ParsonsHosting Security for WordPress

Section 01 / What it does

What does ParsonsHosting Security do?

ParsonsHosting Security protects the WordPress login and blocks common attacks on sites hosted on ParsonsHosting servers.

• Hides usernames. Logged-out visitors can't list users through the REST API, ?author= and /author/ pages redirect to your home page, and author names are taken out of the page source, oEmbed and the sitemap. Old accounts you don't use? How to delete a WordPress user.
• Limits failed logins. After 5 failed logins in a minute, or 20 in an hour, from one IP address, that address is locked out for 15 minutes. Error messages stay generic, and the plugin lists the last 50 lockouts.
• Optional custom login URL. Move your login page to an address you choose. It's off by default, so nothing changes until you turn it on. Signing in and resetting your password.
• Two-factor authentication. Optional sign-in codes from any authenticator app, with backup codes. Off until you turn it on.
• Firewall. Checks web addresses and browser details for common attack patterns. It starts in log-only mode; you choose when it blocks.
• Malware and vulnerability scans. Scheduled scans check WordPress core files, look for known problems in your plugins and themes, and look for malware signatures. Anything suspicious can be moved to quarantine, not deleted.
• Blocking harmful files in uploads. An optional setting stops PHP files from running in your uploads folder (Apache and LiteSpeed servers).
• Leaked-password checks. New and changed passwords are checked against known leaked passwords. Only a short piece of the password's hash is sent, never the password.
• Activity log. Records logins, user changes, plugin and theme changes and settings changes, so you can see what happened and when.
• Cloudflare integration. An opt-in setting reads the real visitor IP from Cloudflare, only when the request really comes from Cloudflare's published addresses. Cloudflare DNS and email setup.
• A PH Security menu in your dashboard. Settings and logs live under one menu item with the ParsonsHosting logo.

Section 02 / Donations and payments

Does ParsonsHosting Security work with GiveWP and payment forms?

Yes. ParsonsHosting Security lets GiveWP forms, admin-ajax.php, and Stripe and PayPal webhooks through before any rule runs. If you ever need to switch it off in a hurry, one line in wp-config.php does it, and we can do that for you.

Section 03 / Limits

What ParsonsHosting Security doesn't do

• It doesn't replace backups. ParsonsHosting keeps offsite backups three times a week. Keep your own copy too.
• It doesn't replace updates. WordPress, plugins and themes still need regular updates. Why WordPress updates matter.
• It runs only on ParsonsHosting servers. Anywhere else it stays inactive.
• It can't promise a site won't be compromised. It makes common attacks harder. It isn't a guarantee.

Section 04 / Getting it

How do I get ParsonsHosting Security?

Log in to your ParsonsHosting client area and download it, or open a ticket and we'll install it.

1. Log in.

   Use the button on this page. It takes you to the client area login, then to the download page with the current version, its changelog and the file's SHA-256 checksum.

2. Upload it.

   Take a backup first. Then in WordPress go to Plugins, Add New, Upload Plugin, choose the zip and activate it.

3. Updates arrive in WordPress.

   New versions show up on your Plugins page like any other plugin. You update with one click.

Downloads are for logged-in ParsonsHosting clients running WordPress on our servers. New to WordPress here? How to start a WordPress site on ParsonsHosting. Prefer that we install it for you? Open a support ticket or call 530-710-8726.

Section 05 / Questions

ParsonsHosting Security FAQ

What is ParsonsHosting Security?

ParsonsHosting Security is a WordPress security plugin free for any ParsonsHosting client running WordPress on our servers. It hides usernames, limits failed logins, and adds two-factor authentication, a firewall, and malware and vulnerability scans to WordPress sites on ParsonsHosting servers.

Does ParsonsHosting Security work on sites hosted somewhere else?

ParsonsHosting Security runs only on ParsonsHosting servers. On any other server it stays inactive and changes nothing. To use it, move your site to ParsonsHosting through our free migration at parsonshosting.com/migrate/.

How does the login lockout work?

ParsonsHosting Security locks out an IP address for 15 minutes after 5 failed logins. Only that IP address is affected. If you lock yourself out, wait 15 minutes, or open a ticket at parsonshosting.com/submitticket.php or call 530-710-8726 and we'll clear it.

Can I change my WordPress login URL?

ParsonsHosting Security has an optional custom login URL, so you can move your login page to an address you choose. It is off by default, so nothing changes until you turn it on. Note the new address before you switch it on.

Does ParsonsHosting Security work with GiveWP and online payments?

ParsonsHosting Security works with GiveWP. GiveWP forms, admin-ajax.php, and Stripe and PayPal webhooks are let through before any security rule runs, so donations and payments keep working.

Does ParsonsHosting Security replace backups or updates?

ParsonsHosting Security does not replace backups or updates. ParsonsHosting keeps offsite backups three times a week, and WordPress, plugins and themes still need regular updates. We recommend keeping your own backup copy too.

How do I get ParsonsHosting Security?

ParsonsHosting Security downloads are for logged-in ParsonsHosting clients. Log in, download the zip, and upload it under Plugins, Add New, Upload Plugin. After that, updates arrive in your WordPress dashboard. You can also ask us to install it by opening a ticket.

What does ParsonsHosting Security cost?

ParsonsHosting Security is free for any ParsonsHosting client running WordPress on our servers. It only works on ParsonsHosting servers.

Related

Related

WordPress hosting · Managed websites · Free website migration · Security articles · WordPress security releases, fall 2026 · Getting support