Free + Pro
WordPress login protection
Choose built-in keyless checks or an external human check for the native WordPress login form. Pro adds limits on repeated sign-in attempts and a detailed record of individual decisions.
Loading…
Loading…
Gate House Free & Pro · WordPress security
Gate House Free helps reduce automated spam on native WordPress login, registration, password-reset and comment forms. Start with built-in keyless checks or connect your own CAPTCHA provider. Pro adds configurable attempt limits, account-abuse checks, contact-form integrations and detailed activity.
What Free includes · What Pro adds
Free lets you choose checks for each supported native form, so a busy comment section and an administrator sign-in can use different settings. Add Pro when you need limits on repeated attempts or support for Contact Form 7 and WPForms. Neither edition requires WooCommerce for these WordPress checks.
Choose built-in keyless checks or an external human check for the native WordPress login form. Pro adds limits on repeated sign-in attempts and a detailed record of individual decisions.
Check native WordPress sign-ups with the built-in keyless option or your connected CAPTCHA provider. Pro adds attempt limits, suspicious-account patterns and disposable-email screening.
Add a keyless or external human check to native password-reset requests. Pro can also limit how often someone submits repeated requests.
Check supported comment submissions before they go through. Choose Invisible or Human check independently from your login settings. These checks help reduce automated submissions; they do not classify comment content.
Add checks to Contact Form 7 and WPForms submissions when those plugins are active. Pro brings these forms into the same protection settings and detailed activity view.
Choose Light, Balanced, Strict or custom attempt limits. Add visitor rules and account-abuse checks, then review individual decisions in local Activity when you need to investigate.
Free form checks · Pro abuse controls
Start with form checks in Free. Pro adds controls for repeated attempts and account patterns that a passed challenge can miss.
Built-in keyless checks combine a signed form proof, a honeypot and a minimum submission time on your own server. For an external human check, connect one supported provider: Turnstile, reCAPTCHA or hCaptcha. Both options are included in Free. Pro also offers automatic fallback to keyless checks during provider outages.
Set limits for repeated requests on supported forms. Light, Balanced, Strict and custom limits let you adjust thresholds separately from your form checks. Use Pro’s detailed Activity to review traffic before deciding how strict the limits should be.
Account-abuse checks look for combinations of profile signals and repeated identities on supported sign-ups. An unusual name or a missing field alone does not establish abuse. A passed CAPTCHA cannot override an account-abuse block. Pro also adds disposable-email screening, with observation and enforcement choices you control.
WordPress security checklist
Begin on a staging copy and keep an administrator session open while testing sign-in.
Follow the full installation guide →Install Gate House Free from WordPress.org. List the login, registration, reset and comment forms visitors use, then check Coverage. Identify custom or membership-plugin forms that need separate assessment.
Select Invisible for built-in keyless checks. To use Human check, connect your preferred provider, save the matching site and secret keys and pass the connection test. Choose which supported forms should use each option.
For attempt limits, account-abuse controls, Contact Form 7 or WPForms, install the matching Pro add-on and keep Free active. Review advanced signals in Pro’s Activity before deciding what to enforce.
Try sign-in from a private window, create a test account and submit the reset, comment and supported contact forms you use. Confirm that visitors can finish legitimate submissions and rejected requests show a useful message.
After a theme, form or protection-setting change, revisit Coverage and repeat affected journeys. Free provides provider diagnostics and blocked-attempt totals; Pro adds detailed Activity and the Protection Test to help investigate.
Before you install
Understand the checks, the limits and what to test on your own site.
Get help with your setupYes. Free protects supported native WordPress login, registration, password-reset and comment forms without WooCommerce or Pro. It needs no Gate House account or license, has no trial period and receives updates through WordPress.org.
Pro adds configurable attempt limits, visitor rules, account-abuse and disposable-email checks, detailed Activity, the Protection Test and Contact Form 7 and WPForms integration. Install the matching Pro add-on from your account and keep Free active alongside it. Compare Free and Pro for the full list.
No. Built-in keyless checks in both editions need no provider account or keys. For external human checks, connect Cloudflare Turnstile, Google reCAPTCHA v2 checkbox or v3, or standard hCaptcha, pass the provider connection test and select the forms you want to protect. Pro’s local abuse controls also work without CAPTCHA keys.
No. Gate House focuses on bot and account abuse at supported forms. It does not scan files for malware or provide a web application firewall. Maintain your software, backups, access controls and hosting protections alongside it. See the official WordPress hardening guide for broader security practices.
In Free, choose Off, Invisible or Human check for each supported form. Invisible uses the built-in keyless checks; Human check uses your connected and tested provider. Saving provider keys alone does not turn on form checks. Pro adds separate choices for attempt limits and abuse controls, including observation before enforcement.
Free shows aggregate blocked-attempt totals, coverage and provider diagnostics. Pro adds detailed local Activity with individual decisions and reasons, including a way to mark suspected false positives. Neither edition records passwords or raw challenge tokens in its logs.
Both editions include a provider connection test and coverage information that separates enabled forms from successful-use observations. Pro adds Run Protection Test diagnostic probes for supported guards, rendering and counters. These checks do not replace trying successful and rejected submissions on the actual forms your visitors use.
Native WordPress checks require WordPress 7.1+ and PHP 8.1+. Contact Form 7 and WPForms need Pro. A custom login form or membership plugin may use a different submission path, so test your own forms after setup or theme changes. See the compatibility guide for supported forms.
Both editions support temporary recovery through trusted server access. Ask your host or site administrator to help restore access, correct the settings and test sign-in. Contact us if you need help with your setup.
Protect supported forms with Free. Add Pro for advanced abuse controls and detailed activity, with updates and email support while your license is active.