1
Two-Factor Authentication
A second code on every account, even if the password leaks.
2
Custom Login URL
Move wp-login.php so bots stop hammering the default.
3
Login CAPTCHA
Block automated login attempts before they test a password.
4
HTTP Auth & IP Limits
A server-level gate in front of WordPress for admin-only sites.
5
Login Activity Monitoring
See every login, failed attempt, and new admin account.
6
Edge WAF & Bot Blocking
Stop most attacks at the CDN before they reach your server.