Site Lockdown Security

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

At the current install trend, crossing 700+ in roughly 51 days.

A small install base leaves thin data to model from. A declining trend compresses what a buyer would pay.

1. ★★★★★ Fred

   3mo ago

   As someone who regularly cleans hacked WordPress websites and performs security audits for clients, Site Lockdown Security has quickly become one of the first tools I install. What makes this plugin particularly valuable is that it focuses on visibility, prevention, and security posture rather than simply reacting after a compromise has already occurred. The ability to identify orphaned folders, hidden files, abandoned plugin directories, and other remnants left behind over the years provides insights that most traditional security plugins simply don’t offer. From a malware removal perspective, this is an incredibly useful tool. In many compromised websites, malicious files are hidden in locations that site owners rarely inspect. Site Lockdown Security makes it much easier to spot unusual directories, unexpected files, and remnants of old plugins or themes that may present a security risk. I also appreciate the Site Lock functionality. Being able to quickly place a site into a protected state while performing maintenance, updates, investigations, or malware cleanup is a practical feature that I have not seen implemented this well elsewhere.As someone who regularly performs malware investigations, I can say this plugin can save a tremendous amount of time. Instead of manually reviewing hundreds or even thousands of files and directories, Site Lockdown Security quickly highlights areas that deserve attention, allowing you to focus your investigation where it matters most. No security or malware solution can ever offer a 100% guarantee. Security is always about reducing risk through multiple layers of protection. However, tools like Site Lockdown Security significantly improve a site’s visibility and security posture, helping administrators identify weaknesses before they become serious problems. Another major advantage is its lightweight approach. Nothing runs on the frontend, there is no noticeable impact on performance, and the plugin focuses on providing actionable information rather than overwhelming users with unnecessary alerts. To be honest, I expected nothing less from the team behind WPFixIt. They have been supporting WordPress users since 2009 and have built a strong reputation by solving real-world WordPress problems every day. Site Lockdown Security reflects that experience: practical, focused, lightweight, and genuinely useful for both website owners and WordPress professionals.

   Read on wp.org ↗
2. ★★★★★ bmccloskey

   8mo ago

   WPFixIt has been an absolute lifesaver for my business. They’ve fixed countless number of issues for me. I trust them so much so I signed up for their hosting service. This plugin is the perfect addition! Easy to get rolling. Install and lock. The plugin is smart enough to know what to lock and not. So if you have an ecommerce site for example it will not lock the features that allows woocommerce to work for example. Having to manually update wordpress, themes, plugins is a minor VERY MINOR complaint I have as I prefer using MainWP but for the security peace of mind it works for me. Update: WPFixIt has made huge strides in this plugin! Including an addon for MainWP so I can still use its functionality to update everything in one place! They are also developing a firewall into the plugin. This plugin will soon not only rival but top Wordfence, Sucuri, and others and best of all its free! This topic was modified 2 weeks, 1 day ago by bmccloskey.

   Read on wp.org ↗
3. ★★★★★ LearnToDoIt

   11mo ago

   I can’t say enough good things about Folder Auditor. It does exactly what it promises, but what really blew me away is the site lock feature. With just a click, I can lock down my entire site and know it’s 100% secure while I’m doing updates or troubleshooting. No more worrying about visitors running into broken pages or sneaky bots taking advantage while I work. The lock is instant, reliable, and gives me total peace of mind. I’ve tried other plugins with similar functionality, but nothing comes close to how smooth and effective this is. Combine that with the clean interface and lightweight performance, and you’ve got an absolute must-have for any WordPress site owner. If you value security and control, Folder Auditor is hands-down one of the best plugins you can install. Highly recommended!

   Read on wp.org ↗
4. ★★★★★ WP Rocks

   11mo ago

   I installed Folder Auditor & Site Lock after noticing my /wp-content/ had turned into the wild west over the years, and I’m genuinely impressed with how clean and practical this plugin is. What I love most is the clear, no-nonsense workflow. The plugin adds a Tools → Folder Auditor screen and immediately scans the places that matter: your WordPress root, wp-content, plugins, themes, uploads, and even .htaccess. It compares what’s actually on disk with what WordPress recognizes, which makes it dead simple to spot orphaned or hidden plugin/theme directories and other leftovers that accumulate after updates or partial uninstalls. No guesswork, no hunting through folders. Just a concise list of what needs attention and why. The UI is thoughtfully organized into tabs (Root, Content, Plugins, Themes, Uploads, .htaccess), with a dashboard that summarizes findings at a glance. When you’re ready to dive deeper, the details view makes it easy to review suspicious directories and understand what’s safe to investigate or remove. I also appreciate the “view file” action buttons for quick spot-checks when something looks off. The Site Lock feature is the icing on the cake. With a couple of clicks, you can lock folders and files read-only to block unauthorized changes. That’s exactly the kind of damage-prevention control I want on sites that shouldn’t be changing at the file level. Pair that with the ability to set sensible security headers, and you’ve got a lightweight, practical layer of protection that complements your existing security stack. Performance-wise, it’s a breath of fresh air. Nothing is running on the frontend; scans only happen when you open the tool. That means zero impact on visitors and no mystery cron jobs to worry about. It’s truly “install, activate, audit.” No complex configuration, no fiddly setup. Highlights: Instantly surfaces orphaned/hidden plugin and theme folders you won’t see on the normal Plugins/Themes screens. Flags missing plugin folders referenced by active/installed plugins (great for catching half-removed code). Tabbed interface for Root, wp-content, Plugins, Themes, Uploads, and .htaccess, with a summary dashboard. Site Lock to make folders/files read-only and apply security headers. Minimal footprint: runs only when you open the tool; nothing loads for site visitors. If you manage WordPress professionally or if your site has a few years of history, this is a must-have maintenance and hardening tool. It turns what used to be a tedious, risky manual cleanup into a confident, guided process. Five stars all the way. ⭐⭐⭐⭐⭐

   Read on wp.org ↗
5. ★★★★★ Anonymous

   12mo ago

   While I consider myself a fairly advanced WordPress user, I’m not technical enough to mess with MySQL tables. I’ve had my site since 2004 and it is crazy how much stuff has been left behind, how many outdated an unused files I have. Folder Auditor & Site Lock has done an amazing job pin pointing in a clear to understand way what is out of place, unused, potentially causing security issues and more. From my plugins, themes, main content – all of it. This is going to be a must-install for my old sites, and a will install on any new sites

   Read on wp.org ↗

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 1 language, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-21 500+ → 600+ up after 6 days in tier
2. 2026-08-15 400+ → 500+ up after 46 days in tier
3. 2026-06-30 300+ → 400+ up after 1 days in tier
4. 2026-06-29 400+ → 300+ down after 1 days in tier
5. 2026-06-28 300+ → 400+ up after 26 days in tier
6. 2026-06-02 200+ → 300+ up after 107 days in tier
7. 2026-02-15 100+ → 200+ up after 1 days in tier
8. 2026-02-14 200+ → 100+ down after 6 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall 200K+ installs · 4.4★ · 3 shared tags A
• Security Optimizer – The All-In-One Protection Plugin 1M+ installs · 4.5★ · 2 shared tags A
• Defender Security – Malware Scanner, Login Security & Firewall 80K+ installs · 4.8★ · 2 shared tags A
• BulletProof Security 20K+ installs · 4.8★ · 2 shared tags A
• Quttera ThreatSign – Web Malware Scanner for WordPress 10K+ installs · 3.9★ · 2 shared tags B
• RSFirewall! 4K+ installs · 4.2★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Site Lockdown Security into a readme, a review or a deck. It updates itself.

Site Lockdown Security: 600+ active installs, 5.0★ (5 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/folder-auditor