BruteBank

[ BruteBank :: WordPress Login Security ]

Stop brute-force attacks before they reach your login.

BruteBank blocks malicious IPs in real time, pings your phone, and locks down WordPress with two-factor auth. No soft corners. No fluff. Just block, alert, done.

create account download plugin
  • real-time blocking
  • mobile push alerts
  • two-factor auth
// BRUTEBANK / LIVE SECURITY LIVE
Dashboard
Total attacks
0
New32
Imminent16
Sites3

Your sites

Attacks by site // tap to investigate

store.example 128 attacks
studio.example 76 attacks
blog.example 44 attacks
DashboardAttacksBlocksAccount
real-time blocking mobile alerts two-factor auth 403 firewall blocks cloud fingerprinting real-time blocking mobile alerts two-factor auth 403 firewall blocks cloud fingerprinting
0+
threats detected today
0
imminent threats blocked
24/7
cloud protection

// features

Everything your WordPress site needs to stay secure

3 modules. zero bloat. installed and forget it.

01

Simple WordPress security

Block intrusion attempts with one swipe and get push notifications whenever your site is at risk.

02

Auto block hackers

Automatically block repeated attacks using your account rules, including bursts from multiple IPs targeting one username.

03

Instant blocking

Protect one or all of your WordPress sites. After blocking an attacker, their IP is instantly banned.

04 // know what is happening

Real-time
login monitoring.

Every failed WordPress sign-in becomes a useful security signal. BruteBank records the source, recognizes repeated attack patterns, and groups activity so you can see what is targeting your site.

  • Monitor failed logins and password-protected pages
  • Correlate repeated activity across connected sites
  • Review attacks by IP, country, and targeted user

Login activity // example view

Monitoring on

Latest signal

Repeated
login failures

Target // /wp-login.php

Account // admin

Source // 192.0.2.14

Attack patternActivity log
Credential guessing192.0.2.14 · adminFlagged
Repeated sign-in198.51.100.9 · wp-loginLogged
Protected page probe203.0.113.77 · pageLogged

Illustrative activity // example IP addresses

// distributed attack protection

Many IPs. One target.
One coordinated defense.

Attackers rotate IPs to hide repeated login attempts. BruteBank connects the dots when multiple IPs target the same username and service on one site within 5 minutes. When their combined attempts reach your Auto Block threshold, the participating IPs are added to your block list.

Username burst protection

  • Spot the pattern. Count attempts together, even when the source IP changes.
  • Keep your rules. Uses your existing Auto Block threshold; disabled when set to None.
  • Block IPs, not usernames. The targeted username is not locked by this protection.

05 // optional companion app

Mobile alerts & block management

Your WordPress protection runs through the plugin. Use the iOS app if you’d also like push alerts, a mobile view of threats, and a way to manage blocks on the go.

iOS app // optional
06 // enforcement at the edge

Instant firewall blocks.

Block a hostile IP from your BruteBank account. Connected WordPress plugins sync the block list every five minutes and return a 403 response when that address is seen again.

  • One block list for connected sites
  • Repeat requests receive a 403 denial
  • CAPTCHA audit IP blocks apply locally right away

Block rule // example flow

Active

01 // detect

Attack
identified

192.0.2.14

→

02 // sync

Block list
updated

Connected sites

→

03 // deny

403

Request refused

Cloud block list sync // up to 5 minutes

07 // identity check

Two-factor auth
by email.

Protect WordPress administrator sign-ins with a one-time code sent to the account email. No separate authenticator app required.

01 // Request a code
02 // Verify the sign-in
B

BruteBank

Security verification

Action required

// WordPress administrator sign-in

Enter your one-time code

A verification code was sent to the email address on your account.

4 8 2 6 1 7
Example only // expires in 10 min Verify sign-in →

// WordPress form protection

Stop spam.
Keep the submission.

Invisible CAPTCHA checks WPForms, Contact Form 7, Elementor Pro Forms, and Gravity Forms without making visitors solve puzzles. If a submission is blocked, it’s still saved in your local audit so you can review possible false positives.

  • → Review submitted fields, CAPTCHA results, and visitor IPs
  • → Keep attachment copies with configurable retention
  • → Block an abusive IP from the audit
Explore WordPress form protection
Submission audit // local copy

Gravity Forms

CAPTCHA rejected

Fields retained for administrator review

Review

Elementor Pro Forms

Attachment saved

Private copy · retention managed in settings

Audit

No visitor puzzle // locally stored submission details may contain personal data.

// protection that scales

Plans for every site.

Choose the coverage that fits your setup. Manage connected sites from one BruteBank account and change plans as you grow.

Monthly billing
Plan // 01

Satellite

1 site

$32.95 per month
  • ✓Cloud threat monitoring
  • ✓BruteBank security integrations
  • ✓Mobile app and alerts
  • ✓Unlimited updates
Choose Satellite →
Plan // 02

Rocketship

5 sites

$125.00 per month
  • ✓Cloud threat monitoring
  • ✓BruteBank security integrations
  • ✓Mobile app and alerts
  • ✓Unlimited updates
Choose Rocketship →
Plan // 03

Starship

10 sites

$250.00 per month
  • ✓Cloud threat monitoring
  • ✓BruteBank security integrations
  • ✓Mobile app and alerts
  • ✓Unlimited updates
Choose Starship →
Plan // 04

Space Station

20 sites

$575.00 per month
  • ✓Cloud threat monitoring
  • ✓BruteBank security integrations
  • ✓Mobile app and alerts
  • ✓Unlimited updates
Choose Space Station →

Prices and billing periods match checkout. You can review your selection before completing registration.

/ ready when you are

Ready to lock down
your wordpress site?

join site owners who stop brute-force attacks before they start.

get started free get the plugin