by ghostables
0 (0 reviews)
Ghostables Defender Lite
Active security for WordPress: vulnerability scanning, file integrity, hardening checklist, two-factor authentication, and a tamper-evident audit log.
Compatible with WP 7.0.2
v0.1.6
Current Version v0.1.6
Updated 3 weeks ago
Last Update on 24 Jun, 2026
Refreshed 8 hours ago
Last Refreshed on
Rank
#62,827
—
No change
Active Installs
0+
—
No change
KW Avg Position
130.3
+0.5 better
Downloads
97
+1 today
Support Resolved
0%
—
No change
Rating
0%
Review 0 out of 5
0
(0 reviews)
Next Milestone 10
0+
10+
23,134
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 10 more installs to reach 10+
Rank Changes
Current
#62,827
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
0.0
0 reviews
Overall
0%
5
0
(0%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Tracked Keywords
Showing 4 of 4| Keyword | Position | Change | Type | Updated |
|---|---|---|---|---|
| vulnerability scanner | 85 | — | Tag | 2 days ago |
| two factor authentication | 137 | — | Tag | 2 days ago |
| File Integrity | 142 | — | Tag | 2 days ago |
| hardening | 157 | — | Tag | 2 days ago |
Unlock Keyword Analytics
Track keyword rankings, search positions, and discover new ranking opportunities with a Pro subscription.
- Full keyword position tracking
- Historical ranking data
- Competitor keyword analysis
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 0.1.6
- Last Updated
- Jun 24, 2026
- Requires WP
- 6.0+
- Tested Up To
- 7.0.2
- PHP Version
- 7.4 or higher
- Author
- ghostables
Support & Rating
- Rating
- ☆ ☆ ☆ ☆ ☆ 0
- Reviews
- 0
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
7K+ installs
#2,737
Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits
30K+ installs
#990
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#7
Wordfence Security - Firewall, Malware Scan, and Login Security
5M+ installs
#11
Frequently Asked Questions
Common questions about Ghostables Defender Lite
Lite calls one external service: the public WordPress Vulnerability Database at wpvulnerability.net, to look up disclosed vulnerabilities for each installed plugin, theme, and your WordPress core version. No API key, no site URL, no admin email — only the slug being queried and a User-Agent identifying the plugin version. Each lookup is cached locally for 24 hours. See the "External services" section above for the full disclosure. The two-factor QR code is rendered locally in your browser; the TOTP secret never leaves your WordPress install.
The scans run on cron (twice-daily CVE check, daily integrity scan). Runtime hardening is a handful of cheap filter hooks. No page-load impact you'll measure.
The hardening checklist tells you what each fix does before you click it. Every one-click fix is reversible by editing wp-config.php or unchecking the option. Defaults are conservative — nothing is enforced site-wide on first install except the Operator gate, which only restricts Defender's own settings.
Technically yes, but running multiple security plugins is usually counterproductive — they fight over the same hooks. Run one, run it well.
Each row's row_hash is an HMAC-SHA-256 over the previous row's hash plus the row's own fields, keyed with a 32-byte chain key. The chain key is either (a) the GDEF_LITE_AUDIT_KEY constant in your wp-config.php, or (b) auto-generated and stored as a WordPress option on first use. An attacker with database write access can delete or modify a row, but cannot quietly recompute the following row's HMAC without the key — so the next row's stored hash will no longer match, and the break is visible from Settings → Operator → Chain status. For the strongest guarantee, set GDEF_LITE_AUDIT_KEY in wp-config.php so the key never lives in the database alongside the rows it signs.
It's distributed from ghostables.io. Install it alongside Defender Lite and Lite steps aside automatically; every setting you've configured here carries over. You never need it to keep using Defender Lite, which is free and fully functional on its own.
Uninstalling (not just deactivating) drops Defender's three tables and clears its options. Your audit log goes with it. This is intentional — uninstall means uninstall.