CMS Security
WordPress Admin Access Check
Access to wp-admin must be restricted to prevent brute‑force attacks. Learn how to secure your WordPress site administration interface.
What this test checks
This test checks whether access to the WordPress administration interface (usually /wp-admin) is restricted. Public access can expose your site to brute‑force attacks, where scripts try thousands of password combinations to access your dashboard. Protecting this area is essential for your site security.
Our recommendation
Protect access to /wp-admin with strong authentication and limit login attempts. Use a security plugin (e.g., Wordfence, iThemes Security) to add extra protection. Enable two‑factor authentication (2FA) for administrator accounts and change the login URL (e.g., via WPS Hide Login) to reduce automated attacks.
Security tests
Read more
Server Configuration