I was a bit skeptical when I first saw this plugin because it seemed to do too much–there had to be a catch (eg: adware, upsells, etc.) but lo and behold it has replaced an entire stack of one-off plugins that I’d been previously running for security.

I love that so many of these common-sense options (move login page URL, remove clues for scanners, brute-force protection) “just work” out-of-the-box.