BruteFort
BruteFort is a security-focused WordPress plugin designed to protect websites from brute force attacks and related login threats. Created for developers, agencies, and site owners, it aims to address specific security gaps that WordPress does not handle by default. The plugin provides features such as rate limiting, a hidden login URL, geo blocking, and IP rules to help strengthen site defenses while maintaining speed and simplicity.
Installation is designed to be quick, with users able to set up BruteFort in about a minute. The plugin is built to be lightweight and avoids unnecessary features or settings, focusing on solving a single clear problem effectively. There are no ads, hidden telemetry, or forced account creation required to use the plugin. BruteFort is listed on WordPress.org and is available to install for free without the need for an account or credit card.
The plugin is open source and licensed under the GPL, allowing users to inspect, fork, or contribute to its codebase. The core functionality is always free, and any future pro plans are intended to add additional value without restricting existing features. BruteFort Protection emphasizes a "less is more" philosophy, ensuring each plugin is fast, reliable, and scoped to a single purpose.
Overview
7 featuresBruteFort is a Website firewall, bot & spam protection project. It focuses on protecting WordPress sites from brute force attacks and unauthorized access with advanced login security features. It is built as a B2B product for wordPress site administrators. There is a free tier. BruteFort is available on the web.
It is developed by Yoyal Limbu, and it first shipped in 2025. Key capabilities include rate limiting, custom login URL, and geo blocking.
Summary written by a language model from the project’s public pages.
- Rate limiting
- Custom login URL
- Geo blocking
- IP restriction
- Brute force protection
- Login security
- Whitelist/blacklist management
Built with & integrations
Trust & compliance
Indexing history
1What PulseGate has recorded for this listing
- Indexed1 Jul · 07:31 UTCBruteFort – Rate Limit, Custom Login URL, Geo Blocking & IP Restriction verified against its public sourceSource: PulseGate · Open
Frequently asked questions about BruteFort
- What does BruteFort do?
- BruteFort focuses on protecting WordPress sites from brute force attacks and unauthorized access with advanced login security features. It is catalogued under Website firewall, bot & spam protection on PulseGate.
- Who is BruteFort for?
- BruteFort is a B2B product built for wordPress site administrators.
- Is BruteFort free?
- Yes — there is a free tier, with paid plans for advanced use.
- What platforms does BruteFort run on?
- BruteFort runs on the web.
- Is BruteFort still active?
- Unverified. BruteFort has not been re-checked since it entered the index, so there is no finding either way — and only a positive finding would say otherwise.
- What are alternatives to BruteFort?
- Similar projects tracked by PulseGate include Custom Login Protector, SiteFort, and WP Limit Login Attempts.Custom Login ProtectorSiteFortWP Limit Login Attempts
- Who makes BruteFort?
- BruteFort is developed by Yoyal Limbu.
- How long has BruteFort been around?
- BruteFort first shipped in 2025.
Similar projects
Closest matches by what these projects do