WP Ghost Premium is the paid edition of WP Ghost, a WordPress security and firewall plugin. It adds path hardening, automated IP blocking, event monitoring, cloud retention, AI Security Explanations, and crawler controls.

Change common paths

WP Ghost can change and secure paths such as /wp-admin, /wp-login.php, /wp-content, and /wp-includes, along with add-on and theme paths. This changes the public routes automated scanners may probe; it does not fix vulnerable plugin code or replace login authentication. Ghost Mode is a maximum security preset that changes all paths, hides file extensions, and enables all hiding settings in one click.

For compatibility, frontend paths change by default. To include administrative paths, add define('HMW_ALWAYS_CHANGE_PATHS', true); to wp-config.php, then save the WP Ghost settings again.

Review findings and choose actions

Security Check runs locally and includes a score from 0 to 100 with prioritized tasks. It works independently of AI Security Explanations, which use site configuration details such as server type, rewrite rules, configuration-file writability, and security mode to explain findings and suggest an action for each.

AI Security Explanations require a connected WP Ghost account, an active subscription, and use of a monthly check allowance. Requests include Security Check findings and six setup details. They exclude page content, visitor entries, passwords, and database rows.

Block repeat threats and review activity

IP Block Automation can block addresses that trigger repeated security threats. The Security Threats Log and User Events Log include unlimited entries, search, pagination, and CSV export. Threat entries can be filtered by type, status, country, and time range. Cloud Event Storage retains events for 30 days for audit history. Email alerts cover brute-force lockouts and disabled logs; optional weekly threat summaries are also available.

Set crawler controls with care

AI Copyright Protection can block more than 30 AI crawlers at the firewall and adds rules to robots.txt. The crawler list is updated with plugin releases. PerplexityBot works with AI search discovery, so blocking crawlers can limit visibility in the services that use them.

Set up the security functions

Install and activate WP Ghost Premium in WordPress, then review the Overview and Security Check areas to see the score, findings, and prioritized tasks. Enable the hardening functions that fit your site and check that public paths work after making changes.