Change WordPress paths with Ghost Mode

WP Ghost changes and secures common WordPress, add-on, and theme paths, including /wp-admin, /wp-login.php, /wp-content, and /wp-includes. These changes can reduce the visible paths that automated scanners probe. Premium adds Ghost Mode, a maximum-security preset that changes all paths, hides file extensions, and enables all hiding settings in one click.

Frontend paths change by default. To include administrative paths, add define('HMW_ALWAYS_CHANGE_PATHS', true); to wp-config.php, then save the WP Ghost settings again. Path changes do not replace updates, authentication, or backups.

Review local checks and AI explanations

The Security Check runs independently and provides a score from 0 to 100, prioritized findings, severity bands, and task details. AI Security Explanations turn those findings into a plain-language summary, an action for each finding, and details about why it matters for your configuration. They require a connected WP Ghost account with an active subscription and use a monthly allowance of checks.

An AI explanation request sends the Security Check findings and six setup details: server type, configuration-file writability, rewrite-rule presence, cache-plugin presence, security mode, and mapped-file count. It excludes page content, user entries, passwords, and database rows.

Block repeat threats and review activity

IP Block Automation can block addresses that trigger repeated security threats. Email alerts report brute-force attempts or suspicious activity so you can follow events as they occur.

• Security Threats Log: Review unlimited entries with filters for threat type, status, country, and time range, plus full-text search, pagination, and CSV export.
• User Events Log: Review unlimited user-event entries with search, pagination, and CSV export.
• Cloud Event Storage: Keep events for 30 days for audit history and incident reports.
• Security score: Track a score from 0 to 100 based on completed security tasks and enabled features.

Choose AI crawler controls

AI Copyright Protection blocks more than 30 AI training crawlers at the firewall and adds Disallow rules to robots.txt. The list includes GPTBot, ClaudeBot, PerplexityBot, CCBot, and Bytespider, and is updated with plugin releases. The supplied product details describe these rules as separate from regular Google, Bing, and Yahoo search visibility. PerplexityBot also works with AI search discovery, so blocking it can limit visibility in that service.

Install and configure

Install and activate WP Ghost Premium in WordPress, review the security settings, and enable the hardening features appropriate for your website. Use Overview and Security Check to review the score, findings, and prioritized tasks. Check that your pages and assets still load after changing paths, since server rewrite rules and cached files can affect them.