Security

Ghost Protocol

Cloak WordPress fingerprints from HTML, headers, and JavaScript without breaking builders.

View Nexora Engine product page →

Ghost Protocol reduces automated WordPress fingerprinting by stripping generator tags, masking the window.wp namespace, and normalizing asset paths, while preserving editor and builder functionality for logged-in users.

What gets cloaked

  • X-Powered-By and generator meta tags
  • REST API discovery links in public HTML
  • window.wp namespace remapped for anonymous visitors
  • Predictable wp-content path patterns where safe
Nexora Engine Security screen showing the Stealth Score breakdown and hardening guards
The Security screen breaks down your Stealth Score, showing exactly which WordPress fingerprints are hidden, alongside the free hardening guards.

Free hardening guards

Beyond fingerprint stripping, the free tier ships active hardening you can toggle from the Security screen. These reduce the automated-attack surface without touching your theme or content.

  • Login rate limiting to blunt brute-force attempts
  • XML-RPC controls to close a common abuse vector
  • User enumeration blocks so author IDs stop leaking usernames
  • Generator and version stripping across HTML and headers

Pro feature

Full Stealth Proxy mode is available on Nexora Engine Pro. Free tier includes core fingerprint stripping and the hardening guards above.