Ready to try Hide My WP Ghost? Check out the official site or pricing.

Hide My WP Ghost review

Hide your WordPress footprint, block the bots, and keep your login page off the radar.

By Ciroapp Editorial Team · Updated Sep 16, 2026

Visit Website See Pricing

Commission may apply at no extra cost

Ciroapp score

4.1/ 5

WP Ghost hides the paths bots hunt for, then adds brute force limits, a 7G & 8G firewall, and injection filters — with a free Lite version to test first. The catch: premium prices aren't published, and refund terms aren't shown anywhere we reviewed. Overall, it's a solid first layer for WordPress owners willing to verify costs before buying.

Pros

Pros:Masks wp-admin and wp-login behind custom URLs, and URL/text mapping hides plugins and themes from source-code scanning, so vulnerability scanners have far less to fingerprint
Pros:Stops brute force at the login door with rate limiting, lockouts, two-factor authentication, and passkey login — the vendor reports 10M+ attempts blocked monthly
Pros:Runs the 7G & 8G firewall with a claimed 0.05s average load time, adding SQL injection, XSS, and XML-RPC filtering without a measurable performance hit

Cons

Cons:Security-through-obscurity is a first line, not a full defense — hiding paths doesn't patch real vulnerabilities, so you still need a scanner like Wordfence layered on top
Cons:Exact plan prices, billing periods, renewal rates, and per-license site limits weren't visible in the content reviewed, so you have to dig into the pricing page before you can budget
Cons:No timed free trial and no published refund or money-back terms appeared on the reviewed pages — you're limited to the free Lite version for evaluation and should read the Terms of Use before paying

Best for

WordPress site owners who want to hide wp-admin and common paths from bots and scanners
Small businesses that need brute force, injection, and firewall protection in one plugin
Agencies managing multiple or multisite installs, with a white label option available

What is Hide My WP Ghost?

WordPress attacks aren't personal, they're automated. Bots scan for wp-admin, poke at old plugins, and hammer login pages all day. Hide My WP Ghost (now WP Ghost) hides those common paths, limits brute force attempts, and filters SQL injection and XSS attacks.

Less exposure, fewer attack attempts, and a calmer security log.

Hide My WP Ghost, rebranded as WP Ghost, is a WordPress security plugin built around one idea: hide what hackers look for. It's made for WordPress site owners, including bloggers, small businesses, freelancers, and agencies running multisite networks. The plugin adds layers against SQL injection, XSS, XML-RPC, and brute force attacks.

It's been around since 2016, claims over 250,000 secured websites, and holds ratings between 4.5 and 4.8 across major review platforms.

Should you choose Hide My WP Ghost?

Quick buyer guidance before you compare plans or click through.

Choose it if

Sites hosted on major providers like GoDaddy, SiteGround, Bluehost, Hostinger, WP Engine, and Google Cloud
WordPress multisite networks using sub-directories or sub-domains
Buyers who value a long track record: the team has shipped the plugin since 2016 with 4.5+ ratings
Anyone who wants a fast start, with vendor-claimed setup in under 5 minutes and one-click security presets
Users who want 2FA, passkey login, country blocking, and security headers in a single plugin

Skip it if

Non-WordPress sites. This is a WordPress-only plugin, so it won't help other CMS platforms
Buyers who need exact plan costs upfront. Detailed plan pricing wasn't visible in the content reviewed, so check the pricing page and free vs premium comparison before purchasing
Teams expecting a free trial or refund guarantee. No trial or refund terms were visible in the reviewed content, so read the terms of use first
Anyone uncomfortable changing core URLs. Hiding paths changes how your admin area is reached, so test carefully on staging first
Hands-off owners. Even with presets, the plugin involves settings you should review and adjust for your site

Next steps before buying

1Check the pricing page and read the free vs premium comparison to pick the right tier
2Run the free security check to see your site's current weak spots
3Confirm your host and existing plugins against the published compatibility lists before installing
4Skim the quick setup guide and best-practice settings so you know what will change
5Review the terms of use for refund or trial terms, since none were visible in the content reviewed

Ease of use

The vendor claims install and setup take under 5 minutes, backed by one-click security presets, a quick setup guide, and best-practice settings. On-site reviewers describe it as easier to configure than other security plugins and repeatedly praise fast, personalized support. A knowledge base and plugin and theme compatibility lists round out onboarding.

Hide My WP Ghost Key Features

👻 Hide the Paths Bots Hunt For

Bots can't attack what they can't find. WP Ghost masks wp-admin and wp-login behind custom login URLs, and URL and text mapping remaps revealing links in your source code. Plugins and themes get hidden too, so vulnerability scanners come back with little to work with.

It runs quietly once you've configured it.

✨ Stop Brute Force at the Login Door

Hiding your login page cuts noise, but WP Ghost also blocks repeated guesses. Intelligent rate limiting restricts how often anyone can try, and lockouts stop repetitive attempts cold. Add two-factor authentication or passkey login for a second gate.

The vendor reports 10M+ brute force attempts stopped every month.

⚡ Firewall and Injection Filters That Stay Light

The 7G and 8G firewall by Jeff Starr filters threats before they reach WordPress, with a claimed 0.05s average load time. Security layers cover the common injection routes:

SQL injection filters for database attacks
Security headers against XSS
XML-RPC blocking to stop xmlrpc.php abuse Use these when you want broad filtering without slowing your site.

✨ See What's Actually Happening

Security works better when you can verify it. The security check runs 35+ tasks and flags potential breaches with actionable fixes. The activity log tracks every important action, and a separate threats log records what gets blocked.

Use these tools for audits, after suspicious activity, or for reporting on client sites.

✨ Built to Fit Your Setup

WP Ghost runs on all major hosts, including GoDaddy, SiteGround, and WP Engine, and supports multisite networks with sub-directories or sub-domains. It also works alongside Wordfence, Sucuri, WP CERBER, and Solid WP, so you can layer it onto an existing setup. One-click presets get you configured in under five minutes.

Use Cases

🕵️ Hiding Your Login Page From Bots

You run a blog and bots keep hammering wp-login.php. Switch to a custom login URL and hide common paths. Scans come back empty.

Expected outcome: fewer attack attempts and a calmer security log.

🔒 Stopping Brute Force on a Small Business Site

Lockouts and rate limiting cut repetitive login attempts at the source. Add 2FA or passkey login for a second check. > Tip: run the free security check first to spot your weak points.

🏢 Managing Client Sites as an Agency

Agencies protect multisite networks on sub-directories or sub-domains, with white label at higher tiers. It layers cleanly beside Wordfence, Sucuri, WP CERBER, or Solid WP. One-click presets get each site set up fast.

⏱️ Giving Contractors Temporary Access

Hiring help for a launch or support? Create time-limited admin accounts that expire on schedule. The activity log tracks every key action, so you know who did what.

Expected outcome: access without lingering risk.

Hide My WP Ghost pricing

2 plans
Free plan available

Prices not verified yet — see the vendor page.

Hide My WP Ghost's pricing page

Hide My WP Ghost pricing page screenshot

View pricing page screenshot

Plan	Billed monthly	Billed annually	Includes
Free (Lite) Version	Free	—	Installs directly from WordPress Guided step-by-step setup on the site Free vs Premium comparison page available
Premium Licenses	See vendor page	See vendor page	Full advertised feature set of 150+ protections Custom login URLs, brute force, SQL injection, and XSS protection 7G & 8G firewall, two-factor authentication, and country blocking Temporary logins, activity logging, and multisite support Agency white label at higher tiers

Pricing types: Free plan

Pricing notes

Hide My WP Ghost (now WP Ghost) offers a free version of its WordPress security plugin, with paid premium licenses sold through its pricing page. Plan names and exact prices weren't shown in the content we reviewed, so check the pricing page for current rates and site limits.

Hide My WP Ghost (now WP Ghost) uses a freemium model: there's a free version of the plugin, and paid premium licenses are sold through its pricing page.

The pricing link we reviewed didn't return plan details, so here's what the site itself confirms about plans, features, and how to choose.

Free (Lite) Version

Price: Free Other Features:

Installs directly from WordPress, with a step-by-step guide on the site
A Free vs Premium comparison page shows exactly what upgrading adds

The free version is the easiest way to see WP Ghost in action. Setup takes under five minutes, according to the site. Set it up on one site, try the security tweaks, and decide whether the premium protections are worth paying for. If you run a personal blog with modest risk, it may cover you for a while.

Premium Licenses

Other Features:

The full advertised feature set of 150+ protections
Custom login URLs, brute force, SQL injection, and XSS protection
7G & 8G firewall, two-factor authentication, and country blocking
Temporary logins, activity logging, and multisite support
Agency white label at the higher end

Premium is where the full toolkit lives — the site's whole pitch centers on those 150+ features and the threat numbers behind them. It runs on all the major hosts too, including GoDaddy, SiteGround, WP Engine, and Bluehost, so hosting shouldn't block you. Before you buy, confirm how many sites a license covers and which features sit behind the paywall; the Free vs Premium guide answers most of that.

The bottom line: a free version is explicitly offered — "Install Free Version" sits right in the site's footer — so you can start at zero cost. Refund terms, a money-back guarantee, and a free trial don't appear anywhere on the pages we reviewed. If anything's unclear, customer reviews say the support team is quick and helpful.

How to pay less for Hide My WP Ghost

Start on the free plan and upgrade only when you hit its limits.

Visit Hide My WP Ghost

Email me when Hide My WP Ghost changes price

One email when we detect a price change on the vendor's pricing page. No newsletter, no deals. Unsubscribe in one click.

User Reviews

No reviews yet.

Write a Review

Write a Review for Hide My WP Ghost

Why use Hide My WP Ghost?

Most security tools react after a bot finds you. This plugin works earlier, by hiding the paths bots rely on so scans come back empty. Here's why that matters for your site:

Hides the targets bots hunt for. Custom login URLs and URL mapping mask wp-admin, plugins, and themes, so vulnerability scanners have far less to work with.
Cuts brute force attacks at the source. Rate limiting, lockouts, 2FA, and passkey login stop repetitive login attempts. The site reports 10M+ stopped every month.
Layered protection that stays light. The 7G and 8G firewall, plus SQL injection, XSS, and XML-RPC protections, run with a claimed average load time of 0.05 seconds.
Shows you what's actually happening. Run 35+ security tasks with actionable fixes, and track every key action in the activity log.
Fits the stack you already have. It works alongside Wordfence, Sucuri, WP CERBER, and Solid WP, runs on all major hosts, and supports multisite setups.
A track record you can verify. Active since 2016 with 250k+ secured sites, 100M+ monthly threats prevented, and ratings of 4.5 to 4.8 on WordPress.org, G2, Capterra, and AppSumo.

Try it now View pricing

Hide My WP Ghost alternatives

Other tools in the WordPress Security Plugin category

View all WordPress Security Plugin tools

Hide My WP Ghost FAQ

Does Hide My WP Ghost have a free plan?

Yes. Hide My WP Ghost has a free plan (Free (Lite) Version).

Is there a free trial before I pay?

There's no timed trial, but a free Lite version installs straight from WordPress. Test the core setup at zero cost, then use the Free vs Premium comparison to decide if upgrading is worth it.

What's the refund policy if I change my mind?

Refund terms aren't shown on the pricing pages, so read the Terms of Use before you buy. Still unsure? Ask support first — reviewers consistently describe quick, helpful replies.

Does it work with other security plugins and my host?

Yes. It's designed to run alongside Wordfence, Sucuri, WP CERBER, and Solid WP. The site also publishes plugin and theme compatibility lists, and it supports major hosts like GoDaddy, SiteGround, and WP Engine.

How responsive is customer support?

The company advertises dedicated support, and user reviews describe quick, personalized help. There's no published response-time guarantee, so send a pre-sale question through the contact page to gauge speed yourself.