Launched this week
SecureLite Security
Free WordPress security that proves each protection works
2 followers
Free WordPress security that proves each protection works
2 followers
Most security plugins give you switches and leave you hoping they work. SecureLite proves it. Attack Simulation runs 15 real attacks against its own protections inside WordPress, plus one normal request to confirm real traffic reaches them. Each check comes back passed, switched off or failed, with one-click fixes and a printable report. Safe on a live site. Includes a firewall, malware scanner, limit login attempts, 2FA and hide login. Every feature free, unlimited sites, no account.
Hi Product Hunt 👋 I’m Naveen, founder of PixelGravitas. We look after WordPress sites for clients, and SecureLite started from a simple frustration: most security plugins show you a dashboard full of green switches, but not whether a switch actually stops anything.
So SecureLite has a button that tests it. Attack Simulation hands 15 real attacks (SQL injection, XSS, brute force, malicious uploads, XML-RPC abuse and more) to SecureLite’s own firewall, lockout and upload rules inside WordPress, and sends one normal request to confirm real traffic reaches those rules. Nothing harmful goes over the network and nothing is left behind, so it’s safe to run on a live site. Anything that didn’t hold gets an “Enable & re-test” button, and the result prints as a report you can hand to a client.
You can try it without installing anything: open the Live Preview on the SecureLite page at WordPress.org and click Run Attack Simulation.
Other things I cared about, after reading 1,000+ negative reviews of security plugins:
It’s hard to lock yourself out: 2FA won’t switch on until a code works, a new login URL is tested before it’s kept, and knowing your username isn’t enough to lock you out.
Every feature in the plugin is free, on unlimited sites, with no account or licence key.
Nothing about your site is sent anywhere. The only outside request is fetching official file checksums from WordPress.org to verify your core files.
What it doesn’t do, to be upfront: it tests SecureLite’s own protections, not your host’s or CDN’s firewall, and there’s no live threat-intelligence feed. For a large DDoS you still want Cloudflare in front, and SecureLite works alongside it.
Two questions I’d really value answers to:
What’s the one thing your current security plugin does that frustrates you most?
If you run it, did any check fail on your site? That’s exactly the feedback I need.