An extra layer of security for your site

The easy way to completely hide your WordPress, plugins and themes

How it Works
Demo Video

WP-Hide Explained

The WordPress Exposure Management plugin for your website.
Over 99,99% of sites hacks are focused attacks on specific plugins and themes vulnerabilities. A huge improvement over Site Security since hackers web scanners will not find any WordPress traces on your site. Since no WordPress plugins and themes are found anymore, no hack occur even if the site contains exploitable code.
Our proprietary AI technology, built on advanced machine learning principles, powers our Site AI Scan feature to detect up to 99.9% of identifiable traces and vulnerabilities.
Provides a clean method for removing any WordPress fingerprints including themes and plugins.
No negative impact on SEO at all! Used wisely, specific SEO aspects can be improved.

WP HIDE PRO now available!

Plugin Features

No files and directories changes!

No files and directories are being changed on your server, everything is processed virtually! The plugin algorithm use URL rewrite techniques and WordPress filters to apply all functionality and features.

100% compatible with other Plugins & Themes

Well designed code to ensure full compatibility with all themes and plugins. Once the plugin is activated, the site will continue to work the same as before.

Overall Site AI-Driven Scan

Our custom AI-powered technology identifies the most critical and high-potential security risks across your website. By integrating advanced intelligence inspired by technologies, the Site AI-Driven Scan performs a comprehensive assessment to detect known issues, hidden vulnerabilities, and potential threat vectors. The scan delivers a detailed, prioritized report outlining each identified risk, its potential impact, and clear, actionable recommendations—empowering you to remediate vulnerabilities efficiently and strengthen your overall security posture.

2FA – Two-Factor Authentication

2FA, or Two-Factor Authentication, enhances security by requiring two forms of verification before granting access to an account. Typically, this includes a password and a second factor, such as a text message code or authentication app, making unauthorized access significantly more difficult.

WordPress MultiSite Compatible

PRO FEATURE: Support MultiSite environment. Can be set to work per site set-up ( individual settings to each site in the network ) or globally ( superadmin settings )

Theme Masking

Hide all references to the theme or child theme to prevent display of theme name, version, author etc. No one will know it's a WordPress theme.

Compatible with any host / server

Tested and 100% compatible with different hosting server configuration based on Linux and Windows operating systems.

Nginx Compatible

PRO FEATURE: Full Nginx support, LEMP stack. Advanced rewrite queries engine included, which provide the most efficient and light rewrite data.

AI Vulnerability Scan

Checks your installed plugins and themes against an AI-curated database of known vulnerabilities. It not only flags current risks but also provides detailed CVE insights and historical security context, helping you assess trust, prioritize updates, and maintain a stronger, proactive security posture.

Advanced CAPTCHA Protection

Secure your site with flexible CAPTCHA integration, supporting Google reCAPTCHA v2, v3, and Cloudflare Turnstile. Protect login, registration, and other key forms from bots and abuse without compromising user experience.

Custom login URL

All sites receive hits on the login page, by hacking boots trying to brute force in. This requires a high processing CPU power for the site, to keep up with the traffic, due to a large number of connect attempts. That concludes to a dramatic site speed decrease and response time. Blocking default login URL, boots hit just a cached 404 error page, so no resource is being used at all.

HTML clean-up

Clean up HTML comments produced by plugins and theme, WordPress core auto-generated classes as page-template-x, format-x, wp-image-x, etc for body, post, images etc

Individual Plugin URL customization

Change Plugins Folder path and individual plugins with the option to block all the defaults.

Change WP Ajax calls

PRO FEATURE: Change the default use of run-ajax.php and block the default.

Firewall

PRO FEATURE: Ultimate protection of a website using a Proactive security solution. Adds a layer of protection, to prevent the malicious and malware to reach the server-side.

White label themes/plugins

PRO FEATURE: Replace text on outputted code and assets to white label plugins/themes/code, including complex applications like page builders ( Elementor, WPBakery Page Builder ).
See Full List

Very popular plugins (including JetPack, Elementor, Advanced Custom Fields, Gravity Forms, WordPress SEO) were found vulnerable to XSS attacks. This can happen again for other plugins too.
Do not jeopardy your site security, hackers never sleep

Check for yourself !

No WordPress detectors can see any detail about Our Site, no plugins info, no theme specifications, no WordPress at all !!

ScanWP

WPTthemeDetector

WhatWPThemeIsThat

WhatTheme

TheSEOTools

WPThemeDetector

WPDetector

SoftwareFinder

CMSDetect

WordPressDetector

WordPressThemeDetector

WordPressPluginChecker

Prevention is better than cure
Start protecting your Business today!

Why use?

There’s no doubt that WordPress is by far the most popular content management system in the world. Its growth has been nothing short of extraordinary, and it continues to expand year after year, now powering over 40% of all websites globally — including more than 90 million active sites and 60% of the world’s top 100 blogs.

But that popularity comes at a price. Where WordPress leads, hackers follow. Automated bots scan the web around the clock looking for exposed WordPress signatures, outdated plugins, and known theme vulnerabilities — and when they find one, they don’t stop at a single site. A single disclosed vulnerability can put millions of installs at risk overnight, which is exactly why WordPress protection can’t be an afterthought for any serious website owner.

Security breaches in themes and plugins account for more than 98% of all successful WordPress hacks. New vulnerabilities are disclosed every day — you can see just a fraction of them tracked at Sucuri’s WordPress Security blog. If you run a business on WordPress, this isn’t a hypothetical threat. It’s a daily one.

Perfect solution!

Statistics make it clear: without protection, it's not a matter of if, but when. Don't assume your site is secure just because it hasn't been hacked yet — the absence of an attack so far doesn't mean the absence of risk. If proper security measures aren't in place, you're an easy, clean target for hackers.

WP Hide PRO is a WordPress firewall plugin and security enhancer that makes it easy for site administrators to completely hide their CMS identity. The formula is simple: it hides WordPress fingerprints — resource URLs (plugins, themes, core files), the login URL, REST API and XML-RPC endpoints, and more. This makes your site effectively invisible to bot attacks that try to identify specific plugins, themes, and their known vulnerabilities.

The technical term for this is "security through obscurity." In plain terms: if an attacker can't see what you're running, they can't exploit it. Hackers rely on bots and automated systems to scan for known loopholes tied to specific WordPress versions, themes, and plugins — this is exactly why a WordPress plugin vulnerability checker matters as much as the vulnerabilities themselves. With WP Hide PRO active, those automated systems are rendered useless: they can't detect that WordPress is even running, let alone gather the basic fingerprinting data needed to plan an attack. That's real WordPress bot protection and WordPress protection working together — turning your site from an easy target into a dead end for automated reconnaissance.

Testimonials

  • I was getting continuous hacking attempts on wp-login.php and xmlrpc.php, which have completely stopped. One fantastic feature is stopping external access to back-end urls, since hackers use these to find weaknesses to hack in with. Excellent security not found in other plugins!

    @njrfbzr – DigitalOcean

  • I really like this plugin. I tested through mutliple WordPress Detection websites & browser addons, none of them were able to detect my WP. It’s pretty easy to configure, you can’t do too much wrong with it. This is because it doesn’t change the directories on the server, instead they are rewrite to new URLs of your choosing. It also has the option to remove useless WordPress meta tags in your site code.

    @darkhydra90 – WP Engine

  • Great plug in for removing junk from the head of your page and rewriting paths. Very useful, very important, every WordPress website should get this.

    @mikebourne

Scroll to top