LunarShield

Read-only security audit for WordPress: 62 checks including PHP2Shell, an A to F grade, and a checklist that records what you have fixed.

Hardens WordPress with secure headers, login protection, user enumeration blocking, rate limiting, and a built-in security checklist.

Adds some extra security to your WordPress with only one click.

Lockora Security Audit checks WordPress security posture, hardening, core integrity, vulnerabilities, and optional AI reports.

Secure HTTP headers - Essential, and easy.

For site owners who want an honest hardening checklist, not a heavy security suite: what to fix in WordPress, and what to ask your host for.