PHPackages                             dashifen/anti-brute-squad - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. dashifen/anti-brute-squad

ActiveWordpress-muplugin[Security](/categories/security)

dashifen/anti-brute-squad
=========================

A WordPress MU plugin that prevents brute force attacks by limiting the number of failed login attempts during a browser session.

3.1.1(1y ago)075MITPHPPHP >=8.2

Since Apr 3Pushed 1y ago1 watchersCompare

[ Source](https://github.com/dashifen/wp-mu-plugin-anti-brute-squad)[ Packagist](https://packagist.org/packages/dashifen/anti-brute-squad)[ RSS](/packages/dashifen-anti-brute-squad/feed)WikiDiscussions main Synced 2d ago

READMEChangelog (2)Dependencies (1)Versions (17)Used By (0)

Anti Brute Squad
================

[](#anti-brute-squad)

Anti-Brute Squad is a very straightforward way to block access to your WordPress Dashboard after a certain number of failed login attempts. By default, that number is five, but you can change it with a filter (see below).

It's setup to become a composer dependency, but if that's not your way of handling WordPress plugins, feel free to simply copy the logic out of the `src/AntiBruteSquad.php` file. If you do use composer, then as long as you are using both the `composer/installers` and `lkwdwrd/wp-muplugin-loader`packages, Anti-Brute Squad should load up as an MU plugin.

As written, this plugin requires at least PHP 8.2. It has been tested up to PHP 8.4.

Filters
-------

[](#filters)

1. `anti-brute-squad-login-limit` - changes the number of failed login attempts a visitor has before they're locked out. The default is five.
2. `anti-brute-squad-access-blocked-message` - the default message that appears on-screen accompanying an HTTP 401 Unauthorized header when a visitor exceeds that limit. The default is "You are not authorized to access this site." This can also be changed via the WordPress internationalization capabilities if it's easier for you to do so.

###  Health Score

38

—

LowBetter than 85% of packages

Maintenance44

Moderate activity, may be stable

Popularity9

Limited adoption so far

Community7

Small or concentrated contributor base

Maturity77

Established project with proven stability

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~119 days

Recently: every ~415 days

Total

16

Last Release

442d ago

Major Versions

1.3.0 → 2.0.02020-07-31

2.0.1 → 3.0.02021-10-08

PHP version history (3 changes)1.3.0PHP >=7.1

2.0.0PHP >=7.4

3.1.0PHP >=8.2

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/8269?v=4)[David Dashifen Kees](/maintainers/dashifen)[@dashifen](https://github.com/dashifen)

---

Top Contributors

[![dashifen](https://avatars.githubusercontent.com/u/8269?v=4)](https://github.com/dashifen "dashifen (20 commits)")

### Embed Badge

![Health badge](/badges/dashifen-anti-brute-squad/health.svg)

```
[![Health](https://phpackages.com/badges/dashifen-anti-brute-squad/health.svg)](https://phpackages.com/packages/dashifen-anti-brute-squad)
```

###  Alternatives

[defuse/php-encryption

Secure PHP Encryption Library

3.9k162.4M214](/packages/defuse-php-encryption)[roave/security-advisories

Prevents installation of composer packages with known security vulnerabilities: no API, simply require it

2.9k97.3M6.4k](/packages/roave-security-advisories)[mews/purifier

Laravel 5/6/7/8/9/10 HtmlPurifier Package

2.0k16.7M113](/packages/mews-purifier)[robrichards/xmlseclibs

A PHP library for XML Security

41278.1M118](/packages/robrichards-xmlseclibs)[bjeavons/zxcvbn-php

Realistic password strength estimation PHP library based on Zxcvbn JS

86917.5M63](/packages/bjeavons-zxcvbn-php)[enlightn/security-checker

A PHP dependency vulnerabilities scanner based on the Security Advisories Database.

33732.2M110](/packages/enlightn-security-checker)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)