Simple, Transparent Pricing
Free Forever.
Pro When You Need More.
Core security features are free forever. Pro adds automation and advanced response capabilities.
Free Forever
GPL Licensed
No Tracking
Privacy First
WordPress Ready
PHP 7.4+
WP 6.x Ready
Why Free Forever?
Because every WordPress website deserves modern security.
We believe basic protection should never be behind a paywall. Advanced automation will remain Pro, but essential security is free for everyone.
Free
$0 forever
Essential security for every WordPress site. No credit card required.
- TOTP 2FA Authentication
- Custom Login URL
- IP Management & Blocking
- Security Response Center
- File Monitoring & Alerts
- Security Dashboard
- Trusted Devices Management
- Recovery Codes System
- Email Notifications
- WordPress Multisite Support
COMING SOON
Pro
$49 /year
Advanced automation for serious sites. Join the waitlist to be notified.
- Everything in Free
- Auto-Revert Critical Files
- Auto-Quarantine Malicious Files
- Smart Permission Requests
- Backup Management
- Unlimited Security History
- Unlimited Email Notifications
- Priority Support
- Advanced Threat Intelligence
- White-label Options
Comparison
How We Compare To Typical Solutions
A factual comparison based on real features, not marketing claims.
Typical Login Security Plugins
- 1 Detect threat
- 2 Send notification
- 3 Done (you're on your own)
Neksio Login & File Security
- 1 Detect threat
- 2 Review with context
- 3 Approve or deny
- 4 Recover trusted files
- 5 Full audit history
- 6 Continuous monitoring
- 7 Confidence restored
Why We Took A Different Approach
Many WordPress security plugins try to solve every possible security problem. Neksio Login & File Security focuses on protecting the areas administrators interact with most frequently: authentication, login security, critical file monitoring, administrator visibility, recovery, and trusted devices. This focused approach helps reduce complexity while providing the tools needed for everyday WordPress security management.
Complete Features List
Everything You Need, All in One Place
Filter by category to explore what Neksio Login & File Security offers.
TOTP 2FA
Time-based one-time password authentication
✓ Free
✓ Pro
Authentication
Recovery Codes
Backup codes for authenticator device loss
✓ Free
✓ Pro
Authentication
Custom Login URL
Hide wp-login.php behind a secret URL
✓ Free
✓ Pro
Authentication
Trusted Devices
Manage and approve trusted devices
✓ Free
✓ Pro
Authentication
Login Rate Limiting
Automatic IP blocking after failed attempts
✓ Free
✓ Pro
Authentication
Emergency Access
Secret fallback URL for administrator recovery
✓ Free
✓ Pro
Authentication
Role-Based 2FA Enforcement
Require 2FA for specific user roles
✓ Free
✓ Pro
Authentication
Grace Period Configuration
Configurable grace period for new users
✓ Free
✓ Pro
Authentication
User Override Settings
Exempt specific users from 2FA enforcement
✓ Free
✓ Pro
Authentication
Pending Enforcement Tracking
Track users who need to enable 2FA
✓ Free
✓ Pro
Authentication
File Integrity Monitoring
Real-time critical file change detection
✓ Free
✓ Pro
Monitoring
wp-config.php Monitoring
Detect unauthorized changes to config
✓ Free
✓ Pro
Monitoring
.htaccess Monitoring
Track changes to server configuration
✓ Free
✓ Pro
Monitoring
Unknown PHP File Detection
Scan for suspicious PHP files in root
✓ Free
✓ Pro
Monitoring
.htaccess Backup Detection
Find exposed .htaccess backup files
✓ Free
✓ Pro
Monitoring
Permission Monitoring
Track file permission changes
✓ Free
✓ Pro
Monitoring
Real-Time Activity Monitor
Live feed of security events
✓ Free
✓ Pro
Monitoring
Security Score Calculation
0-100 score based on 6 factors
✓ Free
✓ Pro
Monitoring
Security Event Logs
Complete audit trail with filtering
✓ Free
✓ Pro
Monitoring
Login Logs
Track all login attempts (successful/failed)
✓ Free
✓ Pro
Monitoring
Attack Type Classification
Brute force, enumeration, XML-RPC, URL scanning
✓ Free
✓ Pro
Monitoring
User Agent Parsing
Browser and OS detection
✓ Free
✓ Pro
Monitoring
Auto-Revert Critical Files
Automatically restore modified critical files
✗ Free
✓ Pro
Monitoring
Auto-Quarantine Malicious Files
Isolate malicious files before execution
✗ Free
✓ Pro
Monitoring
Smart Permission Requests
Approval workflow for file changes
✗ Free
✓ Pro
Monitoring
Unlimited Security History
Keep all security events forever
✗ Free
✓ Pro
Monitoring
IP Management & Blocking
Manual and automatic IP blocking
✓ Free
✓ Pro
Protection
Brute Force Protection
Automatic blocking after threshold attempts
✓ Free
✓ Pro
Protection
IP Intelligence Reports
View attack patterns and geolocation
✓ Free
✓ Pro
Protection
Block Duration Settings
Temporary or permanent IP blocks
✓ Free
✓ Pro
Protection
GeoIP Data Integration
Country/city data from ip-api.com
✓ Free
✓ Pro
Protection
Top Threats Overview
Quick view of major threats
✓ Free
✓ Pro
Protection
Advanced Threat Intelligence
Real-time threat feeds and analysis
✗ Free
✓ Pro
Protection
Security Dashboard
Centralized security overview
✓ Free
✓ Pro
Management
Data Management
Configurable retention periods
✓ Free
✓ Pro
Management
WordPress Multisite Support
Network-wide or per-site configuration
✓ Free
✓ Pro
Management
User Profile Integration
2FA settings in user profile
✓ Free
✓ Pro
Management
Backup Management
Download and manage file backups
✗ Free
✓ Pro
Management
White-label Options
Customize branding for client sites
✗ Free
✓ Pro
Management
Email Notifications
Instant security alerts
✓ Free
✓ Pro
Notifications
Recovery Codes Email
Email recovery codes to user
✓ Free
✓ Pro
Notifications
Security Alert Emails
Alerts for critical file changes
✓ Free
✓ Pro
Notifications
IP Block Notifications
Alerts when IPs are blocked
✓ Free
✓ Pro
Notifications
2FA Setup Confirmations
Confirmation emails for 2FA changes
✓ Free
✓ Pro
Notifications
Failed Login Alerts
Optional alerts for failed logins
✓ Free
✓ Pro
Notifications
Unlimited Email Notifications
No limits on email alerts
✗ Free
✓ Pro
Notifications
Local QR Code Generation
100% local, no external APIs
✓ Free
✓ Pro
Privacy
No External Tracking
Zero tracking or telemetry
✓ Free
✓ Pro
Privacy
No Data Collection
All data stays on your server
✓ Free
✓ Pro
Privacy
TOTP Secret Encryption
Encrypted storage of secrets
✓ Free
✓ Pro
Privacy
Recovery Code Hashing
Store codes as secure hashes only
✓ Free
✓ Pro
Privacy
Secure Cookies
HttpOnly, Secure, SameSite=Lax
✓ Free
✓ Pro
Privacy
Optional IP Storage
User can disable IP logging
✓ Free
✓ Pro
Privacy
Configurable Data Retention
Control how long data is kept
✓ Free
✓ Pro
Privacy
Complete Data Removal
Delete all data on uninstall
✓ Free
✓ Pro
Privacy
GDPR Compliant
Privacy-first design
✓ Free
✓ Pro
Privacy
GPL Licensed
Open source, freedom guaranteed
✓ Free
✓ Pro
Privacy
Translation Ready
Full internationalization support
✓ Free
✓ Pro
Privacy
Real Security Workflow
How Protection Actually Works
From login attempt to complete response — a seamless security flow.
Login Attempt
User attempts to access WordPress admin
↓
Risk Evaluation
IP check, device verification, rate limiting
↓
Two-Factor Authentication
TOTP verification via authenticator app
↓
Trusted Device Check
Verify device is authorized
↓
Dashboard Event
Event logged in security dashboard
↓
Email Notification
Alert sent for critical events
↓
File Monitoring
Critical files continuously monitored
↓
Administrator Review
Approve, deny, or investigate changes
Why Professionals Choose
Built for Real-World Security
Every feature is designed from production incident recovery experience.
🛠️
Designed from Production Incidents
Every feature exists because it solved a real problem during actual website recovery.
🎯
Focused on Administrator Experience
Built around how WordPress administrators actually work, not theoretical workflows.
⚡
Built with Native WordPress APIs
Uses WordPress core functions for compatibility and performance.
🏗️
Lightweight Architecture
Minimal overhead, fast execution, no unnecessary bloat.
🔐
Security-First Engineering
Every line of code is written with security best practices in mind.
🌍
Privacy Conscious & GPL Licensed
Open source, no tracking, no data collection, full transparency.
FAQ
Frequently Asked Questions
Quick answers to common questions about Neksio Login & File Security.
Is Neksio Login & File Security really free?
Yes! The free version is completely free forever with no hidden fees or time limits. It includes essential security features like 2FA, custom login URL, IP blocking, file monitoring, and security dashboard.
Why should I use it instead of only WordPress passwords?
WordPress passwords alone aren't enough. It adds multiple security layers: Two-Factor Authentication (2FA), custom login URLs, IP blocking for brute force protection, real-time file monitoring, and automatic security alerts.
Does it protect wp-config.php?
Yes! The Security Response Center monitors wp-config.php in real-time. Any unauthorized modification triggers an instant alert, and you can review, approve, or automatically revert the changes.
Does it monitor .htaccess changes?
Absolutely. It continuously monitors .htaccess files for unauthorized modifications. Attackers often inject spam redirects here, and the plugin detects these changes immediately and can automatically restore the trusted version.
Can it detect unknown PHP files?
Yes. It scans your WordPress root and wp-content directories for unknown PHP files that shouldn't be there. This helps detect malware, backdoors, and malicious scripts.
Does it send instant email alerts?
Yes. You receive instant email notifications for critical security events including: failed login attempts, file modifications, unknown file detection, permission changes, and IP blocks.
Does it work with WooCommerce?
Yes! It is fully compatible with WooCommerce. It protects your store's checkout, customer data, and payment flows without interfering with WooCommerce functionality.
Does it support WordPress Multisite?
Yes. It fully supports WordPress Multisite networks. You can manage security settings network-wide or configure them per site.
Will it slow down my website?
No. It is optimized for performance with minimal overhead. File monitoring runs efficiently in the background, and security checks are lightweight. Most users report no noticeable impact.
Can I use it on client websites?
Yes! The free version can be used on unlimited client websites. For Pro features, you can purchase a license based on your needs.
Is the plugin GDPR friendly?
Yes. It is privacy-first and GDPR compliant. All data is stored locally in your WordPress database. We don't collect, transmit, or store any data on external servers.
Protect Your WordPress Website Today
Join thousands of WordPress administrators who trust Neksio Login & File Security for their security.