Security hardening
Login protection, firewall, secure configuration – we make your site a tough nut for attackers.
Learn more →Solid Security Help: Login Protection & Hardening Setup
Solid Security (formerly iThemes Security) bundles login protection, two-factor authentication, brute-force defence and over 30 hardening measures. We set the plugin up cleanly without locking you out and harden your WordPress install in a targeted way. Remote, GDPR-compliant, from €79/h.
What's included
- Brute-force protection dosed – no self-lockout
- 2FA for all admins incl. saved backup codes
- Hidden login with documented URL
- 30+ hardening points: XML-RPC, REST, file editor
- Trusted devices & IP whitelist for your team
Solid Security is powerful, but the many options quickly cause problems: the aggressive login lockout shuts you out, the "Away Mode" time window blocks legitimate admins at night, hidden login URLs get forgotten, or 2FA is enabled without the backup codes being saved. Even after the rename from iThemes to Solid Security, many settings carried over from old setups are outdated and no longer fit together.
We set Solid Security up so protection works without crippling you: brute-force and network brute-force protection sensibly dosed, two-factor for all admins including saved backup codes, hidden login with a documented URL, file change detection and the relevant hardening points (XML-RPC, REST API, file editor, user enumeration). We configure trusted devices and IP whitelisting so you and your team get in reliably. €79/h incl. VAT, free quote up front, no subscription.
WP Bit is the WordPress brand of NBit – Nagl Business IT, a WordPress specialist since 2016. We work fully remotely across Germany, GDPR-compliant and with no on-site visit. If you've just locked yourself out, our WhatsApp instant help is there for you. Clear configuration, documented access, secure login.
Matching services
Security Plugins (Wordfence & co.)
Set up Wordfence, Sucuri or Solid Security properly – firewall, login protection and malware scan without false alarms.
Learn more →How it works
- 1
Request
Tell us what you need — by form, email or phone.
- 2
Free quote
You get a free, no-obligation estimate before any larger work.
- 3
Implementation
We do the work — cleanly, securely and transparently.
- 4
Handover
You review the result; we hand over and stay available.
79 €
Transparent hourly rate (incl. VAT)
< 24h
Response time
8+
Years of WordPress experience
100%
Made in Germany
Frequently asked questions
Solid Security locked me out via login lockout – help?
We lift the lockout via the database or the server and tune the brute-force protection so legitimate logins are no longer blocked. Then we set up an IP whitelist for you so it won't happen again. €79/h incl. VAT.
Is Solid Security the same as iThemes Security?
Yes – iThemes Security was renamed to Solid Security (by SolidWP/StellarWP). The features are comparable, but the interface and some settings changed. We know both versions and migrate old configurations cleanly.
Can I enforce two-factor authentication with Solid Security?
Yes, and we recommend it for all admin and editor accounts. We enable 2FA per role, save the backup codes and set up app-based codes (TOTP) so nobody gets locked out if a device is lost.
Which Solid Security hardening options really matter?
The most important are: disable the file editor, secure XML-RPC, block user enumeration, block PHP execution in uploads and enable file change detection. We set exactly the ones that fit your site without breaking functions.
Need reliable WordPress help?
WP Bitty
WordPress assistant
AI assistant — may make mistakes. Not legally binding.