A mirror for the attacker: whoever falls into a trap sees fake screens instead of the real site.
What it does
- A fake login, dashboard and database tools
- Behind the fake screen there is no database, no accounts, no files — nothing is executed
- Recordings of attempts: what the attacker typed and tried to upload — no passwords in plain text
- View and export recordings, end the mirror for a chosen address
- Logged-in users, trusted addresses and search engines never end up in the mirror
- The basic traps are in Stronghold WP itself; the add-on adds the mirror and recordings
Specification
| Version | 1.0.6 |
|---|---|
| Requires | WordPress 6.4+ · PHP 8.1+ · Stronghold WP 1.14.0+ |
| Server | no special requirements; with page caching or Cloudflare — confirm the settings |
| Who changes the settings | technical caretaker |
| External connections | none |
| Data | recordings of attempts (with IP address and browser) kept for 30 days in the WordPress database |
| Dashboard languages | Polish, Ukrainian, English |
| Updates | together with Stronghold WP, from the update channel |