Security snapshot
Across the 16 security-protection sites we've scanned, compared to the all-WordPress average.
Grade A 0%
Grade B 0%
Grade C 38%
Grade D 19%
Grade F 44%
Fail the header check (F)44%vs 82.6% avg
Leak usernames25%vs 38.5% avg
Expose a sensitive file0%vs 1.8% avg
Use HTTPS94%vs 96.1% avg
Security-Protection
Why humans should prove that they are humans by filling captchas? Lets bots prove that they are not bots with adding javascript to their user-agents!
Security-Protection blocks and stops brute-force attacks.
Want to read more how Security-Protection plugin works?
- no captcha, because brute-force attacks is not users’ problem
- no options, because it is great to forget about brute-force attacks completely
Plugin is easy to use: just install it and it just works.
Important: delete ‘admin’ username if you have it on your site. More than 90% of brute-force attacks try to crack the ‘admin’ username.
Few of the most commonly used and worst passwords. Do not use them or similar:
- 123456
- p@s$w0rd
- qwerty
- qwe123
- admin123
- iloveyou
- letmein
Useful:
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| a*g*l*n*m*l*e*s.com | D | Sep 7, 2026 | |
| h*-*c*d*m*.com (WP 6.4.10) | F | Sep 3, 2026 | |
| x*n*h*a*a*e*y.com | D | Sep 1, 2026 | |
| a*o*u*t*r*.org | D | Sep 1, 2026 | |
| c*y*t*v*l*u*t*r.com | C | Aug 31, 2026 | |
| w*w*n*2*i*e.com | C | Aug 24, 2026 | |
| p*i*a*d*e*.net | C | Aug 22, 2026 | |
| m*t*-*a*h*s.com (WP 7.0.4) | F | Aug 19, 2026 | |
| b*h*a*a.com | F | Aug 14, 2026 | |
| b*f*a*d*o*i*h*e*u*y.com | F | Jul 31, 2026 | |
| c*s*d*c*r*g.com | C | Jul 30, 2026 | |
| l*w*e*c*s*i*t*a*t*r*.com | F | Jul 30, 2026 | |
| t*a*a*t*o*p*p*r.com | C | Jul 28, 2026 | |
| a*t*e*i*.bg | C | Jul 27, 2026 | |
| y*g*m*n*a.fr | F | Jul 22, 2026 | |
| o*t*e*e*i*e*.com | F | Jul 19, 2026 |
Page 1 of 1