Separate plugins that extend Stronghold WP. They update together with it.
What the add-ons do
Domain Watch
Watches for domains that look like yours. Such domains are used for impersonation (phishing).
- Detects new certificates and newly launched sites
- Spots your logo and password fields on other people’s sites
- Sends an e-mail alert
- Uses only publicly available information
Stronghold Kopie (backups)
Encrypted off-site backups of the database and files.
- Google Drive, OneDrive, FTP, S3 or WebDAV
- Scheduled backups, old ones removed automatically; an alert if a backup fails
- Your site encrypts the backups itself — nobody but you can read them
- You can restore a backup even without WordPress
Headquarters
The status of many sites on one screen — for organisations with branches and universities with faculties.
- Status lights, known vulnerabilities, backups and two-factor login
- 30-day history
- E-mail alert when a problem appears or a site goes silent
- Sites send signed reports themselves; Headquarters has no password to them — access only with the consent of the site’s technical caretaker
Traps
A mirror for intruders. Whoever falls into a trap sees fake screens instead of the real site.
- Fake login, dashboard and tools
- Records what they try — while they get nowhere near the database, accounts or files
- Basic traps are built into Stronghold WP; the add-on adds the mirror and attempt reports
Static site
Your site as plain HTML files — exactly as visitors see it.
- The server delivers it without PHP or a database
- WordPress and plugins can’t be attacked through the public site
- Refreshes itself after content changes
Vulnerability register
Search the databases of known WordPress vulnerabilities — and see at once which ones affect your site.
- Search by name, CVE number and severity
- Vulnerabilities attacked right now and those without a fix
- A plugin’s vulnerability history before you install it
Themes
Ten more dashboard looks besides Chess: Cards, Enigma, Polish Engineering, Dominoes, Go, University, Horses, Unicorn, Cats and Dogs.
- Own icons, a menu mark and a messenger in the Site status bar
- Three palettes and a distinct character for each look
- Theme editor with a palette in your colours
- The look is set for the whole site or by each account for itself
AI assistant
Suggests image descriptions for blind users and explains alerts in plain language.
- OpenAI, Claude, Gemini, Mistral (EU), Azure OpenAI, the Polish Bielik or a model on your own server
- Works only when you click, and records it in the activity log
- Requires WordPress 7.0
Security tipA backup nobody has restored is just a hope. Once a quarter, restore it on a test site. Then you know you’ll be back in the game after an attack.
Dashboard looks from the Themes add-on
The same Modules screen in eleven looks.










