This plugin adds several security layers to a content management system, aimed at administrators who want to harden their site against common attacks. It focuses on protecting the login process and obscuring administrative interfaces from unauthorized users.

• Login Event History: Records all login attempts, including timestamps and IP addresses, providing an audit trail for monitoring account access.
• Brute Force Protection: Automatically blocks IP addresses after a configurable number of failed login attempts, preventing automated password-guessing attacks.
• Hide Backend URLs: Moves the standard admin and login pages to a custom, secret URL, making it harder for bots and attackers to find the administrative interface.
• Update Status API: Offers a private API endpoint to check the update status of the core system and plugins without requiring access to the admin area, useful for external monitoring.
• XML-RPC Blocking: Includes an option to disable the XML-RPC interface, which can be a common vector for brute force and other attacks.