by
Alex
5 (8 reviews)
Atlant Security
Enterprise-grade WordPress security: WAF, brute force protection, malware scanner, 2FA, honeypots, AI crawler control, and post-breach recovery.
Atlant Security ranks #7,629 among WordPress.org plugins with 700+ active installations, is #501 of 5,058 in the Security category, a 5/5 rating from 8 reviews, and was last updated Oct 26, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Compatible with WP 7.1.4
v1.1.38
Current Version v1.1.38
Updated 6 days ago
Last Update on 26 Oct, 2026
Refreshed 2 days ago
Last Refreshed on
#501 of 5,058 in Security
Top 10% by installs
Downloads -54.3% this week
Actively maintained
Rank
#7,629
—
No change
Active Installs
700+
+40%
KW Avg Position
25
0.2 worse
Downloads
8.6K
+10 today
Support Resolved
100%
—
No change
Rating
100%
Review 5 out of 5
5
(8 reviews)
Next Milestone 800
700+
800+
38
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 5 more installs to reach 800+
Rank Changes
Current
#7,629
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
5.0
8 reviews
Overall
100%
5
8
(100%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Support Threads Overview
Resolved
Unresolved
6
Total Threads
6
Resolved
0
Unresolved
100%
Resolution Rate
Security History
Source: WPVulnerabilityNo known vulnerabilities on record for Atlant Security. Checked 2 months ago.
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.1.38
- Last Updated
- Oct 26, 2026
- Requires WP
- 6.0+
- Tested Up To
- 7.1.4
- PHP Version
- 8.0 or higher
- Author
- Alex
Support & Rating
- Rating
- ★ ★ ★ ★ ★ 5
- Reviews
- 8
- Support Threads
- 6
- Resolved
- 100%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
6K+ installs
#2,757
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#1,015
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#8
Wordfence Security – Firewall, Malware Scan, and Login Security
5M+ installs
#11
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
3M+ installs
#18
Hostinger Tools
3M+ installs
#20
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
WP Super Cache
1M+ installs
#36
TL;DR
AI summary of the plugin's readmeAtlant Security is for WordPress site owners and administrators who want consolidated site protection instead of running several separate security plugins. It addresses common attack vectors like brute force logins, malware injection, SSRF, and bot/crawler abuse through a layered set of firewall, scanning, authentication, and recovery tools.
- Web Application Firewall (WAF)
- Brute force protection
- Malware scanner for files and database
- Two-factor authentication (2FA)
- Honeypot traps
- AI crawler management
- Post-breach recovery toolkit
- Security headers management
Frequently Asked Questions
Common questions about Atlant Security
Type in the search box at the top of the plugin menu, or press "/" on any plugin page. It searches every setting, panel and page as you type; choose a result to jump to it, and the setting is highlighted. I locked myself out Add define( 'ASWP_SAFE_MODE', true ); to wp-config.php: it pauses every blocking feature while keeping the admin area available. If another administrator can still log in, they can lift your lockout under Login Security > Brute Force Attempt Monitor (Unlock) or remove your IP from the IP Block List. As a last resort, rename the folder wp-content/plugins/atlant-security over FTP (for example to atlant-security-off), log in, rename it back, and whitelist your IP. The firewall is blocking my page builder (Elementor, Divi) Switch the WAF to Log Only, repeat what was blocked, then check Top Triggered on the WAF page, or look for "WAF log only" in the Visitor Log, to see which rule matched. Page builders can trigger false positives with the encoded content in their save requests. Logged-in administrators are not inspected on admin pages. Users keep getting logged out unexpectedly This happens when Session Binding is set to bind to the IP address, which is off by default because mobile networks, VPNs and IPv6 change addresses constantly. Go to Session Security and turn off "Bind to IP Address", keeping User-Agent binding on. "Exempt Administrators" lifts every session restriction for administrators.
No. Each kind of alert is sent at most once per 15 minutes, and login lockouts, firewall auto-blocks and honeypot bans at most once per 6 hours; repeats in between are counted and reported in the next alert or a summary. Choose the minimum severity on the Notifications page, which lists every event that can send an alert. Email alerts are not arriving Click Send test next to the address on the Notifications page: it waits for the answer and shows the mail server's own error, if there is one. WordPress sends mail with PHP's mail() by default, which many hosts block; an SMTP plugin such as WP Mail SMTP or FluentSMTP routes it through a proper mail provider.
Yes, with an application password. Those tools cannot ask for a code, so accounts with 2FA must use an application password (Users > Profile > Application Passwords) for XML-RPC and other API logins. Accounts without 2FA are unaffected. The Hardening page says PHP still runs in the uploads folder The plugin writes the blocking rule into wp-content/uploads/.htaccess and then tests it. If PHP still runs, the server ignores .htaccess there: nginx and IIS never read it, and Apache can be set not to. The Hardening page shows the rule for your host to add to the server configuration, and Re-check tests again. Cron Guard flagged a scheduled task Cron Guard compares the scheduled tasks with the snapshot taken when it started and flags new or very frequent ones. If you recognise the task (a plugin you just installed, for example), click Approve; if you do not, remove it and run a malware scan. Tasks scheduled by WordPress core and by Atlant Security itself are never flagged.
No. The firewall runs once per request at init priority 0 against a fixed rule set, the rate limiter uses APCu when available, and the visitor log is one lightweight INSERT per request. The malware scan is running slowly Lower "Files per Batch" to 20 or 30 on shared hosting. The scanner works in batches to avoid timeouts and keeps running in the background if you leave the page. Files larger than 5 MB are skipped.
Three ways: trap URLs are listed as Disallow rules in robots.txt, hidden links carry rel="nofollow", and 30 known search engine, social media and uptime-monitoring bots are recognised by their user agent and receive a 404 instead of a ban. AI crawlers you have allowed are protected too.
Yes. Activation, deactivation and uninstall cover every subsite, and each site has its own settings and logs. Session lists are limited to each site's own users, and network super admins are never listed to site administrators.
Nothing is deleted on deactivation. When you delete the plugin, a dialog asks whether to keep or remove all its data; you can also set this under Settings > Delete data on uninstall.
