ProductsWordPress Guard

Every WordPress site, patched and protected.

WordPress Guard is a plugin that keeps your themes and plugins up to date, stops password guessing on your login page and puts files back if someone tampers with them. One dashboard covers every site you run.

Start for freeTalk to an expert
client-bakery.ch Guarded by BurstLayer
Plugins2 security fixes
  • EElementor3.21.4 → 3.21.5Security fix
  • WWooCommerce9.1.2Up to date
  • CContact Form 75.9.3 → 5.9.8Security fix
  • YYoast SEO23.1Up to date
  • SSlider Pro4.8.2No longer maintained

Everything a WordPress site needs to stay safe.

Install one plugin and the usual worries are handled.

Safe automatic updates

Plugins and themes with security fixes are updated for you, after the update has been checked on a copy of your site.

Login protection

Repeated failed logins are blocked, and admins are asked to turn on two-step sign-in.

Tampered files restored

WordPress's own files are compared with the originals. Anything an attacker changed is put back.

Malware removed

Hidden code injected into your pages or database is found and cleaned, with a backup taken first.

All your sites in one place

Freelancers, agencies and hosts can see and manage every client site from one dashboard.

Ready for online shops

WooCommerce checkout pages get extra protection against fake orders and stolen-card testing.

One dashboard for every site you look after.

Add sites with the plugin or by connecting your hosting account. Each site shows its health, waiting updates and recent attacks, so you know which one needs you today.

  • Update plugins across many sites at once
  • Monthly reports you can send to clients
  • Works with any host
Your WordPress sites18 sites

15

Healthy

2

Need you

1

Being attacked

  • client-bakery.chPatched this morningHealthy
  • studio-nord.deWaiting for approval2 updates
  • shop.example.comLogin flood, being blockedUnder attack
  • portfolio.example.orgNothing to doHealthy
  • law-firm.example.netMalware scan cleanHealthy

Your login page, no longer an open target.

Bots try common passwords on WordPress login pages all day long. WordPress Guard slows them down, then blocks them, and shares their addresses with every other site you protect.

  • Two-step sign-in for admins
  • Block logins from countries you choose
  • Move the login page away from its default address
Login page · todayProtected

Failed logins blocked

911

Real admins signed in

3

  • Two-step sign-in for admins4 of 5 turned on
  • Addresses blocked on all your sites37
  • Last admin loginAnna, 08:12, Zurich
Remind the fifth admin

Set up in a few minutes.

  1. 01

    Install the plugin

    Find BurstLayer in the WordPress plugin directory, or upload it, then sign in.

  2. 02

    Get a health check

    Within a minute you see outdated plugins, weak settings and anything that looks tampered with.

  3. 03

    Let it look after the site

    Choose what may be updated automatically. Everything else waits for your approval.

Prefer the command line?

WordPress Guard can be installed and connected with WP-CLI, which is handy when you look after many sites.

WP-CLI
$ wp plugin install burstlayer-guard --activate
Plugin installed successfully.
✓ connected to your BurstLayer workspace
✓ 2 plugins need security updates

Works with WordPress 6.0 or newer on any host.

The usual ways WordPress sites get hacked.

Blocked

Outdated plugins

Plugins with known weak spots that attackers can look up in public lists.

Blocked

Login guessing

Bots trying common passwords on your admin login, day and night.

Blocked

Harmful uploads

Files uploaded through a weak form that let an attacker run their own code on your site.

Blocked

Hidden spam links

Links slipped into your pages to push someone else's site up in search results.

Blocked

Stolen-card testing

Bots using your shop's checkout to see which stolen card numbers still work.

Blocked

Admin takeovers

New administrator accounts quietly created by an attacker.

For anyone who looks after more than one site.

Protect one blog or five hundred client sites from the same place.

Questions, answered.

What people usually ask before they turn on WordPress Guard.

Will automatic updates break my site?+

Updates are checked on a copy of your site first. If a page stops working after an update, the plugin is rolled back and you get a note explaining why.

Does it slow WordPress down?+

No. The heavy work happens on our servers, not inside your WordPress site.

Can I use it with other security plugins?+

Yes, but you won't need most of them. We point out any overlap during setup.

Does it work with managed WordPress hosting?+

Yes. It works with any host that lets you install plugins.

My site is already hacked. Can you help?+

Yes. Start with our emergency help page. We clean the site, close the hole the attacker used and set up protection so it doesn't happen again.

Works well with

Each product is useful on its own. Together they cover the whole path an attacker would take.

Give every WordPress site a guard.

Free for your first site. Install the plugin and get a health check in about a minute.

Start for freeTalk to an expert