Site Lockdown Security helps WordPress administrators, agencies, and support teams keep websites cleaner, safer, easier to audit, and better protected from unwanted file changes.
Site Lockdown Security combines file auditing, Site Lock protection, Watch Dog file change monitoring, WordPress core integrity checks, infection scanning, cleanup tools, setup guidance, email alerts, scheduled security reporting, and white label branding into one practical WordPress security suite.
Unlike most WordPress security plugins, Site Lockdown Security includes built-in
White Label Branding. Agencies, developers, and support providers can customize the plugin experience with their own brand colors, icons, banners, email imagery, and plugin presentation. White label settings can be exported and imported between sites, making this especially useful for teams managing multiple client websites.
Use Site Lockdown Security to review leftover plugin folders, abandoned theme files, old uploads, temporary files, suspicious scripts, modified files, unexpected core files, unsafe permissions, and other items that can create clutter or security risk.
Site Lockdown Security is designed for administrators who want clear visibility into what exists on the server and simple tools to help protect WordPress after the site is clean and stable.
Key Features
- Site Lock to make important WordPress files and folders read-only
- Watch Dog baseline scans for new, modified, and deleted files
- WordPress core integrity checks using official WordPress.org checksums
- Infection scanning for suspicious file content
- Scheduled scans and automated security reports
- File change, core change, software health, risk review, infection scan, plugin update, and security digest email notifications
- Real email preview tools for individual alert types
- Unique White Label Branding options for agencies, developers, and support teams
- White Label import and export for moving branding settings between sites
- White Label reset to restore the default Site Lockdown theme
- Custom branding text, colors, icons, dark icons, banners, and email imagery
- Abandoned file and folder review tools
- File preview, download, approve, ignore, delete, and bulk actions
- Recommended setup guide with progress tracking
- Cleanup tools for old backups, temporary files, logs, cache files, and abandoned folders
- Plugin Refresher and Theme Refresher tools for reinstalling clean WordPress.org copies
- Permissions Check for important WordPress files and folders
- Software Health checks for outdated or potentially abandoned plugins and themes
- Risk Review checks for common local site risk signals
- Security tools for permissions, XML-RPC, author scans, debug exposure, blacklist status, SSL information, and more
- Branded admin interface with responsive AJAX navigation
Site Lock
Site Lock helps prevent unwanted file additions, injected scripts, unauthorized edits, and accidental deletions by locking selected WordPress files and folders.
You can unlock the site when legitimate updates or maintenance are needed, then apply Site Lock again when finished.
Site Lock is useful after a site has been cleaned, audited, updated, or stabilized and you want to reduce the chance of future unexpected file changes.
Watch Dog
Watch Dog creates a trusted baseline of your site files and compares future scans against that baseline.
It reports new, modified, and deleted files so administrators can quickly review changes after updates, maintenance, cleanup work, or suspicious activity.
Watch Dog includes file change monitoring, baseline rebuilding, review actions, scheduled scans, and email alerts when changes are detected.
Watch Dog Baseline Storage
Watch Dog stores protected baseline data under:
wp-content/uploads/site-lock/watch-dog/
This keeps baseline data outside the plugin folder so it is not removed during plugin updates.
Sites updating from older versions automatically migrate Watch Dog baseline storage from the previous location:
wp-content/uploads/guard-dog/watch-dog/
After a successful migration, the old storage folder is safely removed and the new Watch Dog storage path remains excluded from Site Lock so baseline files can continue to be updated when needed.
Core Check
Core Check compares installed WordPress core files against the official
WordPress.org checksum API.
It reports modified, missing, unreadable, or unexpected files in WordPress core areas so administrators can review potential core file integrity problems.
Infection Scanner
The infection scanner reviews site files for suspicious patterns commonly associated with malware, backdoors, obfuscated scripts, spam injections, and unwanted code.
Scans can be run manually or scheduled, and results can be included in reports and notifications.
Email Notifications
Site Lockdown Security includes configurable email alerts for important security events and scheduled checks.
Supported notification types include:
- Plugin Update Notification
- Security Snapshot Digest
- Scheduled Infection Scan
- Automated Security Report
- File Change Notification
- Core Change Notification
- Software Health Alert
- Risk Review Alert
Each individual alert includes a preview option so administrators can review the email layout before using it.
The global email notification settings form allows administrators to set the default frequency and recipient email for alerts in one place.
White Label Branding
White Label Branding is one of the standout features of Site Lockdown Security and is not commonly found in WordPress security plugins.
Agencies, developers, maintenance providers, and support teams can customize the security plugin experience so it better matches their own brand or client-facing service.
Administrators can customize branding text, colors, icons, dark icons, banners, and email imagery.
White Label settings can be exported to a JSON file and imported on another site, making it easier to reuse the same branding across multiple installations.
The Reset Settings option restores the default Site Lockdown theme and brings back the default support contact button when branding is returned to its original values.
Plugin Refresher
Plugin Refresher helps reinstall fresh copies of
WordPress.org plugins.
This can be useful when a plugin may have been modified, corrupted, or affected by suspicious files.
Site Lockdown Security uses native WordPress upgrade handling for safer refresh workflows and supports both individual and bulk plugin refreshes.
Theme Refresher
Theme Refresher helps reinstall fresh copies of
WordPress.org themes.
It includes version information, update status,
WordPress.org availability detection, and support for individual or bulk theme refresh workflows.
Permissions Check
Permissions Check reviews important WordPress files and folders and compares current permissions against recommended values.
It helps identify writable files, risky permissions, and items that may need attention.
When Site Lock protects a file or folder, permissions results account for that protected status.
Software Health
Software Health checks installed plugins and themes for maintenance signals that may indicate abandoned or outdated software.
It helps administrators identify items that may need updates, replacement, removal, or closer review.
Risk Review
Risk Review checks local site risk signals and common security configuration concerns.
It includes severity sorting, ignore/include controls, scheduled checks, and optional email alerts.
Setup Guide
The Setup Guide helps administrators complete recommended Site Lockdown Security settings.
Setup items include Site Lock, scheduled infection scans, automated reports, file change baselines, file change notifications, core change notifications, software health alerts, and risk review alerts.
Progress tracking helps administrators see which recommended protection steps are complete.