WP Ghost Premium

Change paths to limit scanner clues

WP Ghost Premium is the paid edition of WP Ghost, a WordPress security and firewall add-on. WP Ghost changes and secures common WordPress, add-on, and theme paths, including /wp-admin, /wp-login.php, /wp-content, and /wp-includes. This can reduce the default paths visible to automated scanners. It does not fix vulnerable plugin code or replace login authentication.

Premium adds Ghost Mode, a maximum security preset that changes all paths, hides file extensions, and enables all hiding settings in one click. WP Ghost changes frontend paths by default for compatibility. To include administrative paths, add define('HMW_ALWAYS_CHANGE_PATHS', true); to wp-config.php, then save the WP Ghost settings again.

Use website-specific findings to pick fixes

The Security Check runs independently of AI capabilities. It includes a score from 0 to 100 based on completed security tasks and enabled functions, along with prioritized findings, severity bands, and task details. AI Security Explanations use those findings and configuration details, such as server type, rewrite-rule status, configuration-file writability, and security mode, to create a plain-language summary and one suggested action per finding. The report also explains why each entry matters and how it was ranked.

AI Security Explanations require a connected WP Ghost account with an active subscription and have a monthly check allowance. The request includes the Security Check findings and six setup fields: server type, configuration-file writability, rewrite-rule presence, cache-plugin presence, security mode, and mapped-file count. It excludes page content, user records, passwords, and database rows.

Block repeated threats and review activity

IP Block Automation can block addresses that trigger repeated security threats. Email alerts can notify you about brute-force lockouts or if a security log is turned off; optional weekly threat summaries are also available.

• Security Threats Log: Review unlimited entries with filters for threat type, status, country, and time range. Search, paginate, and export entries as CSV.
• User Events Log: Search and review unlimited user-event entries, paginate results, and export them as CSV.
• Cloud Event Storage: Retain events in the cloud for 30 days for audit history and incident reports.

Set crawler rules with their discovery effects in mind

AI Copyright Protection blocks more than 30 AI training crawlers at the firewall, including GPTBot, ClaudeBot, PerplexityBot, CCBot, and Bytespider. It also adds Disallow rules to robots.txt, and the crawler list is updated with plugin releases. PerplexityBot supports AI search discovery, so blocking it can limit visibility in that service. The supplied product information states these controls do not affect regular Google, Bing, or Yahoo search visibility.

Apply additional Premium controls

Geo-Security can block countries across the whole site or on specific paths. Premium can conceal file extensions for .php, .css, .js, and .json URLs, rename the database prefix, repair file permissions, and regenerate SALT keys.

Install, configure, and check paths

Install and activate WP Ghost Premium in WordPress, then review the security settings and enable the hardening features that fit your site. Save the recovery file containing your Safe URL before changing login paths. Use Overview and Security Check to review the score, findings, and prioritized tasks. Run Frontend Check or Ghost Doctor to check that changed paths and site assets load; server rewrite settings and cached documents can affect the result.