% or more
AI assistants
How it's measured →Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.
Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.
Readme readiness
8 of 8 pass · checked 26 Oct 2026Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.
- ✓ Says what it does "Audit, protect, monitor, firewall, and secure WordPress with premium tools at no cost."
- ✓ Has a FAQ 16 questions in the FAQ.
- ✓ FAQ asks real questions 16 of 16 read like questions a user would type.
- ✓ Names who it is for Names its audience or use cases ("for agencies", "designed for", "built for").
- ✓ Names what it works with Mentions WooCommerce, Cloudflare, REST API.
- ✓ Headings and lists 23 headings and 2 lists.
- ✓ Enough to quote 12,851 characters of description.
- ✓ Tags match the text 2 of 3 tags appear in the text; "malware scanner" does not.
Growth timeline
Install-tier crossings we have observed, and how long each tier took to outgrow
- 2026-10-11 800+ → 700+ down after 2 days in tier
- 2026-10-09 700+ → 800+ up after 13 days in tier
- 2026-09-26 600+ → 700+ up after 1 days in tier
- 2026-09-25 700+ → 600+ down after 2 days in tier
- 2026-09-23 600+ → 700+ up after 1 days in tier
- 2026-09-22 700+ → 600+ down after 1 days in tier
- 2026-09-21 600+ → 700+ up after 31 days in tier
- 2026-08-21 500+ → 600+ up after 6 days in tier
Competes with
The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).
-
MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall 100K+ installs · 4.4★ · 3 shared tags A -
Watchdog Security Lite — Powered by Lumiverse Nexus 60+ installs · 4.0★ · 3 shared tags B -
Security Optimizer – The All-In-One Protection Plugin 1M+ installs · 4.5★ · 2 shared tags A -
Defender Security – Malware Scanner, Login Security & Firewall 80K+ installs · 4.8★ · 2 shared tags A -
BulletProof Security 20K+ installs · 4.8★ · 2 shared tags A -
Quttera ThreatSign – Web Malware Scanner for WordPress 10K+ installs · 3.9★ · 2 shared tags A
Embed this report card
Drop a live Pulse card for Site Lockdown Security into a readme, a review or a deck. It updates itself.
<iframe src="https://plugins.wpmayor.com/embed/folder-auditor" width="480" height="300" style="border:0" loading="lazy" title="Site Lockdown Security — Plugin Pulse"></iframe> Site Lockdown Security: 700+ active installs, 5.0★ (5 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/folder-auditor
Spotted a number that looks wrong? Report a data issue and we'll check it against the source.