Gatorio is a minimal WordPress security plugin that protects login endpoints against brute-force attacks.
The plugin follows a strict privacy-first and KISS (keep it simple) philosophy.
No dashboards.
No tracking.
No unnecessary complexity.
Just effective login protection.
Unlike many plugins, Gatorio blocks login attempts before authentication begins.
This prevents bypasses caused by plugins that override the default WordPress login flow.
Features
- Brute-force protection
- Login attempt limiter
- Temporary lockout
- Pre-authentication request blocking (init hook)
- Works with WordPress, WooCommerce and custom login forms
- Login delay (bot mitigation)
- Generic login errors (no information leakage)
- XML-RPC protection
- Username enumeration protection (REST API)
- IP hashing (privacy-friendly, no raw IP storage)
