# WP Masquerade > WP Masquerade is a WordPress security plugin (free version and Pro licences) that hides WordPress from scanners and bots: the site reports another CMS, the login page moves, XML-RPC is blocked and vulnerability probes are trapped. Pro adds file URL aliases, two-factor authentication, security headers, integrity checks, vulnerability alerts and an activity log. --- Source: https://www.wp-masquerade.com/ Updated: 2026-11-06T13:42:50+00:00 Free version, Pro from €59 excl. tax per year ## WordPress *security plugin* **Hide WordPress, close the doors bots target.** WP Masquerade makes your site look like Joomla!, Drupal or PrestaShop to detection tools, moves the login page, blocks XML-RPC and spots bots probing for vulnerabilities. With Pro, you are alerted when a plugin becomes vulnerable, when a core file changes or when an administrator signs in from a new device, and you follow the updates of all your sites from your member area. Your visitors still see exactly the same site. [Download for free](https://www.wp-masquerade.com/download/) [See Pro pricing](https://www.wp-masquerade.com/pricing/) - Free version with no time limit - Every setting tested before it goes live - Admin available in 7 languages *Illustration of the interface with sample data (some features require Pro).* - Imitates another CMS - Login page moved - Two-factor authentication - Bot traps - Integrity check Features ### Fewer clues for bots. Fewer open doors. Each module is configured on its own, with choices explained in plain language and a label: “No risk”, “Test first” or “May break links”. #### [Imitate another CMS](https://www.wp-masquerade.com/features/cms-imitation/) Joomla!, Drupal, PrestaShop, TYPO3 or MediaWiki in the free version; 41 profiles and Wappalyzer markers with Pro. Free + Pro #### [Custom login page](https://www.wp-masquerade.com/features/custom-login-page/) A login URL of your own, tested before it goes live, with wp-login.php and wp-admin returning 404. With Pro: limited attempts and two-factor authentication. Free + Pro #### [Hardening](https://www.wp-masquerade.com/features/hardening/) Pingbacks and XML-RPC blocked; with Pro, the author list is hidden (/?author=, REST API, sitemap). Free + Pro #### [Bot traps](https://www.wp-masquerade.com/features/bot-traps/) Bots looking for /.env or /phpmyadmin get counted; with Pro, persistent ones get banned. Free + Pro #### [File URLs](https://www.wp-masquerade.com/features/file-url-aliases/) /wp-content/ becomes /assets/ or any name you choose, with each alias verified from your browser. Pro #### [Two-factor authentication](https://www.wp-masquerade.com/features/two-factor-authentication/) A 6-digit code after the password, backup codes, and enforcement by role. Pro #### [Security headers](https://www.wp-masquerade.com/features/security-headers/) X-Frame-Options, Referrer-Policy, Permissions-Policy; basic CSP and HSTS as options. Pro #### [Integrity and email alerts](https://www.wp-masquerade.com/features/email-alerts/) WordPress core checked daily against the official checksums, weekly report, new-device alert. Pro [All features](https://www.wp-masquerade.com/features/) What a bot sees ### From an obvious WordPress site to one that covers its tracks Before attacking, a bot checks whether it’s dealing with WordPress and which of its doors are open. WP Masquerade removes those clues. #### WordPress out of the box - `/wp-login.php` password guessing - `/xmlrpc.php` bulk login attempts - `/?author=1` usernames exposed - `/wp-content/plugins/` plugins identified A “WordPress” generator tag, telltale paths, the author list: these public clues are how targets get sorted. Configured and verified #### With WP Masquerade https://your-site.com/**my-login** - The site reports Joomla!, Drupal or PrestaShop - wp-login.php and xmlrpc.php return 404 - /administrator/ or /.env: the visit is trapped and counted - With Pro: /wp-content/ renamed, authors hidden WP Masquerade is not a firewall or an antivirus, and no tool can make a site undetectable. It reduces what bots learn about your site. Updates, backups and strong passwords are still essential. [What the plugin doesn’t do](https://www.wp-masquerade.com/faq/#limites) Active monitoring ### Monitor, get alerted, take action A hack rarely starts without warning signs: a plugin that becomes vulnerable, password guessing, a modified file. WP Masquerade Pro shows you these signs every day, without you having to open each dashboard. #### Monitor - Every day, plugins, themes and WordPress version checked against known vulnerabilities - Every day, core files compared with the official wordpress.org checksums - Log of trapped bots and of administrator actions - Update status of all your sites in your member area #### Get alerted - Email when a published vulnerability affects a plugin, a theme or WordPress - Email when a core file is modified, missing or unknown - Email when an administrator signs in from a new device - Security report every Monday, plus an optional summary of the sites to update #### Take action - Every vulnerability explained in plain language, with the version that fixes it - Persistent bots banned automatically, login attempts limited - Two-factor authentication required per role - Sites that need attention listed first in the member area WP Masquerade reduces your site’s exposure and warns you early. It is neither an antivirus that cleans infected files nor a web application firewall: keep off-server backups and pair it with those tools if needed. [How day-to-day monitoring works](https://www.wp-masquerade.com/features/#surveillance) Who is it for? ### One site, ten or a hundred: the same vigilance Whether you run your own site, your clients’ sites or an online store, every WordPress site is visited by bots looking for an open door. #### For site publishers Blog, media, business site: your audience and your search rankings are your capital. A hack can put a warning next to your site in Google. - Login moved and protected by a second factor - Alert as soon as an installed plugin becomes vulnerable [What Pro brings to publishers](https://www.wp-masquerade.com/features/#editeurs) #### For agencies Dozens of client sites, different plugins on each one: checking everything by hand every day is impossible. - All your sites and their update status in a single member area - 10-site, 100-site or unlimited licenses, exportable settings [What Pro brings to agencies](https://www.wp-masquerade.com/features/#agences) #### For businesses and online stores WooCommerce store, customer area, forms: an intrusion stops sales and may require you to notify your data protection authority within 72 hours. - Activity log: who did what, and when - Administrator accounts locked down, attempts limited [What Pro brings to businesses](https://www.wp-masquerade.com/features/#entreprises) Getting started ### Set up in minutes, without locking yourself out The Getting started tab walks you through it. Until a check has passed, nothing changes for your visitors. 1. ### Install Add WP Masquerade like any other plugin. The diagnostic detects your server and your cache. 2. ### Pick a mode Essential, Recommended or Maximum: one click configures every module, then you choose the software to imitate. 3. ### Test, then turn it on The new login URL is tested before it goes live; with Pro, so is every file alias. 4. ### Monitor Trapped bots, core integrity, email alerts. If anything goes wrong, one line in wp-config.php suspends everything. [Read the detailed setup guide](https://www.wp-masquerade.com/docs/) Free or Pro ### A free version that’s useful from day one Pro installs as a single plugin that includes the free version. Already using the free version? Keep it or delete it: your settings are kept. #### WP Masquerade Free Hide WordPress and close the most targeted doors. - WordPress mention removed, generator tag for Joomla!, Drupal, PrestaShop, TYPO3 or MediaWiki - Basic technical links removed (RSD, Windows Live Writer, shortlinks) - [Plugin HTML comments and generator tags removed (Yoast, Elementor, cache plugins...)](https://www.wp-masquerade.com/features/camouflaged-plugins/) - Custom login URL, wp-login.php and wp-admin hidden - Pingbacks and XML-RPC blocked - Traps: counts bots probing for vulnerabilities - Admin in 7 languages, purges common caches [Download](https://www.wp-masquerade.com/download/) #### WP Masquerade Pro Pro Everything else: full camouflage, locked-down logins, monitoring. - 41 imitation profiles and markers recognized by Wappalyzer - File URL aliases, hidden author list, unknown AJAX requests answered with 404 - Two-factor authentication and login attempt limiting - Security headers, WordPress core integrity check, email alerts - Automatic bot banning, log, fake admin pages - Signature feed, automatic updates and priority support [See pricing](https://www.wp-masquerade.com/pricing/) [Compare feature by feature](https://www.wp-masquerade.com/free-vs-pro/) New in Pro ### Better monitoring, calmer administration Features available now, included in every Pro license at no extra cost. #### [Updates of all your sites](https://www.wp-masquerade.com/my-account/) Every Pro site sends its update status to your member area each day: WordPress, plugins, themes, PHP version and known vulnerabilities. Sites that need attention come first. Pro #### [Vulnerable plugin alerts](https://www.wp-masquerade.com/features/vulnerable-plugin-alerts/) Every day, your plugins, themes and WordPress version are checked against known vulnerabilities: severity, explanation and the fix to apply. Pro #### [Administrator activity log](https://www.wp-masquerade.com/features/administrator-activity-log/) Logins, accounts, plugins, updates and sensitive settings: who did what, and when, with CSV export. Pro #### [Image hotlink protection](https://www.wp-masquerade.com/features/image-hotlink-protection/) See which sites display your images from your server and the bandwidth they use, then allow, block or protect. Pro Prevent or repair ### What a hacked site costs The cleanup bill is only part of the cost: you also need to find a specialist who is available, stop or slow down your business, win back Google’s trust and, sometimes, notify your data protection authority. | Item | Repairing after a hack | Preventing with WP Masquerade Pro | | --- | --- | --- | | Cleanup | Public offers that include cleanup: from 229 to 1,250 USD per year depending on the provider and response time (Sucuri, MalCare, Wordfence). | No cleanup included: Pro reduces exposure and alerts you early, from €59 per year excl. tax. | | Response time | Advertised response times between 1 and 30 hours depending on the plan, often bought in a hurry. | Daily checks and email alerts as soon as a problem is detected. | | Search rankings | “This site may be hacked” label in Google; review takes from a few days (malware) to several weeks (spam). | Fewer open doors: locked-down login, known vulnerabilities flagged with their fix. | | Personal data | Notification to the supervisory authority (CNIL in France) within 72 hours when there is a risk to people, and informing the people concerned when the risk is high (GDPR, Articles 33 and 34). | Administrator activity log: who did what, and when. | | Revenue | To be estimated: online revenue per day × days of disruption, plus the time spent by your team. | 1-site license at €59 per year excl. tax, less than €5 per month. | Public prices from the official pages of [Sucuri](https://sucuri.net/website-security-platform/signup/), [MalCare](https://www.malcare.com/pricing/) and [Wordfence](https://www.wordfence.com/products/pricing/); review times from [Search Console Help](https://support.google.com/webmasters/answer/6347750?hl=en); obligations under the [GDPR](https://eur-lex.europa.eu/eli/reg/2016/679/oj). These services do more than cleanup and can complement WP Masquerade, which does not clean an infected site. [Details, sources and an example calculation](https://www.wp-masquerade.com/pricing/#cout-piratage) Pricing ### A Pro license sized to your number of sites Every license includes the same Pro features; only the number of sites changes. The 10-site, 100-site and unlimited licenses are designed for agencies and businesses that run several sites. [Compare Free and Pro](https://www.wp-masquerade.com/free-vs-pro/) #### 1 site Your own site, personal or professional. €59 excl. tax / year Price excl. tax. VAT not applicable (art. 293 B of the French Tax Code): “TVA non applicable, art. 293 B du CGI” 1 WordPress site - Every Pro feature - File aliases, two-factor authentication, login limiting - Security headers, integrity check, email alerts - Member area: licenses, invoices, sites, downloads - Updates, signature feed and support for 1 year [Buy](https://www.wp-masquerade.com/checkout/?plan=site-1) Most popular #### 10 sites Freelancers and small site portfolios. €149 excl. tax / year Price excl. tax. VAT not applicable (art. 293 B of the French Tax Code): “TVA non applicable, art. 293 B du CGI” Up to 10 sites - Every Pro feature - File aliases, two-factor authentication, login limiting - Security headers, integrity check, email alerts - Member area: licenses, invoices, sites, downloads - Updates, signature feed and support for 1 year [Buy](https://www.wp-masquerade.com/checkout/?plan=sites-10) Agencies #### 100 sites Agencies and managed service providers. €399 excl. tax / year Price excl. tax. VAT not applicable (art. 293 B of the French Tax Code): “TVA non applicable, art. 293 B du CGI” Up to 100 sites - Every Pro feature - File aliases, two-factor authentication, login limiting - Security headers, integrity check, email alerts - Member area: licenses, invoices, sites, downloads - Updates, signature feed and support for 1 year [Buy](https://www.wp-masquerade.com/checkout/?plan=sites-100) Lifetime #### Unlimited sites One payment, no subscription. €990 excl. tax, one-time payment Price excl. tax. VAT not applicable (art. 293 B of the French Tax Code): “TVA non applicable, art. 293 B du CGI” Unlimited sites - Every Pro feature - File aliases, two-factor authentication, login limiting - Security headers, integrity check, email alerts - Member area: licenses, invoices, sites, downloads - Lifetime updates, signature feed and support [Buy lifetime](https://www.wp-masquerade.com/checkout/?plan=unlimited) Secure payment by Stripe. License key delivered instantly. Annual licenses can be canceled anytime from [your member area](https://www.wp-masquerade.com/my-account/). When a license expires, Pro features stop and the free plugin keeps working. Member area ### All your sites and licenses in one place In “My account”, you’ll find your licenses and their end dates, your purchases and invoices, downloads of the latest version and, above all, the status of each of your sites: pending updates, PHP version, known vulnerabilities. Sites that need attention come first. - Licenses: plan, sites in use, renewal - Purchases and invoices - Update status of each site: “Up to date”, “Security update pending”, “Vulnerable” - Optional email summary every Monday of the sites to update - Sites where the plugin is installed, free up a slot in one click - WP Masquerade Pro downloads [Open My account](https://www.wp-masquerade.com/my-account/) FAQ ### You’re probably wondering… All the answers about installation, licenses and the plugin’s limits. [All questions](https://www.wp-masquerade.com/faq/) **Will my site look different?** No. WP Masquerade changes what machines read in your pages’ code and headers, not what your visitors see. The only thing that changes is file URLs, and only if you turn on Pro aliases. **Will my site become undetectable?** No, and no plugin can honestly promise that. WP Masquerade removes the clues automated tools rely on most; a few traces may remain in some plugins’ files. **Does WP Masquerade replace a security plugin like Wordfence?** No, it complements it. WP Masquerade has neither a web application firewall nor a malware scanner: it reduces what bots see of your site and locks down the login. [Compare WordPress security plugins](https://www.wp-masquerade.com/best-wordpress-security-plugins/) to choose a combination. **What if I get locked out?** One line in wp-config.php, `define('CMS_MASQUERADE_DISABLE', true);`, suspends all transformations and reopens wp-login.php. **Is Pro worth it for an agency?** A 10-site license costs €149 per year excl. tax, less than €15 per site per year; the 100-site license works out at less than €4 per site. In return, the update status of all your sites comes into a single member area, and each site emails you about known vulnerabilities, modified core files or sign-ins from a new device. [What Pro brings to agencies](https://www.wp-masquerade.com/features/#agences) **My site is already hacked: can WP Masquerade fix it?** No: WP Masquerade does not clean infected files. First follow our [step-by-step guide to cleaning a hacked WordPress site](https://www.wp-masquerade.com/clean-hacked-wordpress-site/), or call on a specialist service. Once the site is clean, WP Masquerade helps close the doors attackers target and spot a new attempt early. **What happens when my license expires?** Pro features stop, along with updates, the signature feed and support; the free features keep working, with nothing to reinstall. Your site doesn’t break: an alias map that’s already been verified stays in place, and accounts already using two-factor authentication keep it. Blog ### WordPress security guides and analysis Recent vulnerabilities, useful settings and best practices, with sources. ![](https://www.wp-masquerade.com/media/2026/10/cover-en-67-760x428.webp) Hardening October 28, 2026 7 min #### [HTML comments and generator tags: erase the traces of WordPress](https://www.wp-masquerade.com/html-comments-generator-tag-wordpress/) SEO, analytics and cache plugins and page builders sign the source code with their name and version. The list plugin by plugin, how Masquerade Security removes… ![](https://www.wp-masquerade.com/media/2026/10/cover-en-59-760x428.webp) Comparisons and combinations October 28, 2026 6 min #### [MalCare and WP Masquerade: off-server scanning and locked-down access](https://www.wp-masquerade.com/malcare-and-wp-masquerade/) MalCare in detail (scanning on its servers, firewall, cleanup, plans), what WP Masquerade adds, which two-factor authentication to choose and the recommended setup for small hosting… ![](https://www.wp-masquerade.com/media/2026/10/cover-en-24-760x428.webp) Monitoring and response October 27, 2026 5 min #### [WordPress backups: a 3-2-1 strategy that holds up](https://www.wp-masquerade.com/wordpress-backups-3-2-1-strategy/) A backup is only worth something on the day it saves you. Here is the 3-2-1 rule, the right frequency and the test that proves it… [All posts](https://www.wp-masquerade.com/security-blog/) --- Source: https://www.wp-masquerade.com/features/ Updated: 2026-11-05T20:55:30+00:00 ## WordPress security features Imitate another CMS, file aliases, custom login page, hardening, bot traps, two-factor authentication: every WP Masquerade module, free and Pro. WP Masquerade is a WordPress security plugin that reduces what bots see of your site and closes the doors they target. It is built from independent modules, brought together in a tabbed interface: Getting started, Identity, Protection, File URLs, Bot traps, Monitoring, Diagnostics and Troubleshooting. Each module offers step-by-step options: every option includes the ones before it, and each carries a clear label: “No risk”, “Test first” or “May break links”. With WP Masquerade Pro, it also becomes an active monitoring tool: known vulnerabilities in your plugins, core file integrity, unusual sign-ins, administrator actions and the update status of all your sites, brought together in email alerts and in your member area. For a publisher, an agency or an online store, that is the difference between learning about a problem from a customer or from Google, and seeing it coming. How it works day to day. To move fast, three modes configure every module in one click. Without the Pro plugin, a mode automatically falls back to the best free option in each module: file URLs, for example, stay unchanged. | Mode | Who is it for? | What it configures | | --- | --- | --- | | **Essential** | Every site, no server rules needed | Hides the obvious clues with zero risk: reported identity, technical links removed, pingbacks turned off. | | **Recommended** | Most sites | Convincing imitation and a hidden login; with Pro, renamed files and a hidden author list. The best balance. | | **Maximum** | Sites tested on a staging site first | Everything is on, including (with Pro) blocking the old URLs and login attempt limiting. | ### All security modules #### [Imitate another CMS](https://www.wp-masquerade.com/features/cms-imitation/) Your site reports Joomla!, Drupal, PrestaShop, TYPO3 or MediaWiki (5 free profiles). With Pro: 41 profiles and the markers Wappalyzer recognizes. Free + Pro #### [WordPress technical links](https://www.wp-masquerade.com/features/wordpress-technical-links/) RSD, Windows Live Writer and shortlinks removed for free, as well as plugin HTML comments and generator tags (Yoast SEO, Site Kit, Elementor, cache plugins...). With Pro: REST API and oEmbed discovery links disappear too. See the [200+ camouflaged plugins](https://www.wp-masquerade.com/features/camouflaged-plugins/). Free + Pro #### [File URLs (aliases)](https://www.wp-masquerade.com/features/file-url-aliases/) /wp-content/ becomes /assets/ or any name you choose, and so do uploads, wp-includes, plugins and themes. Blocking the old URLs is optional. Pro #### [Custom login page](https://www.wp-masquerade.com/features/custom-login-page/) A login URL of your own, tested before it goes live, with wp-login.php and wp-admin returning 404. With Pro: limited attempts and two-factor authentication. Free + Pro #### [Hardening: XML-RPC, pingbacks, authors](https://www.wp-masquerade.com/features/hardening/) Pingbacks and XML-RPC blocked for free. With Pro: the author list is hidden everywhere (/?author=, REST API, sitemap, oEmbed). Free + Pro #### [Security headers](https://www.wp-masquerade.com/features/security-headers/) X-Frame-Options, Referrer-Policy and Permissions-Policy on by default; basic CSP and HSTS as options, with a check button. Pro #### [WordPress core integrity check](https://www.wp-masquerade.com/features/wordpress-integrity-check/) Every day, WordPress core files are compared with the official wordpress.org checksums: modified, missing or unknown files. Pro #### [Email alerts and weekly report](https://www.wp-masquerade.com/features/email-alerts/) A security report every Monday, plus an email when an administrator logs in from a new browser, when core files change or when a vulnerability affects you. Pro #### [Vulnerable plugin alerts](https://www.wp-masquerade.com/features/vulnerable-plugin-alerts/) Every day, your plugins, themes and WordPress version are checked against known vulnerabilities: severity, explanation, the fix to apply and an email alert. Pro #### [Administrator activity log](https://www.wp-masquerade.com/features/administrator-activity-log/) Logins, accounts, plugins, updates and sensitive settings: who did what, and when, with CSV export. Pro #### [Image hotlink protection](https://www.wp-masquerade.com/features/image-hotlink-protection/) See which sites display your images from your server and the bandwidth they use, then allow, block or protect. Pro #### [Bot traps and banning](https://www.wp-masquerade.com/features/bot-traps/) Count the bots probing for vulnerabilities your site doesn’t even have. With Pro: log, automatic banning and fake admin pages. Free + Pro #### [Two-factor authentication](https://www.wp-masquerade.com/features/two-factor-authentication/) A 6-digit code after the password, with Google Authenticator, 2FAS, Aegis… Backup codes and enforcement by role. Pro #### [Login attempt limiting](https://www.wp-masquerade.com/features/login-attempt-limiting/) IP addresses that rack up failed attempts are temporarily blocked, error messages stay neutral, and unblocking takes one click. Pro #### [Cloudflare and Sucuri support](https://www.wp-masquerade.com/features/cloudflare/) Visitors’ real IP address behind Cloudflare or the Sucuri firewall, verified, for login attempt limiting, banning and logs. Pro #### [Signature feed and updates](https://www.wp-masquerade.com/features/signature-feed-and-updates/) New trap patterns and imitation markers delivered without waiting for a new release, with updates right from the dashboard. Pro #### [Hosting and cache compatibility](https://www.wp-masquerade.com/features/hosting-and-cache-compatibility/) Built-in purging for LiteSpeed Cache, WP Rocket and WP Super Cache. With Pro: alias rules for Apache, LiteSpeed, o2switch, Nginx, IIS and Caddy. Free + Pro #### [Settings import and export](https://www.wp-masquerade.com/features/settings-import-export/) Your settings in a JSON file, without license or secrets, ready to import elsewhere after a preview of the changes. Pro #### [AI crawler control](https://www.wp-masquerade.com/features/ai-crawler-control/) Choose, family by family, what AI crawlers may do: model training, AI search and answers, fetches requested by users. robots.txt rules and optional strict blocking, without touching Googlebot or Bingbot. Pro #### [Agency dashboard](https://www.wp-masquerade.com/features/agency-dashboard/) A security score for each client site, client groups, reports under your name, settings profiles and white-label, with each site’s consent. Pro #### [Admin in 7 languages](https://www.wp-masquerade.com/features/admin-in-7-languages/) French, English, Spanish, German, Italian, Portuguese and Dutch: each user sees the interface in their own language. Free ### Monitor, get alerted, take action: day-to-day monitoring A site can be compromised for weeks before anyone notices. WP Masquerade Pro keeps watch for you and only bothers you when there is something to do. Here is, in practice, what happens once Pro is active. | When | What Pro checks | What you get | | --- | --- | --- | | **Continuously** | Administrator sign-ins, password guessing, bot trap hits, sensitive actions (plugins, accounts, settings) | An email when someone signs in from a new device; [temporary blocking](https://www.wp-masquerade.com/features/login-attempt-limiting/) of addresses that pile up failures; [banning](https://www.wp-masquerade.com/features/bot-traps/) of persistent bots; everything recorded in the [activity log](https://www.wp-masquerade.com/features/administrator-activity-log/) | | **Every hour** | Your images displayed by other sites, when [hotlink protection](https://www.wp-masquerade.com/features/image-hotlink-protection/) is in Detect or Protect mode | An email when a new site displays your images beyond the threshold you set; the details (images, requests, bandwidth) in the Hotlinks tab | | **Every day** | Versions of your plugins, themes and WordPress checked against published vulnerabilities; core files compared with the official wordpress.org checksums | An email as soon as a [known vulnerability](https://www.wp-masquerade.com/features/vulnerable-plugin-alerts/) affects you, with its severity and the version that fixes it; an email if a core file is [modified, missing or unknown](https://www.wp-masquerade.com/features/wordpress-integrity-check/) | | **Every day, for all your sites** | Pending updates (WordPress, plugins, themes, with security releases flagged), PHP version and its end of support, number of known vulnerabilities | The status of each site in your [member area](https://www.wp-masquerade.com/my-account/): “Up to date”, “Security update pending”, “Vulnerable”, or a warning when a site has stopped reporting | | **Every Monday** | Summary of the week | The [security report](https://www.wp-masquerade.com/features/email-alerts/) of each site and, if you turn it on, a summary of the sites to update, sent only when one of them needs your attention | *Update monitoring in the member area is on by default and can be turned off in one click in the Pro License tab: nothing more is sent and the stored status is erased.* **What is sent to the member area, and nothing else**: the WordPress and PHP versions, the list of plugins and themes waiting for an update, and the number of known vulnerabilities. No content, no users, no passwords. **The limits, openly.** WP Masquerade is neither an antivirus (it does not scan your plugins and uploads for malicious code and does not clean an infected site) nor a web application firewall. It reduces what bots see, locks down logins and warns you early. Keep off-server backups, test restoring them, and pair WP Masquerade with a firewall if your site needs one. ### Who is it for? #### For site publishers Blog, online media, business site: much of your traffic comes from search engines, and your readers trust you. A hack that injects spam pages or malicious code can bring up the “This site may be hacked” label under your Google results, or a full-screen browser warning, and the review takes time (see [how a hack affects your search rankings](https://www.wp-masquerade.com/hacked-wordpress-site-seo-spam-deindexing/) and [how to get off the Safe Browsing list](https://www.wp-masquerade.com/google-dangerous-site-warning/)). - login moved, [two-factor authentication](https://www.wp-masquerade.com/features/two-factor-authentication/) and [limited attempts](https://www.wp-masquerade.com/features/login-attempt-limiting/) for every author; - an alert as soon as an installed plugin is affected by a published vulnerability; - 1-site license at €59 per year excl. tax. #### For agencies When you maintain your clients’ sites, a vulnerability in a popular plugin can hit ten sites at once, and the client turns to you. Pro gives you the big picture without signing in to each site. - **A single member area** for all your licenses and all your sites, with the update status of each one, filters (“Needs attention”, “Up to date”) and sorting by urgency; - **an optional summary every Monday** listing the sites to update; - **per-site alerts**, sent to the address of your choice; - **an [activity log](https://www.wp-masquerade.com/features/administrator-activity-log/)** to know who, from your team or the client’s, installed a plugin or changed a setting; - **the same configuration everywhere** with [settings import and export](https://www.wp-masquerade.com/features/settings-import-export/), and an admin in 7 languages for your clients; - **an agency dashboard**: a security score per site, client groups, client reports under your name, settings profiles sent to the sites that accept them, and white-label; - **10-site (€149 per year), 100-site (€399 per year) or unlimited (€990 once) licenses, excl. tax**, with a slot freed in one click when a client leaves. #### For businesses and online stores For a WooCommerce store or a site that collects customer data, a hack means interrupted sales, worried customers and legal obligations: when a personal data breach poses a risk to people, the GDPR requires you to notify your supervisory authority (CNIL in France) within 72 hours, and to inform the people concerned when the risk is high. - privileged accounts protected: two-factor authentication required per role, limited attempts, wp-admin hidden from visitors; - traceability: the activity log helps document an incident (who, what, when), with CSV export; - early detection: known vulnerabilities, modified core files and sign-ins from a new device reported by email; - minimal data: IP addresses truncated in logs, two-factor secrets encrypted. How much would a hack cost your business? We gathered the public prices of cleanup services, Google’s review times and GDPR obligations: [what a hacked site costs](https://www.wp-masquerade.com/pricing/#cout-piratage). ### How to secure your WordPress site: where to start A security plugin is not enough on its own. Here is the order we recommend to secure a WordPress site, and what WP Masquerade contributes at each step. 1. **Update everything**: WordPress, plugins and themes, and remove what you no longer use. With Pro, [vulnerability alerts](https://www.wp-masquerade.com/features/vulnerable-plugin-alerts/) report every day the versions affected by a published vulnerability. 2. **Protect the login**: unique passwords, a moved login URL (free), [two-factor authentication](https://www.wp-masquerade.com/features/two-factor-authentication/) and [brute force protection](https://www.wp-masquerade.com/features/login-attempt-limiting/) (Pro). 3. **Reduce the attack surface**: [hide WordPress](https://www.wp-masquerade.com/features/cms-imitation/), block XML-RPC and pingbacks with [hardening](https://www.wp-masquerade.com/features/hardening/), hide the author list (Pro). 4. **Filter and monitor**: a firewall (host, Cloudflare or plugin) and file scanning, which WP Masquerade doesn’t provide; [bot traps](https://www.wp-masquerade.com/features/bot-traps/), plus the [integrity check](https://www.wp-masquerade.com/features/wordpress-integrity-check/) and the [activity log](https://www.wp-masquerade.com/features/administrator-activity-log/) with Pro. 5. **Back up off the server** and test restoring. For the full list, follow our 40-point WordPress security checklist. To choose the plugins that complement WP Masquerade, read our [comparison of the best WordPress security plugins](https://www.wp-masquerade.com/best-wordpress-security-plugins/); for spam, see [what WP Masquerade blocks and what needs an anti-spam plugin](https://www.wp-masquerade.com/wordpress-anti-spam/). ### Free or Pro at a glance **Free**: WordPress hidden and an authentic generator tag for 5 popular profiles (or a name of your choice), basic technical links removed, plugin HTML comments and generator tags removed, custom login URL with wp-login.php and wp-admin hidden, pingbacks and XML-RPC blocked, trap counting, plugin files invisible to scanners, admin in 7 languages. **Pro**: everything else. 41 profiles and Wappalyzer markers, REST and oEmbed discovery links removed, hidden author list, file URL aliases, unknown AJAX requests answered with 404, login attempt limiting, two-factor authentication, [security headers](https://www.wp-masquerade.com/features/security-headers/), [integrity check](https://www.wp-masquerade.com/features/wordpress-integrity-check/), [email alerts](https://www.wp-masquerade.com/features/email-alerts/), banning, log and fake admin pages, signature feed, updates and priority support. New in 1.1: [vulnerable plugin alerts](https://www.wp-masquerade.com/features/vulnerable-plugin-alerts/), [administrator activity log](https://www.wp-masquerade.com/features/administrator-activity-log/), [Cloudflare support](https://www.wp-masquerade.com/features/cloudflare/) and [settings import and export](https://www.wp-masquerade.com/features/settings-import-export/). New in 1.2: [image hotlink protection](https://www.wp-masquerade.com/features/image-hotlink-protection/). New: update monitoring of all your sites in your member area. Also new: AI crawler control, the agency dashboard and updates of the disguised plugins catalogue between releases. [See the line-by-line comparison](https://www.wp-masquerade.com/free-vs-pro/). ### What stays the same - **Your site’s look**: theme, copy and pages stay identical for your visitors. - **Your files**: physical folders aren’t moved and WordPress core isn’t modified. - **Your admin**: when logged in, you see the site without camouflage; the dashboard works just as before. - **Your server configuration**: the plugin gives you rules to copy, and never edits your Nginx configuration on its own. The one exception, [hotlink protection](https://www.wp-masquerade.com/features/image-hotlink-protection/) (Pro, off by default), writes its own block in .htaccess on Apache and LiteSpeed, checks it and removes it as soon as you turn it off. WP Masquerade reduces what bots learn about your site and closes known doors. It doesn’t fix vulnerabilities in a theme or plugin, so keep them up to date. [What the plugin doesn’t do](https://www.wp-masquerade.com/faq/#limites). ### Start free, upgrade to Pro when you’re ready The free version already hides WordPress, moves the login page, blocks XML-RPC and counts bots. Pro locks down logins, renames file URLs and monitors your sites for you: known vulnerabilities, core integrity, activity log, email alerts and the update status of all your sites in your member area. From €59 per year excl. tax, far less than the cleanup offers whose prices we checked. [Compare the costs](https://www.wp-masquerade.com/pricing/#cout-piratage). [See Pro pricing](https://www.wp-masquerade.com/pricing/) [Download the free version](https://www.wp-masquerade.com/download/) --- Source: https://www.wp-masquerade.com/free-vs-pro/ Updated: 2026-11-06T13:42:51+00:00 ## WP Masquerade Free vs Pro Free: WordPress hidden, 5 profiles, login moved, XML-RPC blocked, trap counting. Pro: aliases, 2FA, headers, integrity, alerts… The full line-by-line breakdown. *Feature comparison of the free and Pro versions* | Feature | Free Free forever [Download](https://www.wp-masquerade.com/download/) | Pro From €59 excl. tax / year [See pricing](https://www.wp-masquerade.com/pricing/) | | --- | --- | --- | | Disguise | | | | [Hide WordPress and report different software](https://www.wp-masquerade.com/features/cms-imitation/) | Included | Included | | [Authentic generator tag for 5 popular profiles (Joomla!, Drupal, PrestaShop, TYPO3, MediaWiki)](https://www.wp-masquerade.com/features/cms-imitation/) | Included | Included | | [41 imitation profiles (blogs, forums, wikis, ecommerce…)](https://www.wp-masquerade.com/features/cms-imitation/) | Not included | Included | | [Full markers recognized by Wappalyzer (headers, JavaScript variables)](https://www.wp-masquerade.com/features/cms-imitation/) | Not included | Included | | [Basic technical links removed (RSD, Windows Live Writer, shortlinks)](https://www.wp-masquerade.com/features/wordpress-technical-links/) | Included | Included | | [Plugin HTML comments and generator tags removed (Yoast, Rank Math, Site Kit, Elementor, cache plugins...)](https://www.wp-masquerade.com/features/wordpress-technical-links/) | Included | Included | | [REST API and oEmbed discovery links removed](https://www.wp-masquerade.com/features/wordpress-technical-links/) | Not included | Included | | [File URL aliases (wp-content, media, wp-includes, plugins, themes) + blocking of old URLs](https://www.wp-masquerade.com/features/file-url-aliases/) | Not included | Included | | [Rewriting inside inline scripts and JSON, LiteSpeed Cache / WP Rocket output](https://www.wp-masquerade.com/features/hosting-and-cache-compatibility/) | Not included | Included | | Login protection | | | | [Custom login URL, wp-login.php and wp-admin hidden](https://www.wp-masquerade.com/features/custom-login-page/) | Included | Included | | [Unknown AJAX and admin-post requests answered with 404, without the WordPress error](https://www.wp-masquerade.com/features/custom-login-page/) | Not included | Included | | [Login attempt limiting](https://www.wp-masquerade.com/features/login-attempt-limiting/) | Not included | Included | | [Two-factor authentication (authenticator app codes, backup codes, required by role)](https://www.wp-masquerade.com/features/two-factor-authentication/) | Not included | Included | | Hardening | | | | [Pingbacks and XML-RPC blocked](https://www.wp-masquerade.com/features/hardening/) | Included | Included | | [Author list hidden (/?author=, REST API, sitemaps)](https://www.wp-masquerade.com/features/hardening/) | Not included | Included | | [Security headers (HSTS, X-Frame-Options, Referrer-Policy, CSP…)](https://www.wp-masquerade.com/features/security-headers/) | Not included | Included | | Monitoring and alerts | | | | [WordPress core integrity check](https://www.wp-masquerade.com/features/wordpress-integrity-check/) | Not included | Included | | [Email alerts and weekly security report](https://www.wp-masquerade.com/features/email-alerts/) | Not included | Included | | [Alerts on vulnerable plugins and themes, with the vulnerability explained and the fix to apply](https://www.wp-masquerade.com/features/vulnerable-plugin-alerts/) | Not included | Included | | [Administrator activity log (logins, plugins, users, settings)](https://www.wp-masquerade.com/features/administrator-activity-log/) | Not included | Included | | [Image hotlink detection and protection (report, allow and block lists, alerts)](https://www.wp-masquerade.com/features/image-hotlink-protection/) | Not included | Included | | [Traps: counts bots probing for vulnerabilities](https://www.wp-masquerade.com/features/bot-traps/) | Included | Included | | [Traps: automatic banning, detailed log, fake admin pages](https://www.wp-masquerade.com/features/bot-traps/) | Not included | Included | | Tools and services | | | | [Cloudflare support: real visitor IP for limits, bans and logs](https://www.wp-masquerade.com/features/cloudflare/) | Not included | Included | | [Settings import and export, section-by-section import and reusable settings profiles](https://www.wp-masquerade.com/features/settings-import-export/) | Not included | Included | | [Automatic updates, signature feed and priority support](https://www.wp-masquerade.com/features/signature-feed-and-updates/) | Not included | Included | | Other features | | | | [Update monitoring of all your sites in the member area (WordPress, plugins, themes, PHP version, known vulnerabilities), optional weekly summary](https://www.wp-masquerade.com/features/#surveillance) | Not included | Included | | [AI crawler control (training, AI search and answers, user-requested fetches): robots.txt rules and optional strict blocking](https://www.wp-masquerade.com/features/ai-crawler-control/) | Not included | Included | | [Agency dashboard in the member area: security score per site, client groups, client reports, settings profiles, white-label](https://www.wp-masquerade.com/features/agency-dashboard/) | Not included | Included | | Setup, compatibility and services | | | | Guided setup and Essential, Recommended, Maximum modes | Limited best free option | Included | | Custom name reported instead of a profile | Included | Included | | New login URL tested before it goes live | Included | Included | | Purging for LiteSpeed Cache, WP Super Cache and WP Rocket | Included | Included | | Plugin files invisible to scanners (Apache, LiteSpeed, o2switch) | Included | Included | | Local diagnostics and Troubleshooting tab | Included | Included | | Admin in 7 languages | Included | Included | | Alias rules for Apache, LiteSpeed, o2switch, Nginx, IIS and Caddy, verified from the browser | Not included | Included | | Signature feed (new trap patterns and markers) | Not included | Included active license | | Disguised plugins catalogue extended and corrected between releases (signed updates) | Not included | Included active license | List taken from the plugin itself (Pro license tab) and from the member area. Pro installs on its own: it includes the free version. ### Which version should you choose? #### The free version is enough if… - you want to remove the obvious WordPress clues, report Joomla!, Drupal, PrestaShop, TYPO3 or MediaWiki, and move the login page; - your site has only one or two accounts, already protected by strong passwords; - you want to try the plugin on your hosting first. #### Upgrade to Pro if… - you want a tool like Wappalyzer to actually recognize the reported software, or you want to imitate a forum, blog or wiki; - you want to remove /wp-content/ from your pages and hide the author list; - several people log in to your site, or you manage client sites: [two-factor authentication](https://www.wp-masquerade.com/features/two-factor-authentication/) and [login attempt limiting](https://www.wp-masquerade.com/features/login-attempt-limiting/) become essential; - you want to be notified: daily [integrity check](https://www.wp-masquerade.com/features/wordpress-integrity-check/), [email alerts](https://www.wp-masquerade.com/features/email-alerts/) and a weekly report; - you run several sites, your own or your clients’, and want to see at a glance which ones are waiting for an update or are affected by a known vulnerability, from your [member area](https://www.wp-masquerade.com/features/#agences); - your site makes revenue or collects customer data: a hack would cost far more than the license ([see the cost comparison](https://www.wp-masquerade.com/pricing/#cout-piratage)); - you want [security headers](https://www.wp-masquerade.com/features/security-headers/) without touching your server configuration, automatic bot banning, and new trap patterns as they come out. ### How to upgrade to Pro WP Masquerade Pro installs as a single plugin that includes the free version: if the free version is already on your site, keep it or delete it. Then paste the activation code generated for that site in your member area into the Pro license tab, and the locked options unlock. **Your current settings are kept.** If your license expires or is revoked, Pro features stop (including updates, the feed and support) and the free features keep working, with nothing to reinstall. Your site doesn’t break: an alias map that’s already been verified stays in place, and accounts already using two-factor authentication keep it. If you deactivate WP Masquerade Pro, the masking stops too, unless the free version is installed and active: modules then revert to the best free option. Either way, pages go back to /wp-content/ URLs, so remove the alias server rules first. [More about aliases](https://www.wp-masquerade.com/features/file-url-aliases/). **Everything is included.** [Vulnerable plugin alerts](https://www.wp-masquerade.com/features/vulnerable-plugin-alerts/), the [administrator activity log](https://www.wp-masquerade.com/features/administrator-activity-log/), [Cloudflare support](https://www.wp-masquerade.com/features/cloudflare/) and [settings import and export](https://www.wp-masquerade.com/features/settings-import-export/) are included in every Pro license at no extra cost, as is the [update monitoring of all your sites](https://www.wp-masquerade.com/features/#surveillance) in the member area. [Image hotlink protection](https://www.wp-masquerade.com/features/image-hotlink-protection/) is also included at no extra cost. The same goes for AI crawler control, the agency dashboard and the disguised plugins catalogue updates. ### Hide, lock down and monitor all your sites From €59 excl. tax per year for one site, €149 for 10 sites, €399 for 100 sites, or €990 one-time for unlimited sites. Prices excl. tax. VAT not applicable (art. 293 B of the French Tax Code): “TVA non applicable, art. 293 B du CGI”. [Choose my license](https://www.wp-masquerade.com/pricing/) [Start for free](https://www.wp-masquerade.com/download/) --- Source: https://www.wp-masquerade.com/pricing/ Updated: 2026-11-06T13:42:53+00:00 ## WP Masquerade Pro pricing Four WP Masquerade Pro licenses, from 1 site to unlimited: €59, €149 or €399 per year, or €990 once, all excl. tax. Key delivered instantly, member area included. ### Choose your Pro license #### 1 site Your own site, personal or professional. €59 excl. tax / year Price excl. tax. VAT not applicable (art. 293 B of the French Tax Code): “TVA non applicable, art. 293 B du CGI” 1 WordPress site - Every Pro feature - File aliases, two-factor authentication, login limiting - Security headers, integrity check, email alerts - Member area: licenses, invoices, sites, downloads - Updates, signature feed and support for 1 year [Buy](https://www.wp-masquerade.com/checkout/?plan=site-1) Most popular #### 10 sites Freelancers and small site portfolios. €149 excl. tax / year Price excl. tax. VAT not applicable (art. 293 B of the French Tax Code): “TVA non applicable, art. 293 B du CGI” Up to 10 sites - Every Pro feature - File aliases, two-factor authentication, login limiting - Security headers, integrity check, email alerts - Member area: licenses, invoices, sites, downloads - Updates, signature feed and support for 1 year [Buy](https://www.wp-masquerade.com/checkout/?plan=sites-10) Agencies #### 100 sites Agencies and managed service providers. €399 excl. tax / year Price excl. tax. VAT not applicable (art. 293 B of the French Tax Code): “TVA non applicable, art. 293 B du CGI” Up to 100 sites - Every Pro feature - File aliases, two-factor authentication, login limiting - Security headers, integrity check, email alerts - Member area: licenses, invoices, sites, downloads - Updates, signature feed and support for 1 year [Buy](https://www.wp-masquerade.com/checkout/?plan=sites-100) Lifetime #### Unlimited sites One payment, no subscription. €990 excl. tax, one-time payment Price excl. tax. VAT not applicable (art. 293 B of the French Tax Code): “TVA non applicable, art. 293 B du CGI” Unlimited sites - Every Pro feature - File aliases, two-factor authentication, login limiting - Security headers, integrity check, email alerts - Member area: licenses, invoices, sites, downloads - Lifetime updates, signature feed and support [Buy lifetime](https://www.wp-masquerade.com/checkout/?plan=unlimited) Secure payment by Stripe. License key delivered instantly. Annual licenses can be canceled anytime from [your member area](https://www.wp-masquerade.com/my-account/). When a license expires, Pro features stop and the free plugin keeps working. ### Included with every license Every plan includes the same features; only the number of sites changes. Pro installs as a single plugin: the free version is included, no need to install it separately. [What’s free and what’s Pro](https://www.wp-masquerade.com/free-vs-pro/). - All Pro features: [41 profiles and full imitation](https://www.wp-masquerade.com/features/cms-imitation/), REST and oEmbed discovery links removed, hidden author list, [file URL aliases](https://www.wp-masquerade.com/features/file-url-aliases/), unknown AJAX requests answered with 404, [login attempt limiting](https://www.wp-masquerade.com/features/login-attempt-limiting/), [two-factor authentication](https://www.wp-masquerade.com/features/two-factor-authentication/), [security headers](https://www.wp-masquerade.com/features/security-headers/), [integrity check](https://www.wp-masquerade.com/features/wordpress-integrity-check/), [email alerts](https://www.wp-masquerade.com/features/email-alerts/), [bot banning](https://www.wp-masquerade.com/features/bot-traps/); - automatic updates and the [signature feed](https://www.wp-masquerade.com/features/signature-feed-and-updates/) for the paid period (for life with the unlimited license); - priority email support for the same period; - new Pro features as they ship, at no extra cost, for example: [vulnerable plugin alerts](https://www.wp-masquerade.com/features/vulnerable-plugin-alerts/), [administrator activity log](https://www.wp-masquerade.com/features/administrator-activity-log/), [Cloudflare support](https://www.wp-masquerade.com/features/cloudflare/) and [settings import and export](https://www.wp-masquerade.com/features/settings-import-export/), then [image hotlink protection](https://www.wp-masquerade.com/features/image-hotlink-protection/), [AI crawler control](https://www.wp-masquerade.com/features/ai-crawler-control/) and disguised plugins catalogue updates between releases; - a [member area](https://www.wp-masquerade.com/my-account/) to track your licenses, find your purchases and invoices, download the latest version and **follow the update status of all your sites**: WordPress, plugins, themes, PHP version and known vulnerabilities, with an optional email summary every Monday. Its Agency tab adds the [agency dashboard](https://www.wp-masquerade.com/features/agency-dashboard/): security score per site, client groups, client reports under your name, settings profiles and white-label. ### Which license for which profile? | You are | Suggested license | What matters to you | | --- | --- | --- | | **Publisher of one site** (blog, media, business site) | 1 site, €59 per year excl. tax | Locked-down login, vulnerable plugin alerts, search rankings protected | | **Freelancer or small agency** | 10 sites, €149 per year excl. tax | Update status of all client sites in a single member area, per-site alerts | | **Agency or host of client sites** | 100 sites, €399 per year excl. tax, or unlimited, €990 once excl. tax | Overview sorted by urgency, the same configuration everywhere with settings import and export | | **Business or online store** | Depending on the number of sites, staging sites included | Two-factor authentication required per role, activity log to document an incident, early detection | Details for each profile are on the [features](https://www.wp-masquerade.com/features/#pour-qui) page. ### What a hacked site costs, compared with prevention The cost of a hack is not limited to the cleanup bill. You have to find a specialist who is available quickly, repair the damage, win back the trust of Google and of your customers, and sometimes meet legal obligations. Here are the cost items, with public, sourced figures. | Item | Repairing after a hack | Preventing with WP Masquerade Pro | | --- | --- | --- | | **Cleanup by a specialist** | Public offers that include site cleanup: Sucuri from 229 to 549 USD per year; MalCare Repair 299 USD per year and Fortify 499 USD per year; Wordfence Care 590 USD per year, Wordfence Response 1,250 USD per year (24/7). Automated tools such as Jetpack Scan fix many threats, but Jetpack states that a site infected before it was activated may need additional cleanup. | No cleanup: Pro reduces what bots see, locks down logins and alerts you early. €59 per year excl. tax for 1 site, €149 for 10 sites. | | **Finding an expert in time** | Advertised response times: from 30 hours (Sucuri Basic) to 6 hours (Sucuri Business), presented as estimates; 1 hour for Wordfence Response. Most of the time you have to subscribe in a hurry. | Daily checks and email alerts: you are warned before a known vulnerability is exploited, not after. | | **Time and revenue** | Sales lost or postponed during the disruption, your team’s time spent handling the incident. Calculate it with the formula below. | Updates of all your sites tracked in the member area: fewer known vulnerabilities left open. | | **Search rankings** | “This site may be hacked” label in Google results, Safe Browsing warnings in browsers. According to Google, reviewing a site infected with malware takes a few days, and a site hacked with spam can take up to several weeks. | Login moved, two-factor authentication, limited attempts and bot traps: fewer doors to inject spam. | | **Personal data (GDPR)** | Breach posing a risk to people: notification to the supervisory authority (CNIL in France) within 72 hours where feasible; high risk: informing the people concerned; in every case, internal documentation of the incident (GDPR Articles 33 and 34). | Administrator activity log (who, what, when, CSV export) to document and understand an incident. | | **Reputation** | Warnings seen by your visitors, emails from worried customers, trust to rebuild. Hard to put a figure on, but very real. | Signs of intrusion spotted early, before your customers can see them. | *Public prices in US dollars from the providers’ official pages; they may change. These offers include other services (firewall, monitoring) and can complement WP Masquerade, which does not clean an infected site.* #### Run the numbers for your site **Cost of an incident** = cleanup + (online revenue per day × days of disruption) + (hours spent by your team × hourly cost) + any compliance costs. **Example calculation, with assumptions to replace with your own.** A store making €6,000 of online revenue per month (€200 per day) is offline for 4 days: €800 of sales lost or postponed. Its team spends 10 hours on the incident, at €40 per hour: €400. It subscribes in a hurry to a cleanup offer at 590 USD per year. Example total: about €1,700, not counting search rankings or reputation. A 1-site WP Masquerade Pro license costs €59 per year excl. tax. WP Masquerade Pro does not guarantee that a site will never be hacked: no tool can. It reduces your exposure and shortens the time between the start of a problem and the moment you see it. Keep off-server backups and test restoring them. Is your site already hacked? Follow our [step-by-step cleanup guide](https://www.wp-masquerade.com/clean-hacked-wordpress-site/), then read [how to recover your search rankings](https://www.wp-masquerade.com/hacked-wordpress-site-seo-spam-deindexing/) and [how to get a Safe Browsing warning removed](https://www.wp-masquerade.com/google-dangerous-site-warning/). Sources: [Sucuri, Website Security Platform plans](https://sucuri.net/website-security-platform/signup/); [MalCare, pricing](https://www.malcare.com/pricing/); [Wordfence, pricing](https://www.wordfence.com/products/pricing/) and [December 2024 price announcement](https://www.wordfence.com/blog/2024/11/wordfence-price-increases-coming-december-5th-2024/); [Jetpack Scan](https://jetpack.com/upgrade/scan/); [Search Console Help, site labeled as dangerous](https://support.google.com/webmasters/answer/6347750?hl=en); [Google Search Help, “This site may be hacked”](https://support.google.com/websearch/answer/190597?hl=en); [CNIL (France), notifying a personal data breach](https://www.cnil.fr/fr/notifier-une-violation-de-donnees-personnelles); [GDPR, Articles 33 and 34](https://eur-lex.europa.eu/eli/reg/2016/679/oj). Choose my license, from €59 per year excl. tax [Compare Free and Pro](https://www.wp-masquerade.com/free-vs-pro/) ### How buying works 1. Click the button for the plan you want: you’ll land on Stripe’s secure checkout page. 2. Once you’ve paid, your license key appears right away, along with the plugin download link. You also get it by email, and Stripe sends you the invoice. 3. Install WP Masquerade Pro on its own: if the free version is already installed, keep it or delete it, your settings are kept. In your [member area](https://www.wp-masquerade.com/my-account/) (“Licenses” tab, “Activation codes” block), generate an activation code for the site’s address, then paste that code in WP Masquerade → Pro license (the mask icon in the admin menu) and click “Activate license”. Install and activate WP Masquerade Pro in 6 steps Pause the animation Play the animation 1. **Buy a plan** Secure payment with Stripe. Stripe LIC-7KQ2-M9XD 2. **Download WP Masquerade Pro** A single ZIP file, from your member area. wp-masquerade-pro.zip 3. **Upload it to WordPress** Plugins > Add New Plugin > Upload Plugin..zip WordPress 4. **Activate the plugin** Nothing else to install: Pro includes everything. WP Masquerade Pro 5. **Generate an activation code** One code per site, for its address. www.example.com ACT-7KQ2X-… 6. **Paste the code** In WP Masquerade > Pro license: the site is activated. ACT-7KQ2X-… www.example.com 1. Buy a plan: Secure payment with Stripe. 2. Download WP Masquerade Pro: A single ZIP file, from your member area. 3. Upload it to WordPress: Plugins > Add New Plugin > Upload Plugin. 4. Activate the plugin: Nothing else to install: Pro includes everything. 5. Generate an activation code: One code per site, for its address. 6. Paste the code: In WP Masquerade > Pro license: the site is activated. After payment, the [Install WP Masquerade](https://www.wp-masquerade.com/my-account/install/) tab of your member area takes you through these steps one by one, with your files and your activation code. ### Renewal and expiration The 1-site, 10-site and 100-site licenses are annual subscriptions that renew automatically on their anniversary date. You can cancel anytime from your [member area](https://www.wp-masquerade.com/my-account/): the license stays active until the end of the paid period. **Your price is guaranteed at renewal.** As long as you renew your license without interruption, you keep the price paid at purchase (excluding promo codes, which only apply to the first payment), even if our prices go up. A license renewed more than 14 days after its end date, or a new license, is at the current price. If we ever had to change the price of your license, you would be told by email at least 30 days before the renewal concerned, and could cancel free of charge before that date. Details in the [terms of sale](https://www.wp-masquerade.com/terms-of-sale/). **When a license expires, Pro features stop, but your site doesn’t break.** Pro features, updates, the signature feed and support stop; the free features keep working, with nothing to reinstall. Two safeguards: an alias map that’s already been verified stays in place (your file URLs don’t change), and accounts already using two-factor authentication keep it. To get Pro back, just buy a new license: your settings are kept. The **Unlimited sites** license is a one-time payment: no subscription, lifetime updates. ### License questions **Is Pro worth it for an agency?** The 10-site license works out at less than €15 per site per year excl. tax, the 100-site license at less than €4 per site. For that price, each site alerts you about known vulnerabilities, modified core files or sign-ins from a new device, and the update status of all your sites comes into a single member area, sorted by urgency. The cleanup offers whose public prices we checked cost much more, per site (see the cost comparison). **My site is already hacked: can Pro fix it?** No. WP Masquerade does not clean infected files and is not an antivirus. First clean the site with our [step-by-step guide](https://www.wp-masquerade.com/clean-hacked-wordpress-site/) or with a specialist service, change all passwords, then install WP Masquerade to close the doors attackers target and be alerted earlier next time. **What counts as a “site”?** A site is a domain name on which the license is activated (for example `example.com`). A staging site on a different domain therefore uses a slot: each license offers a single free development slot (local address, staging site or copy of the site), the next ones use a slot. Agencies running many staging sites: the 100-site plan or the unlimited lifetime plan. Reactivating the same site, for example after a reinstall, doesn’t use an extra slot. Each license accepts at most 5 new site activations per 24-hour period, whatever the plan; the member area shows how many are left today. **Can I move a license to another site?** Yes. Click “Deactivate on this site” in the Pro license tab, or “Release” in your [member area](https://www.wp-masquerade.com/my-account/). The slot is immediately available for another site. **I want to go from 1 site to 10.** To change plans, you buy the higher plan. If you’ve just made a purchase, [contact us](https://www.wp-masquerade.com/contact-us/) first and we’ll find a solution that works for you. **What happens if my site can no longer reach the license server?** The license is checked locally, with no requests while pages are being served. Without contact with the server, it stays valid for 10 days; after that, Pro features pause until the next successful check. Your settings are kept. **Can I get a refund?** Refund policy: 14 days after purchase or renewal, no questions asked. See also the [terms of sale](https://www.wp-masquerade.com/terms-of-sale/). If you’re refunded, the license is revoked and Pro features stop at the next check, with the same safeguards as on expiration; your settings are kept. **Will I get an invoice?** Yes. Stripe emails it to you, and you can also find it in your member area under Purchases and invoices. Invoices carry the mention “TVA non applicable, art. 293 B du CGI” (VAT not applicable, Article 293 B of the French General Tax Code): prices are shown excl. tax and no VAT is added, so you pay exactly the price shown. **Is the code open source?** Yes. WP Masquerade and WP Masquerade Pro are distributed under the GPL. What you’re buying is the key that activates Pro features on your sites, plus updates, the signature feed and support. Prices in euros, excl. tax. VAT not applicable (art. 293 B of the French Tax Code): “TVA non applicable, art. 293 B du CGI”. By purchasing, you accept the [terms of sale](https://www.wp-masquerade.com/terms-of-sale/). --- Source: https://www.wp-masquerade.com/download/ Updated: 2026-11-06T13:42:53+00:00 ## Download WP Masquerade for free The free version of WP Masquerade is coming soon to WordPress.org. What it does, how to install it, and how to move up to WP Masquerade Pro. ### Free version Free WordPress hidden and an authentic generator tag for 5 profiles (Joomla!, Drupal, PrestaShop, TYPO3, MediaWiki) or a name of your choice; basic technical links removed; plugin HTML comments and generator tags removed; custom login URL with wp-login.php and wp-admin hidden; pingbacks and XML-RPC blocked; trapped bots counted; plugin files invisible to scanners; admin in 7 languages. [Download the free plugin (ZIP)](https://www.wp-masquerade.com/wp-content/uploads/wpm-downloads/cms-masquerade.zip) Publication in the official WordPress.org directory is in progress. Meanwhile, download the ZIP file here and upload it in Plugins → Add New Plugin → Upload Plugin. ### WP Masquerade Pro Pro Includes the free version and adds everything else: 41 profiles, file URL aliases, unknown AJAX requests answered with 404, two-factor authentication, login attempt limiting, security headers and, above all, active monitoring: integrity check, vulnerable plugin alerts, activity log, email alerts, bot banning and the update status of all your sites in your member area. From €59 per year excl. tax. You download it after purchase in your member area, where the “Install WP Masquerade” tab guides you step by step through activation. [See pricing](https://www.wp-masquerade.com/pricing/) [My account](https://www.wp-masquerade.com/my-account/) ### Requirements - WordPress 6.4 or later (tested up to WordPress 7.1); - PHP 7.4 or later; - a single-site WordPress install: multisite is not supported; - for file aliases (Pro): access to .htaccess or the server configuration (see [compatibility](https://www.wp-masquerade.com/features/hosting-and-cache-compatibility/)). ### Try the free version This is for anyone who wants to use WP Masquerade for free, or to try it before buying. Pro customers can skip it: WP Masquerade Pro includes every free feature and installs on its own. 1. **Back up** your files, your database and your server configuration. Ideally, install on a copy of the site first. 2. In **Plugins → Add New**, search for “Masquerade Security” (once it’s published) or click **Upload Plugin** to upload the ZIP file. Activate the plugin. 3. Open **Masquerade Security** (the mask icon in the admin menu). Until camouflage is turned on, nothing changes. 4. Follow the **Getting started** tab: choose a mode and the software to imitate, then test and activate the new login URL. 5. Check the site in a private browsing window, with a tool like Wappalyzer. ### Install WP Masquerade Pro Your member area follows these steps with you: the [Install WP Masquerade](https://www.wp-masquerade.com/my-account/install/) tab shows where you are, provides the files and generates your activation code. Install and activate WP Masquerade Pro in 6 steps Pause the animation Play the animation 1. **Buy a plan** Secure payment with Stripe. Stripe LIC-7KQ2-M9XD 2. **Download WP Masquerade Pro** A single ZIP file, from your member area. wp-masquerade-pro.zip 3. **Upload it to WordPress** Plugins > Add New Plugin > Upload Plugin..zip WordPress 4. **Activate the plugin** Nothing else to install: Pro includes everything. WP Masquerade Pro 5. **Generate an activation code** One code per site, for its address. www.example.com ACT-7KQ2X-… 6. **Paste the code** In WP Masquerade > Pro license: the site is activated. ACT-7KQ2X-… www.example.com 1. Buy a plan: Secure payment with Stripe. 2. Download WP Masquerade Pro: A single ZIP file, from your member area. 3. Upload it to WordPress: Plugins > Add New Plugin > Upload Plugin. 4. Activate the plugin: Nothing else to install: Pro includes everything. 5. Generate an activation code: One code per site, for its address. 6. Paste the code: In WP Masquerade > Pro license: the site is activated. 1. Buy a license on the [Pricing](https://www.wp-masquerade.com/pricing/) page. The key (it starts with `CMP-`) appears right away and is also sent by email: keep it as the reference of your license, you do not type it into your sites. 2. Download the WP Masquerade Pro ZIP, go to **Plugins → Add New → Upload Plugin**, and activate it. One plugin is all you need: if the free version is already installed, keep it or delete it, your settings are kept. 3. In your member area (**My account**, **Licenses** tab), open the license, then the “Activation codes” block: type the site address (for example `www.example.com`, or `example.com/blog` for WordPress installed in a subfolder) and click “Generate the code”. The code (`ACT-XXXXX-XXXXX-XXXXX`) works once, only for that address, with or without www., and is valid for 7 days. For several sites, type one address per line (up to 20 at a time). 4. Open **WP Masquerade → Pro license**, paste the code and click “Activate license”. Each license accepts at most 5 new site activations per 24 hours. 5. Pro options unlock in every tab; your current settings are kept. Need help? The [documentation](https://www.wp-masquerade.com/docs/) walks through every step and what to do if something goes wrong. **Is your site already hacked?** Installing a security plugin is not enough to repair it: WP Masquerade does not clean infected files. Start with our [guide to cleaning a hacked WordPress site](https://www.wp-masquerade.com/clean-hacked-wordpress-site/), change all passwords, then install WP Masquerade to close the doors attackers target and be alerted earlier. --- Source: https://www.wp-masquerade.com/features/cms-imitation/ Updated: 2026-11-06T13:42:52+00:00 ## Make WordPress look like another CMS Make your WordPress site pass for Joomla!, Drupal, PrestaShop, TYPO3, or MediaWiki (free), or for one of the 41 Pro profiles. Bots will hunt for vulnerabilities that aren’t there. ### What imitation does The **Identity** module controls what your site reports to bots and to detection tools like Wappalyzer. It removes the “WordPress” mention from your source code and RSS feeds, then announces the software of your choice with its authentic *generator* tag, for example “Joomla! - Open Source Content Management”. The principle is explained in our definition of [fingerprinting](https://www.wp-masquerade.com/glossary/fingerprinting/). To see which clues give WordPress away and which ones you can remove yourself, read [how Wappalyzer and bots detect WordPress](https://www.wp-masquerade.com/wordpress-fingerprinting-detection/). Your site looks exactly the same. Only the technical declarations, which your visitors never see, are changed. ### Why it helps Attack bots sort sites before they strike. A site that presents itself as Joomla! gets attempts built for Joomla!: they fail on your WordPress site, and those visits can even be counted by the [bot traps](https://www.wp-masquerade.com/features/bot-traps/). You can also announce a specific version. An old version lures bots toward vulnerabilities your site doesn’t have. That said, the guide advises against relying on this effect alone to deter an attacker. ### 5 free profiles, 41 with Pro The free version offers the five platforms bots expect most, each with its authentic generator tag: **Joomla!, Drupal, PrestaShop, TYPO3, and MediaWiki**. You can also announce **a name of your choice**. WP Masquerade Pro adds 36 profiles, for 41 in total: | Category | Free Free | Added by Pro Pro | | --- | --- | --- | | Portals and CMSs | Drupal, Joomla!, TYPO3 | Concrete CMS, Grav, ProcessWire, Silverstripe CMS, MODX | | Wikis | MediaWiki | DokuWiki | | E-commerce | PrestaShop | OpenCart, Magento | | Blogs and publishing | Default | WordPress, Ghost, Dotclear, Serendipity, b2evolution, Textpattern, Movable Type, Typecho, Bludit, Publii, Pelican, Jekyll, Hugo | | Forums and communities | Default | phpBB, MyBB, SMF, Flarum, Discourse, NodeBB, Vanilla Forums, XenForo, Invision Community, vBulletin, FluxBB, PunBB, bbPress | | Surveys | Default | LimeSurvey, Form Tools | | Custom code | Custom name | Custom name | *Profiles in the Identity tab, under “Software to imitate”.* Joomla!, Drupal, PrestaShop, TYPO3, and MediaWiki, plus DokuWiki and Grav with Pro, come with an authentic generator tag. The other profiles announce their name. Some profiles represent static site generators or legacy software: their presence in the list is not a recommendation to install them. ### Free or Pro #### In the free version Free - Removes the WordPress mention (source code and RSS feeds) - Authentic generator tag for 5 profiles: Joomla!, Drupal, PrestaShop, TYPO3, MediaWiki - Optional custom name and announced version #### With WP Masquerade Pro Pro - 41 imitation profiles (blogs, forums, wikis, e-commerce…) - HTTP headers and JavaScript markers recognized by Wappalyzer, for Joomla!, Drupal, PrestaShop, Magento, MediaWiki, phpBB, and TYPO3 - Cover HTML comment in every page - Markers kept up to date through the [signature feed](https://www.wp-masquerade.com/features/signature-feed-and-updates/), without waiting for a new release ### Identity module levels | Option | Effect | Version | | --- | --- | --- | | Change nothing | WordPress is announced as usual. | Default | | Hide WordPress | Removes the “WordPress” mention from the source code and RSS feeds. | Free | | Announce the chosen profile | Adds the profile’s generator tag (e.g. “Joomla! - Open Source Content Management”). 5 profiles free, 41 with Pro. | Free | | Enhanced imitation | Adds the HTTP headers and JavaScript markers recognized by Wappalyzer. | Pro | | Maximum imitation | Also adds a cover HTML comment in every page. | Pro | *Each option includes the previous ones. Identity tab, under “Announced identity”.* ![Identity tab in the free version: software to imitate, announced version, custom name, and imitation levels, two of them marked Pro](https://www.wp-masquerade.com/media/2026/10/admin-identite-gratuit.webp) *The Identity tab in the free version: levels reserved for Pro carry a label.* ### How to set it up 1. Go to **WP Masquerade → Identity** (the mask icon in the admin menu; "Masquerade Security" if you use the free version on its own). 2. Pick the **software to imitate**, then the imitation level. 3. Optional: enter an **announced version** (leave it empty to announce no version) or a **custom name** that replaces the profile’s name. 4. Save, then check the result in a private window: while you’re logged in, you see the site without the disguise. With Pro, you can also match your [folder names](https://www.wp-masquerade.com/features/file-url-aliases/) to the profile for a more convincing imitation: the “Suggest paths for this profile” button fills in the fields for you (Drupal example: sites/default/files, core, modules, themes). ### Limitations and precautions - Imitation doesn’t fully reproduce the announced software: it adds its best-known fingerprints. - Themes or plugins that output their own generator tag are not corrected automatically. - The HTTP header may be missing from a response served by an upstream cache. - A higher level adds more cover fingerprints: it doesn’t automatically make your site more secure. - WordPress exports and the admin area are not modified. #### Related reading - [WordPress technical links](https://www.wp-masquerade.com/features/wordpress-technical-links/) - [File URL aliases](https://www.wp-masquerade.com/features/file-url-aliases/) - [Bot traps and banning](https://www.wp-masquerade.com/features/bot-traps/) - [Over 200 camouflaged plugins and themes](https://www.wp-masquerade.com/features/camouflaged-plugins/) ### Start free, upgrade to Pro when you’re ready The free version already hides WordPress, moves the login page, blocks [XML-RPC](https://www.wp-masquerade.com/glossary/xml-rpc/) and counts bots. Pro locks down logins, renames file URLs and monitors your sites for you: known vulnerabilities, core integrity, activity log, email alerts and the update status of all your sites in your member area. From €59 per year excl. tax, far less than the cleanup offers whose prices we checked. [Compare the costs](https://www.wp-masquerade.com/pricing/#cout-piratage). [See Pro pricing](https://www.wp-masquerade.com/pricing/) [Download the free version](https://www.wp-masquerade.com/download/) --- Source: https://www.wp-masquerade.com/features/camouflaged-plugins/ Updated: 2026-11-05T20:55:31+00:00 ## Camouflaged WordPress plugins Yoast SEO, Elementor, WooCommerce, WP Rocket, Astra and about a hundred more: what the free version removes, what Pro adds, what stays visible. A WordPress site often gives itself away through its plugins: a generator tag, a signed HTML comment, a `/wp-content/plugins/plugin-name/` URL. Detectors such as Wappalyzer, BuiltWith or WPScan only need one of these clues. WP Masquerade knows the public traces of 250 of the most installed and best-selling plugins and themes: for each one, here is what the free version removes, what Pro removes on top of that, and what stays visible. The free version handles the 50 most common plugins and themes; Pro handles over 200 (250 entries in the list, some grouping a plugin and its premium edition). ### The list, plugin by plugin Search for a plugin by its name or folder, filter by category, or show only the 50 common plugins of the free version, or the ones Pro adds. Click a column header to sort the list. Technical names (variables, classes, cookies) are given exactly as detectors read them. A name in blue, followed by an arrow, opens the plugin’s profile: overview, strengths and limitations, recommended settings and masking details. Profiles are being published progressively. *250 plugins and themes* | Plugin | Category | Hidden with | Traces removed | Still visible | Version | | --- | --- | --- | --- | --- | --- | | [All in One SEO](https://www.wp-masquerade.com/features/camouflaged-plugins/all-in-one-seo/) Plugin | SEO | Free | - generator tag - signed HTML comments - JSON-LD block class - Pro folder name - Pro tag IDs | No known trace | 5.0.4 | | [AMP](https://www.wp-masquerade.com/features/camouflaged-plugins/amp/) Plugin | SEO | Pro | - Pro generator tag - Pro folder name - Pro tag IDs | - CSS classes `amp-* (AMP pages)` | 2.5.5 | | [Breadcrumb NavXT](https://www.wp-masquerade.com/features/camouflaged-plugins/breadcrumb-navxt/) Plugin | SEO | Pro | Nothing to remove | - CSS classes `breadcrumbs (block wrapper)` | 7.5.2 | | [Broken Link Checker](https://www.wp-masquerade.com/features/camouflaged-plugins/broken-link-checker/) Plugin | SEO | Pro | - Pro folder name - Pro tag IDs | - CSS classes `broken_link (option to style broken links)` | 2.4.15 | | [Rank Math SEO](https://www.wp-masquerade.com/features/camouflaged-plugins/rank-math-seo/) Plugin | SEO | Free | - signed HTML comments - JSON-LD block class - Pro folder name - Pro tag IDs | - CSS classes `rank-math-breadcrumb` | 1.0.280 | | [Redirection](https://www.wp-masquerade.com/features/camouflaged-plugins/redirection/) Plugin | SEO | Free | - branded HTTP header | No known trace | 5.10.1 | | [SEOKEY](https://www.wp-masquerade.com/features/camouflaged-plugins/seokey/) Plugin | SEO | Pro | - Pro folder name - Pro tag IDs | No known trace | 2.0.3 | | [SEOPress](https://www.wp-masquerade.com/features/camouflaged-plugins/seopress/) Plugin | SEO | Pro | - Pro folder name - Pro tag IDs | No known trace | 10.4 | | [SureRank SEO](https://www.wp-masquerade.com/features/camouflaged-plugins/surerank/) Plugin | SEO | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | No known trace | 1.10.3 | | [The SEO Framework](https://www.wp-masquerade.com/features/camouflaged-plugins/the-seo-framework/) Plugin | SEO | Pro | - Pro signed HTML comments | No known trace | 5.2.0 | | [XML Sitemap Generator for Google](https://www.wp-masquerade.com/features/camouflaged-plugins/xml-sitemap-generator-for-google/) Plugin | SEO | Pro | No known public trace | No known trace | 4.1.25 | | [Yoast SEO](https://www.wp-masquerade.com/features/camouflaged-plugins/yoast-seo/) Plugin | SEO | Free | - signed HTML comments - JSON-LD block class - Pro folder name - Pro tag IDs | - CSS classes `yoast-breadcrumbs` | 28.8 | | [Autoptimize](https://www.wp-masquerade.com/features/camouflaged-plugins/autoptimize/) Plugin | Cache and performance | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs - Pro generated-file folders | - file names `autoptimize_*.css, autoptimize_*.js` | 3.1.17 | | [Breeze](https://www.wp-masquerade.com/features/camouflaged-plugins/breeze/) Plugin | Cache and performance | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - text in the cache file `Cache served by breeze CACHE` - server or cache headers `X-Breeze-Cache-Write` | 2.6.3 | | [Cache Enabler](https://www.wp-masquerade.com/features/camouflaged-plugins/cache-enabler/) Plugin | Cache and performance | Pro | Nothing to remove | - text in the cache file `Cache Enabler by KeyCDN` | 1.8.17 | | [Cloudflare](https://www.wp-masquerade.com/features/camouflaged-plugins/cloudflare/) Plugin | Cache and performance | Pro | Nothing to remove | - server or cache headers `cf-ray, cf-cache-status (Cloudflare network)` | 4.14.5 | | [Hummingbird](https://www.wp-masquerade.com/features/camouflaged-plugins/hummingbird/) Plugin | Cache and performance | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs - Pro generated-file folders | - server or cache headers `Hummingbird-Cache` | 3.21.2 | | [LiteSpeed Cache](https://www.wp-masquerade.com/features/camouflaged-plugins/litespeed-cache/) Plugin | Cache and performance | Free | - signed HTML comments - Pro folder name - Pro tag IDs - Pro generated-file folders | - server or cache headers `X-LiteSpeed-Cache` | 7.9.2 | | [NitroPack](https://www.wp-masquerade.com/features/camouflaged-plugins/nitropack/) Plugin | Cache and performance | Pro | - Pro folder name - Pro tag IDs | - text in the cache file `` - server or cache headers `X-Nitro-Cache` - files served by the vendor `*.nitrocdn.com` | 1.20.3 | | [OMGF (Host Google Fonts Locally)](https://www.wp-masquerade.com/features/camouflaged-plugins/omgf/) Plugin | Cache and performance | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | No known trace | 6.4.1 | | [Speed Optimizer (SiteGround)](https://www.wp-masquerade.com/features/camouflaged-plugins/speed-optimizer-siteground/) Plugin | Cache and performance | Free | - Pro folder name - Pro tag IDs - Pro generated-file folders | - server or cache headers `X-Cache-Enabled, X-Proxy-Cache` | 7.8.5 | | [SpeedyCache](https://www.wp-masquerade.com/features/camouflaged-plugins/speedycache/) Plugin | Cache and performance | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - text in the cache file `Cache by SpeedyCache https://speedycache.com, Cached by SpeedyCache, it took {x}s` - server or cache headers `x-speedycache-source` - JavaScript variables `speedycachell (lazy loading only)` | 1.4.3 | | [W3 Total Cache](https://www.wp-masquerade.com/features/camouflaged-plugins/w3-total-cache/) Plugin | Cache and performance | Pro | - Pro signed HTML comments - Pro branded HTTP header - Pro folder name - Pro tag IDs - Pro generated-file folders | - server or cache headers `X-Powered-By: W3 Total Cache` | 2.11.0 | | [WP Fastest Cache](https://www.wp-masquerade.com/features/camouflaged-plugins/wp-fastest-cache/) Plugin | Cache and performance | Free | - signed HTML comments - Pro folder name - Pro tag IDs - Pro generated-file folders | - JavaScript variables `Wpfcll` | 1.5.3 | | [WP Rocket](https://www.wp-masquerade.com/features/camouflaged-plugins/wp-rocket/) Plugin, commercial | Cache and performance | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - text in the cache file `Cached for great performance` - JavaScript variables `RocketLazyLoadScripts, rocket_lazy` - tag IDs `wpr-usedcss` - server or cache headers `X-Rocket-Nginx-Bypass` | 3.24 | | [WP Super Cache](https://www.wp-masquerade.com/features/camouflaged-plugins/wp-super-cache/) Plugin | Cache and performance | Free | - signed HTML comments | - server or cache headers `X-WP-Super-Cache` | 3.1.4 | | [WP-Optimize](https://www.wp-masquerade.com/features/camouflaged-plugins/wp-optimize/) Plugin | Cache and performance | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs - Pro generated-file folders | No known trace | 4.7.0 | | [Advanced Google reCAPTCHA](https://www.wp-masquerade.com/features/camouflaged-plugins/advanced-google-recaptcha/) Plugin | Security | Pro | - Pro folder name - Pro tag IDs | - files served by the vendor `www.google.com/recaptcha` | 5.42 | | [Akismet](https://www.wp-masquerade.com/features/camouflaged-plugins/akismet/) Plugin | Security | Free | - Pro folder name - Pro tag IDs | - JavaScript variables `ak_js` | 5.7.2 | | [All-In-One Security (AIOS)](https://www.wp-masquerade.com/features/camouflaged-plugins/all-in-one-security-aios/) Plugin | Security | Pro | - Pro folder name - Pro tag IDs | No known trace | 5.5.0 | | [Antispam Bee](https://www.wp-masquerade.com/features/camouflaged-plugins/antispam-bee/) Plugin | Security | Pro | - Pro folder name - Pro tag IDs | No known trace | 2.11.13 | | [CleanTalk Anti-Spam](https://www.wp-masquerade.com/features/camouflaged-plugins/cleantalk-anti-spam/) Plugin | Security | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `ctPublic, ctPublicFunctions` - cookies `apbct_*` - files served by the vendor `fd.cleantalk.org, moderate.cleantalk.org` | 6.91 | | [Limit Login Attempts Reloaded](https://www.wp-masquerade.com/features/camouflaged-plugins/limit-login-attempts-reloaded/) Plugin | Security | Free | - Pro folder name - Pro tag IDs | - JavaScript variables `llarLoginCacheCheck (login page)` - cookies `llar_login_flow (login page)` | 3.3.10 | | [Loginizer](https://www.wp-masquerade.com/features/camouflaged-plugins/loginizer/) Plugin | Security | Free | - Pro folder name - Pro tag IDs | No known trace | 2.1.3 | | [Really Simple Security](https://www.wp-masquerade.com/features/camouflaged-plugins/really-simple-security/) Plugin | Security | Free | - marker attribute - Pro folder name - Pro tag IDs | No known trace | 9.8.4 | | [Security Optimizer (SiteGround)](https://www.wp-masquerade.com/features/camouflaged-plugins/security-optimizer-siteground/) Plugin | Security | Free | - Pro folder name - Pro tag IDs | No known trace | 1.6.9 | | [Simple Cloudflare Turnstile](https://www.wp-masquerade.com/features/camouflaged-plugins/simple-cloudflare-turnstile/) Plugin | Security | Pro | - Pro folder name - Pro tag IDs | - CSS classes `cf-turnstile` - files served by the vendor `challenges.cloudflare.com` | 1.44.5 | | [Simple History](https://www.wp-masquerade.com/features/camouflaged-plugins/simple-history/) Plugin | Security | Pro | - Pro folder name - Pro tag IDs | No known trace | 5.36.0 | | [Solid Security](https://www.wp-masquerade.com/features/camouflaged-plugins/solid-security/) Plugin | Security | Pro | - Pro folder name - Pro tag IDs | No known trace | 10.0.6 | | [Sucuri Security](https://www.wp-masquerade.com/features/camouflaged-plugins/sucuri-security/) Plugin | Security | Pro | Nothing to remove | - server or cache headers `X-Sucuri-ID, X-Sucuri-Cache (Sucuri firewall only)` | 2.8.1 | | [Wordfence](https://www.wp-masquerade.com/features/camouflaged-plugins/wordfence/) Plugin | Security | Free | - Pro folder name - Pro tag IDs | No known trace | 9.0.2 | | [WP Activity Log](https://www.wp-masquerade.com/features/camouflaged-plugins/wp-activity-log/) Plugin | Security | Pro | - Pro folder name - Pro tag IDs | No known trace | 5.6.8 | | [WP Armour (Honeypot Anti Spam)](https://www.wp-masquerade.com/features/camouflaged-plugins/wp-armour/) Plugin | Security | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `wpa_field_info` - CSS classes `wpa_*` | 2.4.02 | | [All-in-One WP Migration](https://www.wp-masquerade.com/features/camouflaged-plugins/all-in-one-wp-migration/) Plugin | Backup and site management | Free | No known public trace | No known trace | 7.113 | | [Backuply](https://www.wp-masquerade.com/features/camouflaged-plugins/backuply/) Plugin | Backup and site management | Pro | No known public trace | No known trace | 1.6.0 | | [Better Search Replace](https://www.wp-masquerade.com/features/camouflaged-plugins/better-search-replace/) Plugin | Backup and site management | Free | No known public trace | No known trace | 1.4.11 | | [Duplicator](https://www.wp-masquerade.com/features/camouflaged-plugins/duplicator/) Plugin | Backup and site management | Free | No known public trace | No known trace | 5.1.0 | | [MainWP Child](https://www.wp-masquerade.com/features/camouflaged-plugins/mainwp-child/) Plugin | Backup and site management | Pro | No known public trace | No known trace | 6.4 | | [ManageWP Worker](https://www.wp-masquerade.com/features/camouflaged-plugins/managewp-worker/) Plugin | Backup and site management | Pro | No known public trace | No known trace | 4.9.39 | | [Query Monitor](https://www.wp-masquerade.com/features/camouflaged-plugins/query-monitor/) Plugin | Backup and site management | Pro | - Pro folder name - Pro tag IDs | No known trace | 4.1.1 | | [UpdraftPlus](https://www.wp-masquerade.com/features/camouflaged-plugins/updraftplus/) Plugin | Backup and site management | Free | No known public trace | No known trace | 1.26.14 | | [WPvivid Backup & Migration](https://www.wp-masquerade.com/features/camouflaged-plugins/wpvivid-backup-migration/) Plugin | Backup and site management | Pro | No known public trace | No known trace | 0.9.139 | | [Contact Form 7](https://www.wp-masquerade.com/features/camouflaged-plugins/contact-form-7/) Plugin | Forms | Free | - Pro folder name - Pro tag IDs | - JavaScript variables `wpcf7` - CSS classes `wpcf7, wpcf7-form` - REST routes `/wp-json/contact-form-7/v1/` | 6.2.4.1 | | [Database Addon for Contact Form 7 (CFDB7)](https://www.wp-masquerade.com/features/camouflaged-plugins/cfdb7/) Plugin | Forms | Pro | - Pro generated-file folders | No known trace | 1.4.2 | | [Flamingo](https://www.wp-masquerade.com/features/camouflaged-plugins/flamingo/) Plugin | Forms | Pro | No known public trace | No known trace | 2.6.4 | | [Fluent Forms](https://www.wp-masquerade.com/features/camouflaged-plugins/fluent-forms/) Plugin | Forms | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `fluentFormVars, fluent_form_ff_form_instance_*` - CSS classes `fluentform, ff-el-*, frm-fluent-form` | 6.2.16 | | [Formidable Forms](https://www.wp-masquerade.com/features/camouflaged-plugins/formidable-forms/) Plugin | Forms | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - CSS classes `frm_forms, frm_form_field` | 7.0 | | [Forminator](https://www.wp-masquerade.com/features/camouflaged-plugins/forminator/) Plugin | Forms | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `ForminatorFront` - CSS classes `forminator-ui, forminator-custom-form` | 1.58.3 | | [Gravity Forms](https://www.wp-masquerade.com/features/camouflaged-plugins/gravity-forms/) Plugin, commercial | Forms | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `gform, gf_global` - CSS classes `gform_wrapper, gfield` - REST routes `/wp-json/gf/v2/` | 3.2.1 | | [MetForm](https://www.wp-masquerade.com/features/camouflaged-plugins/metform/) Plugin | Forms | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - CSS classes `metform-*, mf-*` | 4.3.4 | | [Ninja Forms](https://www.wp-masquerade.com/features/camouflaged-plugins/ninja-forms/) Plugin | Forms | Pro | - Pro folder name - Pro tag IDs | - tag IDs `tmpl-nf-*` - JavaScript variables `nfForms, nfFrontEnd` - CSS classes `nf-form-cont, nf-field-*` | 3.15.7 | | [Really Simple CAPTCHA](https://www.wp-masquerade.com/features/camouflaged-plugins/really-simple-captcha/) Plugin | Forms | Pro | - Pro folder name - Pro generated-file folders | No known trace | 2.5 | | [SureForms](https://www.wp-masquerade.com/features/camouflaged-plugins/sureforms/) Plugin | Forms | Pro | - Pro folder name - Pro tag IDs | - CSS classes `srfm-*` | 2.13.0 | | [WPForms](https://www.wp-masquerade.com/features/camouflaged-plugins/wpforms/) Plugin | Forms | Free | - signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `wpforms, wpforms_settings` - CSS classes `wpforms-*` | 2.0.3.1 | | [Astra](https://www.wp-masquerade.com/features/camouflaged-plugins/astra/) Theme | Builders and themes | Free | - version number in a class - Pro folder name - Pro tag IDs - Pro generated-file folders | - JavaScript variables `astra` - CSS classes `ast-*, astra-*` | 4.14.2 | | [Avada](https://www.wp-masquerade.com/features/camouflaged-plugins/avada/) Theme, commercial | Builders and themes | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - JavaScript variables `fusionJSVars, avadaHeaderVars` - CSS classes `fusion-*, awb-*` | 7.16.4 | | [Beaver Builder](https://www.wp-masquerade.com/features/camouflaged-plugins/beaver-builder/) Plugin | Builders and themes | Pro | - Pro version number in a class - Pro folder name - Pro tag IDs - Pro generated-file folders | - CSS classes `fl-builder, fl-row, fl-node-*, fl-no-js` | 2.11.1.2 | | [BeTheme](https://www.wp-masquerade.com/features/camouflaged-plugins/betheme/) Theme, commercial | Builders and themes | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs - Pro generated-file folders | - JavaScript variables `mfn` - CSS classes `mfn-*` | 28.4.2 | | [Blocksy](https://www.wp-masquerade.com/features/camouflaged-plugins/blocksy/) Theme | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `blocksyJsonP` - CSS classes `ct-*` | 2.1.61 | | [Breakdance](https://www.wp-masquerade.com/features/camouflaged-plugins/breakdance/) Plugin, commercial | Builders and themes | Pro | - Pro folder name - Pro generated-file folders | - JavaScript variables `BreakdanceFrontend` - CSS classes `bde-*, breakdance` | 2.8.3 | | [Bricks](https://www.wp-masquerade.com/features/camouflaged-plugins/bricks/) Theme, commercial | Builders and themes | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - JavaScript variables `bricksData` - CSS classes `brxe-*, brx-body, bricks-is-frontend` - REST routes `/wp-json/bricks/v1/` | 2.4.5 | | [CoBlocks](https://www.wp-masquerade.com/features/camouflaged-plugins/coblocks/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - CSS classes `wp-block-coblocks-*` | 3.1.17 | | [Custom Fonts](https://www.wp-masquerade.com/features/camouflaged-plugins/custom-fonts/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs | No known trace | 2.1.17 | | [Divi](https://www.wp-masquerade.com/features/camouflaged-plugins/divi/) Theme, commercial | Builders and themes | Pro | - Pro generator tag - Pro folder name - Pro tag IDs - Pro generated-file folders | - JavaScript variables `DIVI, et_pb_custom` - CSS classes `et_pb_*, et-db` | 4.27.9 | | [Elementor](https://www.wp-masquerade.com/features/camouflaged-plugins/elementor/) Plugin | Builders and themes | Free | - generator tag - Pro folder name - Pro tag IDs - Pro generated-file folders | - tag IDs `elementor-frontend-css` - JavaScript variables `elementorFrontendConfig, elementorFrontend` - CSS classes `elementor-*, e-con` - cookies `elementor_pro_login (Elementor Pro login form)` | 4.3.5 | | [ElementsKit Elementor Addons](https://www.wp-masquerade.com/features/camouflaged-plugins/elementskit/) Plugin | Builders and themes | Free | - Pro folder name - Pro tag IDs | - JavaScript variables `elementskit, ElementsKit_Helper` - CSS classes `ekit-*, elementskit-*` | 4.1.0 | | [Enfold](https://www.wp-masquerade.com/features/camouflaged-plugins/enfold/) Theme, commercial | Builders and themes | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - file names `avia-merged-styles-*.css` - JavaScript variables `avia_framework_globals` - CSS classes `avia-*, av-*` | 8.3 | | [Essential Addons for Elementor](https://www.wp-masquerade.com/features/camouflaged-plugins/essential-addons-for-elementor/) Plugin | Builders and themes | Free | - signed HTML comments - Pro folder name - Pro tag IDs - Pro generated-file folders | - CSS classes `eael-*` | 6.8.8 | | [Essential Blocks](https://www.wp-masquerade.com/features/camouflaged-plugins/essential-blocks/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - JavaScript variables `EssentialBlocksLocalize, eb_conditional_localize` - CSS classes `eb-*, wp-block-essential-blocks-*` | 6.5.3 | | [Flatsome](https://www.wp-masquerade.com/features/camouflaged-plugins/flatsome/) Theme, commercial | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `flatsomeVars` - CSS classes `ux-*` | 3.20.12 | | [GenerateBlocks](https://www.wp-masquerade.com/features/camouflaged-plugins/generateblocks/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - CSS classes `gb-*` | 2.5.0 | | [GeneratePress](https://www.wp-masquerade.com/features/camouflaged-plugins/generatepress/) Theme | Builders and themes | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - JavaScript variables `generatepressMenu` - CSS classes `gp-icon, generate-*` | 3.6.1 | | [GreenShift](https://www.wp-masquerade.com/features/camouflaged-plugins/greenshift/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - CSS classes `gspb_*, gspbody, gspb-bodyfront` | 13.2.3 | | [Gutenberg](https://www.wp-masquerade.com/features/camouflaged-plugins/gutenberg/) Plugin | Builders and themes | Free | - Pro folder name | - CSS classes `wp-block-*` | 24.3.0 | | [Happy Addons for Elementor](https://www.wp-masquerade.com/features/camouflaged-plugins/happy-addons/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - CSS classes `ha-*` | 3.51.0 | | [Hello Biz](https://www.wp-masquerade.com/features/camouflaged-plugins/hello-biz/) Theme | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - CSS classes `ehbiz-default` | 1.2.2 | | [Hello Elementor](https://www.wp-masquerade.com/features/camouflaged-plugins/hello-elementor/) Theme | Builders and themes | Free | - Pro folder name - Pro tag IDs | - CSS classes `hello-elementor-default` | 3.5.1 | | [Hestia](https://www.wp-masquerade.com/features/camouflaged-plugins/hestia/) Theme | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `hestiaViewcart` - CSS classes `hestia-*, hestia_*` | 3.3.9 | | [Jeg Elementor Kit](https://www.wp-masquerade.com/features/camouflaged-plugins/jeg-kit-for-elementor/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - tag IDs `jeg_dynamic_css` - JavaScript variables `jkit_ajax_url` - CSS classes `jkit-*, jkit-color-scheme` | 3.3.0 | | [JetElements for Elementor](https://www.wp-masquerade.com/features/camouflaged-plugins/jetelements/) Plugin, commercial | Builders and themes | Pro | - Pro folder name - Pro tag IDs | No known trace | 2.2.14 | | [Kadence](https://www.wp-masquerade.com/features/camouflaged-plugins/kadence/) Theme | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `kadenceConfig` - CSS classes `kadence-*` | 1.5.2 | | [Kadence Blocks](https://www.wp-masquerade.com/features/camouflaged-plugins/kadence-blocks/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - CSS classes `kb-*, wp-block-kadence-*` | 3.8.1 | | [Kirki Customizer Framework](https://www.wp-masquerade.com/features/camouflaged-plugins/kirki/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - tag IDs `kirki-inline-styles, kirki-viewport-lists, kirki-variable-lists` - JavaScript variables `kirkiViewports, kirkiCSSVariable, wp_kirki` | 6.4.1 | | [Neve](https://www.wp-masquerade.com/features/camouflaged-plugins/neve/) Theme | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `NeveProperties` - CSS classes `neve-*, nv-*` | 4.2.17 | | [OceanWP](https://www.wp-masquerade.com/features/camouflaged-plugins/oceanwp/) Theme | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `oceanwpLocalize` - CSS classes `oceanwp-theme, oceanwp-*, owp-*` | 4.2.8 | | [One Click Demo Import](https://www.wp-masquerade.com/features/camouflaged-plugins/one-click-demo-import/) Plugin | Builders and themes | Pro | No known public trace | No known trace | 3.4.1 | | [Otter Blocks](https://www.wp-masquerade.com/features/camouflaged-plugins/otter-blocks/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - CSS classes `wp-block-themeisle-blocks-*` | 3.2.8 | | [Oxygen](https://www.wp-masquerade.com/features/camouflaged-plugins/oxygen-builder/) Plugin, commercial | Builders and themes | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - JavaScript variables `OxygenFrontend (Oxygen 6)` - CSS classes `oxy-*, ct-*, oxygen-body` | 4.9.8 | | [Pagelayer](https://www.wp-masquerade.com/features/camouflaged-plugins/pagelayer/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - tag IDs `pagelayer-global-styles, pagelayer-woocommerce-styles` - JavaScript variables `pagelayer_ajaxurl, pagelayer_settings` - CSS classes `pagelayer-*` | 2.2.2 | | [PowerPack for Elementor](https://www.wp-masquerade.com/features/camouflaged-plugins/powerpack-elementor/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `pp` - CSS classes `pp-*` | 3.1.4 | | [Premium Addons for Elementor](https://www.wp-masquerade.com/features/camouflaged-plugins/premium-addons-for-elementor/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - CSS classes `premium-*` | 4.11.117 | | [Qi Addons for Elementor](https://www.wp-masquerade.com/features/camouflaged-plugins/qi-addons-for-elementor/) Plugin | Builders and themes | Pro | - Pro version number in a class - Pro folder name - Pro tag IDs | - JavaScript variables `qodefQiAddonsGlobal` - CSS classes `qodef-*, qodef-qi--no-touch` | 1.11.2 | | [Redux Framework](https://www.wp-masquerade.com/features/camouflaged-plugins/redux-framework/) Plugin | Builders and themes | Pro | - Pro generator tag - Pro folder name - Pro tag IDs | No known trace | 4.5.17 | | [Royal Elementor Addons](https://www.wp-masquerade.com/features/camouflaged-plugins/royal-elementor-addons/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - CSS classes `wpr-*` | 1.7.1070 | | [SeedProd (Coming Soon Page, Maintenance Mode)](https://www.wp-masquerade.com/features/camouflaged-plugins/seedprod/) Plugin | Builders and themes | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - CSS classes `sp-*` | 6.20.10 | | [SiteOrigin Page Builder](https://www.wp-masquerade.com/features/camouflaged-plugins/siteorigin-page-builder/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - CSS classes `panel-grid, so-panel, sow-*` | 2.38.0 | | [Spectra](https://www.wp-masquerade.com/features/camouflaged-plugins/spectra/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - CSS classes `uagb-*, wp-block-uagb-*` | 2.20.5 | | [Stackable](https://www.wp-masquerade.com/features/camouflaged-plugins/stackable/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - CSS classes `stk-*, wp-block-stackable-*` | 3.20.3 | | [Sticky Header Effects for Elementor](https://www.wp-masquerade.com/features/camouflaged-plugins/sticky-header-effects-for-elementor/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - CSS classes `she-*` | 2.2.3 | | [Storefront](https://www.wp-masquerade.com/features/camouflaged-plugins/storefront/) Theme | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `storefrontScreenReaderText` - CSS classes `storefront-*` | 4.6.2 | | [Sydney](https://www.wp-masquerade.com/features/camouflaged-plugins/sydney/) Theme | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - CSS classes `sydney-*` | 2.73 | | [Thrive Architect](https://www.wp-masquerade.com/features/camouflaged-plugins/thrive-architect/) Plugin, commercial | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - tag IDs `tcb-style-base-*` - JavaScript variables `tve_frontend_options, tve_dash_front` - CSS classes `tve_*, tcb-*, thrv_*` | 11.1 | | [Twenty Seventeen](https://www.wp-masquerade.com/features/camouflaged-plugins/twenty-seventeen/) Theme | Builders and themes | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `twentyseventeenScreenReaderText` | 4.2 | | [Twenty Twenty](https://www.wp-masquerade.com/features/camouflaged-plugins/twenty-twenty/) Theme | Builders and themes | Pro | - Pro folder name - Pro tag IDs | No known trace | 3.3 | | [Twenty Twenty-Five](https://www.wp-masquerade.com/features/camouflaged-plugins/twenty-twenty-five/) Theme | Builders and themes | Free | - Pro folder name - Pro tag IDs | No known trace | 1.5 | | [Twenty Twenty-Four](https://www.wp-masquerade.com/features/camouflaged-plugins/twenty-twenty-four/) Theme | Builders and themes | Pro | - Pro folder name - Pro tag IDs | No known trace | 1.6 | | [Twenty Twenty-One](https://www.wp-masquerade.com/features/camouflaged-plugins/twenty-twenty-one/) Theme | Builders and themes | Pro | - Pro folder name - Pro tag IDs | No known trace | 2.9 | | [Twenty Twenty-Three](https://www.wp-masquerade.com/features/camouflaged-plugins/twenty-twenty-three/) Theme | Builders and themes | Pro | - Pro folder name - Pro tag IDs | No known trace | 1.7 | | [Ultimate Addons for Elementor](https://www.wp-masquerade.com/features/camouflaged-plugins/ultimate-addons-for-elementor/) Plugin | Builders and themes | Free | - Pro folder name - Pro tag IDs | - CSS classes `hfe-*, ehf-template-*` | 2.9.6 | | [Unlimited Elements for Elementor](https://www.wp-masquerade.com/features/camouflaged-plugins/unlimited-elements-for-elementor/) Plugin | Builders and themes | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - CSS classes `ue-*, uc_*` | 2.0.28 | | [Woodmart](https://www.wp-masquerade.com/features/camouflaged-plugins/woodmart/) Theme, commercial | Builders and themes | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - JavaScript variables `woodmart_settings, woodmart_page_css` - CSS classes `wd-*` | 8.6.4 | | [WPBakery Page Builder](https://www.wp-masquerade.com/features/camouflaged-plugins/wpbakery-page-builder/) Plugin, commercial | Builders and themes | Pro | - Pro generator tag - Pro version number in a class - Pro folder name - Pro tag IDs | - CSS classes `vc_row, wpb_*, wpb-js-composer` | 9.0.1 | | [Converter for Media](https://www.wp-masquerade.com/features/camouflaged-plugins/converter-for-media/) Plugin | Images and sliders | Pro | - Pro folder name - Pro generated-file folders | No known trace | 6.7.1 | | [Enable Media Replace](https://www.wp-masquerade.com/features/camouflaged-plugins/enable-media-replace/) Plugin | Images and sliders | Pro | No known public trace | No known trace | 4.2.3 | | [Envira Gallery](https://www.wp-masquerade.com/features/camouflaged-plugins/envira-gallery/) Plugin | Images and sliders | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `envira_lazy_load` - CSS classes `envira-*, enviratope` | 1.16.3 | | [EWWW Image Optimizer](https://www.wp-masquerade.com/features/camouflaged-plugins/ewww-image-optimizer/) Plugin | Images and sliders | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `ewww_webp_supported` | 8.9.1 | | [Firelight Lightbox (Easy FancyBox)](https://www.wp-masquerade.com/features/camouflaged-plugins/firelight-lightbox/) Plugin | Images and sliders | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `easy_fancybox_handler, fb_IMG_select` | 2.3.25 | | [FooGallery](https://www.wp-masquerade.com/features/camouflaged-plugins/foogallery/) Plugin | Images and sliders | Pro | - Pro folder name - Pro tag IDs | - tag IDs `foogallery-delayed-loader` - JavaScript variables `FooGallery_mobileSize` - CSS classes `foogallery, fg-*` | 3.3.17 | | [Image Optimizer (Elementor)](https://www.wp-masquerade.com/features/camouflaged-plugins/image-optimizer-elementor/) Plugin | Images and sliders | Pro | - Pro folder name - Pro tag IDs | No known trace | 1.7.7 | | [Imagify](https://www.wp-masquerade.com/features/camouflaged-plugins/imagify/) Plugin | Images and sliders | Pro | - Pro folder name - Pro tag IDs | No known trace | 2.3.4 | | [MetaSlider](https://www.wp-masquerade.com/features/camouflaged-plugins/metaslider/) Plugin | Images and sliders | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `metaslider_jQuery` - CSS classes `metaslider, metaslider-plugin` | 3.114.0 | | [Modula Image Gallery](https://www.wp-masquerade.com/features/camouflaged-plugins/modula-image-gallery/) Plugin | Images and sliders | Pro | - Pro folder name - Pro tag IDs | - tag IDs `modula-gallery-styles` - JavaScript variables `modulaMetaVars, ModulaShareButtons` - CSS classes `modula-*, modula-best-grid-gallery` | 3.0.17 | | [NextGEN Gallery](https://www.wp-masquerade.com/features/camouflaged-plugins/nextgen-gallery/) Plugin | Images and sliders | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - JavaScript variables `nextgen_lightbox_settings` - CSS classes `ngg-*` | 4.5.5 | | [Optimole](https://www.wp-masquerade.com/features/camouflaged-plugins/optimole/) Plugin | Images and sliders | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `optimoleData` - files served by the vendor `*.i.optimole.com` | 4.2.18 | | [Photo Gallery (10Web)](https://www.wp-masquerade.com/features/camouflaged-plugins/photo-gallery/) Plugin | Images and sliders | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - JavaScript variables `bwg_objectsL10n, bwg_ajax_url, twb` | 1.8.48 | | [Presto Player](https://www.wp-masquerade.com/features/camouflaged-plugins/presto-player/) Plugin | Images and sliders | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `prestoPlayer, prestoComponents` - CSS classes `presto-*` | 4.5.4 | | [Regenerate Thumbnails](https://www.wp-masquerade.com/features/camouflaged-plugins/regenerate-thumbnails/) Plugin | Images and sliders | Pro | No known public trace | No known trace | 3.1.6 | | [Safe SVG](https://www.wp-masquerade.com/features/camouflaged-plugins/safe-svg/) Plugin | Images and sliders | Pro | - Pro folder name - Pro tag IDs | No known trace | 2.5.2 | | [ShortPixel Image Optimizer](https://www.wp-masquerade.com/features/camouflaged-plugins/shortpixel-image-optimizer/) Plugin | Images and sliders | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `spPicTest (WebP/AVIF delivery only)` | 6.6.1 | | [Slider Revolution](https://www.wp-masquerade.com/features/camouflaged-plugins/slider-revolution/) Plugin, commercial | Images and sliders | Pro | - Pro generator tag - Pro signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `RS_MODULES, revapi*` - CSS classes `rs-module, sr7-*` | 7.2.7 | | [Smart Slider 3](https://www.wp-masquerade.com/features/camouflaged-plugins/smart-slider-3/) Plugin | Images and sliders | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `_N2` - CSS classes `n2-*, n2-ss-*` | 3.5.1.40 | | [Smush](https://www.wp-masquerade.com/features/camouflaged-plugins/smush/) Plugin | Images and sliders | Pro | - Pro folder name - Pro tag IDs | No known trace | 4.3.5 | | [SVG Support](https://www.wp-masquerade.com/features/camouflaged-plugins/svg-support/) Plugin | Images and sliders | Free | - Pro folder name - Pro tag IDs | No known trace | 2.6.3 | | [WebP Express](https://www.wp-masquerade.com/features/camouflaged-plugins/webp-express/) Plugin | Images and sliders | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | No known trace | 0.25.16 | | [Cart Abandonment Recovery for WooCommerce](https://www.wp-masquerade.com/features/camouflaged-plugins/cart-abandonment-recovery/) Plugin | E-commerce | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `wcf_ca_vars (checkout page)` - cookies `wcf_ca_skip_track_data` | 2.2.2 | | [CartFlows](https://www.wp-masquerade.com/features/camouflaged-plugins/cartflows/) Plugin | E-commerce | Pro | - Pro signed HTML comments - Pro version number in a class - Pro folder name - Pro tag IDs | - JavaScript variables `cartflows (flow steps)` - CSS classes `wcf-*` | 3.3.1 | | [Checkout Field Editor for WooCommerce](https://www.wp-masquerade.com/features/camouflaged-plugins/checkout-field-editor-for-woocommerce/) Plugin | E-commerce | Pro | - Pro folder name - Pro tag IDs | - CSS classes `thwcfd-* (checkout page)` | 2.2.1 | | [Easy Digital Downloads](https://www.wp-masquerade.com/features/camouflaged-plugins/easy-digital-downloads/) Plugin | E-commerce | Pro | - Pro generator tag - Pro signed HTML comments - Pro folder name - Pro tag IDs - Pro generated-file folders | - JavaScript variables `edd_scripts` - CSS classes `edd-*, edd_*, edd-js-none` | 3.7.3 | | [FiboSearch (Ajax Search for WooCommerce)](https://www.wp-masquerade.com/features/camouflaged-plugins/fibosearch/) Plugin | E-commerce | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `dgwt_wcas` - CSS classes `dgwt-wcas-*` | 1.34.3 | | [GiveWP](https://www.wp-masquerade.com/features/camouflaged-plugins/givewp/) Plugin | E-commerce | Pro | - Pro generator tag - Pro signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `giveApiSettings, give_global_vars` - CSS classes `give-*, give-test-mode` | 4.19.1.1 | | [Google for WooCommerce](https://www.wp-masquerade.com/features/camouflaged-plugins/google-for-woocommerce/) Plugin | E-commerce | Pro | - Pro signed HTML comments - Pro Google developer ID - Pro folder name - Pro tag IDs | - JavaScript variables `gla_*` | 3.10.0 | | [Mailchimp for WooCommerce](https://www.wp-masquerade.com/features/camouflaged-plugins/mailchimp-for-woocommerce/) Plugin | E-commerce | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `mailchimp_public_data` - files served by the vendor `chimpstatic.com` | 6.3 | | [Meta for WooCommerce (Facebook for WooCommerce)](https://www.wp-masquerade.com/features/camouflaged-plugins/meta-for-woocommerce/) Plugin | E-commerce | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - files served by the vendor `connect.facebook.net` | 3.7.8 | | [PDF Invoices & Packing Slips for WooCommerce](https://www.wp-masquerade.com/features/camouflaged-plugins/pdf-invoices-packing-slips-woocommerce/) Plugin | E-commerce | Pro | - Pro folder name - Pro tag IDs | No known trace | 5.16.6 | | [TI WooCommerce Wishlist](https://www.wp-masquerade.com/features/camouflaged-plugins/ti-woocommerce-wishlist/) Plugin | E-commerce | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `tinvwl_add_to_wishlist` - CSS classes `tinvwl-*, tinvwl-theme-style` | 2.14.2 | | [Variation Swatches for WooCommerce](https://www.wp-masquerade.com/features/camouflaged-plugins/variation-swatches-for-woocommerce/) Plugin | E-commerce | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `woo_variation_swatches_options` - CSS classes `woo-variation-swatches, wvs-*` | 2.6.2 | | [WooCommerce](https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce/) Plugin | E-commerce | Free | - generator tag - signed HTML comments - Pro folder name - Pro tag IDs | - file names `woocommerce.min.js` - JavaScript variables `woocommerce_params, wc_add_to_cart_params` - CSS classes `woocommerce, woocommerce-no-js` - cookies `woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_*, woocommerce_recently_viewed (Recently Viewed Products widget)` - REST routes `/wp-json/wc/store/` | 11.2.1 | | [WooCommerce PayPal Payments](https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce-paypal-payments/) Plugin | E-commerce | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `wc_ppcp_sdk_v6, PayPalCommerceGateway` - CSS classes `ppcp-*` - files served by the vendor `www.paypal.com/sdk/js` | 4.2.0 | | [WooCommerce Stripe Payment Gateway](https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce-stripe-payment-gateway/) Plugin | E-commerce | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `wc_stripe_params` - files served by the vendor `js.stripe.com` - cookies `__stripe_mid, __stripe_sid` | 11.1.1 | | [WooCommerce Tax (Shipping & Tax)](https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce-tax/) Plugin | E-commerce | Pro | - Pro folder name - Pro tag IDs | No known trace | 3.7.5 | | [WooPayments](https://www.wp-masquerade.com/features/camouflaged-plugins/woopayments/) Plugin | E-commerce | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `wcpayAssets` - files served by the vendor `js.stripe.com` | 11.2.0 | | [YITH WooCommerce Compare](https://www.wp-masquerade.com/features/camouflaged-plugins/yith-woocommerce-compare/) Plugin | E-commerce | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `yith_woocompare` - CSS classes `yith-woocompare-*` | 3.16.0 | | [YITH WooCommerce Wishlist](https://www.wp-masquerade.com/features/camouflaged-plugins/yith-woocommerce-wishlist/) Plugin | E-commerce | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `yithWcwl` - CSS classes `yith-wcwl-*` - cookies `yith_wcwl_session_*` | 4.19.1 | | [bbPress](https://www.wp-masquerade.com/features/camouflaged-plugins/bbpress/) Plugin | Membership and courses | Pro | - Pro folder name - Pro tag IDs | - CSS classes `bbpress, bbp-*` | 2.6.21 | | [LearnDash LMS](https://www.wp-masquerade.com/features/camouflaged-plugins/learndash/) Plugin, commercial | Membership and courses | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `ldVars` - CSS classes `learndash-wrapper, ld-*` - REST routes `/wp-json/ldlms/v2/` | 5.2.3 | | [LearnPress](https://www.wp-masquerade.com/features/camouflaged-plugins/learnpress/) Plugin | Membership and courses | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `lpData, lpSettingCourses` - CSS classes `learn-press-*, lp-*` | 4.4.13 | | [MemberPress](https://www.wp-masquerade.com/features/camouflaged-plugins/memberpress/) Plugin, commercial | Membership and courses | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `MeprI18n` - CSS classes `mepr-*, mp_wrapper` | 1.14.3 | | [Members](https://www.wp-masquerade.com/features/camouflaged-plugins/members/) Plugin | Membership and courses | Pro | - Pro folder name - Pro tag IDs | No known trace | 3.3.1 | | [Nextend Social Login](https://www.wp-masquerade.com/features/camouflaged-plugins/nextend-social-login/) Plugin | Membership and courses | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `_nslDOMReady` - CSS classes `nsl-*` | 3.1.26 | | [Tutor LMS](https://www.wp-masquerade.com/features/camouflaged-plugins/tutor-lms/) Plugin | Membership and courses | Pro | - Pro generator tag - Pro folder name - Pro tag IDs | - JavaScript variables `_tutorobject` - CSS classes `tutor-*` | 4.2.0 | | [Ultimate Member](https://www.wp-masquerade.com/features/camouflaged-plugins/ultimate-member/) Plugin | Membership and courses | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `um_scripts, um_common_variables` - CSS classes `um, um-*` | 2.14.1 | | [User Role Editor](https://www.wp-masquerade.com/features/camouflaged-plugins/user-role-editor/) Plugin | Membership and courses | Pro | - Pro folder name - Pro tag IDs | No known trace | 4.66.3 | | [Ad Inserter](https://www.wp-masquerade.com/features/camouflaged-plugins/ad-inserter/) Plugin | Newsletter, pop-ups and sharing | Pro | - Pro folder name - Pro tag IDs | - CSS classes `code-block, ai-*` | 2.8.20 | | [AddToAny Share Buttons](https://www.wp-masquerade.com/features/camouflaged-plugins/addtoany-share-buttons/) Plugin | Newsletter, pop-ups and sharing | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `a2a_config` - CSS classes `a2a_kit, addtoany_*` - files served by the vendor `static.addtoany.com` | 1.8.18 | | [Brevo (Sendinblue)](https://www.wp-masquerade.com/features/camouflaged-plugins/brevo/) Plugin | Newsletter, pop-ups and sharing | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `ajax_sib_front_object, sibErrMsg` - CSS classes `sib-*` - files served by the vendor `sibautomation.com` | 3.3.5 | | [Call Now Button](https://www.wp-masquerade.com/features/camouflaged-plugins/call-now-button/) Plugin | Newsletter, pop-ups and sharing | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - CSS classes `call-now-button, cnb-*` | 2.1.0 | | [Chaty (Floating Chat Widget)](https://www.wp-masquerade.com/features/camouflaged-plugins/chaty/) Plugin | Newsletter, pop-ups and sharing | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `chaty_settings` - CSS classes `chaty-*` - cookies `chatyWidget_*` | 3.6.3 | | [Click to Chat (HoliThemes)](https://www.wp-masquerade.com/features/camouflaged-plugins/click-to-chat/) Plugin | Newsletter, pop-ups and sharing | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `ht_ctc_chat_var, ht_ctc_variables` - CSS classes `ht-ctc-*, ctc_*` | 4.46 | | [HubSpot](https://www.wp-masquerade.com/features/camouflaged-plugins/hubspot/) Plugin | Newsletter, pop-ups and sharing | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `leadin_wordpress, _hsq` - files served by the vendor `js.hs-scripts.com` | 11.3.75 | | [Joinchat](https://www.wp-masquerade.com/features/camouflaged-plugins/joinchat/) Plugin | Newsletter, pop-ups and sharing | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `joinchat_obj` - CSS classes `joinchat, joinchat__*` | 6.4.2 | | [MailPoet](https://www.wp-masquerade.com/features/camouflaged-plugins/mailpoet/) Plugin | Newsletter, pop-ups and sharing | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `MailPoetForm` - CSS classes `mailpoet_form, mailpoet_*` | 5.44.0 | | [MC4WP: Mailchimp for WordPress](https://www.wp-masquerade.com/features/camouflaged-plugins/mailchimp-for-wordpress/) Plugin | Newsletter, pop-ups and sharing | Free | - signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `mc4wp` - CSS classes `mc4wp-form` | 4.14.1 | | [Newsletter (The Newsletter Plugin)](https://www.wp-masquerade.com/features/camouflaged-plugins/newsletter/) Plugin | Newsletter, pop-ups and sharing | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `newsletter_data` - CSS classes `tnp, tnp-*` | 9.5.3 | | [OptinMonster](https://www.wp-masquerade.com/features/camouflaged-plugins/optinmonster/) Plugin | Newsletter, pop-ups and sharing | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `OptinMonsterApp, omapi_localized` - files served by the vendor `a.omappapi.com` | 2.17.1 | | [Popup Builder](https://www.wp-masquerade.com/features/camouflaged-plugins/popup-builder/) Plugin | Newsletter, pop-ups and sharing | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `SGPB*` - CSS classes `sgpb-*` | 4.4.6 | | [Popup Maker](https://www.wp-masquerade.com/features/camouflaged-plugins/popup-maker/) Plugin | Newsletter, pop-ups and sharing | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - JavaScript variables `pum_vars, pum_popups` - CSS classes `pum-*, popmake-*` | 1.25.0 | | [Smash Balloon Custom Facebook Feed](https://www.wp-masquerade.com/features/camouflaged-plugins/custom-facebook-feed/) Plugin | Newsletter, pop-ups and sharing | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `cffajaxurl, cfflinkhashtags` | 4.15.1 | | [Smash Balloon Instagram Feed](https://www.wp-masquerade.com/features/camouflaged-plugins/smash-balloon-instagram-feed/) Plugin | Newsletter, pop-ups and sharing | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs - Pro generated-file folders | - JavaScript variables `sb_instagram_js_options, sbiajaxurl` - CSS classes `sbi_*` | 6.15.0 | | [Smash Balloon YouTube Feed](https://www.wp-masquerade.com/features/camouflaged-plugins/smash-balloon-youtube-feed/) Plugin | Newsletter, pop-ups and sharing | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `sbyOptions` | 2.11.1 | | [Social Chat (WP WhatsApp Chat)](https://www.wp-masquerade.com/features/camouflaged-plugins/social-chat/) Plugin | Newsletter, pop-ups and sharing | Pro | - Pro folder name - Pro tag IDs | - CSS classes `qlwapp, qlwapp-*` | 8.7.0 | | [Widgets for Google Reviews (Trustindex)](https://www.wp-masquerade.com/features/camouflaged-plugins/widgets-for-google-reviews/) Plugin | Newsletter, pop-ups and sharing | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - CSS classes `ti-widget, ti-*` - files served by the vendor `cdn.trustindex.io` | 14.3 | | [Burst Statistics](https://www.wp-masquerade.com/features/camouflaged-plugins/burst-statistics/) Plugin | Analytics and tags | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `burst` - cookies `burst_uid` | 3.7.4 | | [ExactMetrics](https://www.wp-masquerade.com/features/camouflaged-plugins/exactmetrics/) Plugin | Analytics and tags | Pro | - Pro signed HTML comments - Pro Google developer ID - Pro folder name - Pro tag IDs | - JavaScript variables `exactmetrics_frontend, ExactMetrics` | 10.3.0 | | [GA Google Analytics](https://www.wp-masquerade.com/features/camouflaged-plugins/ga-google-analytics/) Plugin | Analytics and tags | Pro | - Pro signed HTML comments | - files served by the vendor `www.googletagmanager.com` | 20260810 | | [GTM4WP](https://www.wp-masquerade.com/features/camouflaged-plugins/gtm4wp/) Plugin | Analytics and tags | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `gtm4wp_*` | 2.0.6 | | [Matomo (WP-Matomo, Matomo for WordPress)](https://www.wp-masquerade.com/features/camouflaged-plugins/matomo/) Plugin | Analytics and tags | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `_paq` - cookies `_pk_id.*, _pk_ses.*` | 5.13.1 | | [Meta pixel for WordPress](https://www.wp-masquerade.com/features/camouflaged-plugins/meta-pixel-for-wordpress/) Plugin | Analytics and tags | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `facebookSignalConfig, fbq` - files served by the vendor `connect.facebook.net` | 5.2.2 | | [Microsoft Clarity](https://www.wp-masquerade.com/features/camouflaged-plugins/microsoft-clarity/) Plugin | Analytics and tags | Pro | Nothing to remove | - JavaScript variables `clarity` - files served by the vendor `www.clarity.ms` | 0.10.37 | | [MonsterInsights](https://www.wp-masquerade.com/features/camouflaged-plugins/monsterinsights/) Plugin | Analytics and tags | Free | - signed HTML comments - Google developer ID - Pro folder name - Pro tag IDs | - JavaScript variables `monsterinsights_frontend, MonsterInsights` | 11.3.0 | | [PixelYourSite](https://www.wp-masquerade.com/features/camouflaged-plugins/pixelyoursite/) Plugin | Analytics and tags | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `pysOptions, pys` - cookies `pys_*, pbid` | 11.4.4 | | [Post Views Counter](https://www.wp-masquerade.com/features/camouflaged-plugins/post-views-counter/) Plugin | Analytics and tags | Pro | - Pro folder name - Pro tag IDs | - CSS classes `pvc-*, post-views` - cookies `pvc_visits*` | 1.8.2 | | [Site Kit by Google](https://www.wp-masquerade.com/features/camouflaged-plugins/site-kit-by-google/) Plugin | Analytics and tags | Free | - generator tag - signed HTML comments - Google developer ID - Pro folder name - Pro tag IDs | No known trace | 1.190.0 | | [WP Statistics](https://www.wp-masquerade.com/features/camouflaged-plugins/wp-statistics/) Plugin | Analytics and tags | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `WP_Statistics_Tracker_Object` - REST routes `/wp-json/wp-statistics/v2/` | 14.16.18 | | [Borlabs Cookie](https://www.wp-masquerade.com/features/camouflaged-plugins/borlabs-cookie/) Plugin, commercial | Cookies and GDPR | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - JavaScript variables `borlabsCookieConfig` - tag IDs `#BorlabsCookieBox` - cookies `borlabs-cookie` | 3.4.6 | | [Complianz](https://www.wp-masquerade.com/features/camouflaged-plugins/complianz/) Plugin | Cookies and GDPR | Free | - signed HTML comments - Pro folder name - Pro tag IDs - Pro generated-file folders | - JavaScript variables `complianz` - CSS classes `cmplz-*` - cookies `cmplz_*` | 7.5.6 | | [Cookie Notice & Compliance (Hu-manity)](https://www.wp-masquerade.com/features/camouflaged-plugins/cookie-notice/) Plugin | Cookies and GDPR | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `cnArgs` - CSS classes `cookie-notice-*` - cookies `cookie_notice_accepted` | 3.1.17 | | [CookieAdmin](https://www.wp-masquerade.com/features/camouflaged-plugins/cookieadmin/) Plugin | Cookies and GDPR | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `cookieadmin_policy` - CSS classes `cookieadmin_*, cookieadmin-poweredby` - cookies `cookieadmin_consent` | 1.2.6 | | [CookieYes](https://www.wp-masquerade.com/features/camouflaged-plugins/cookieyes/) Plugin | Cookies and GDPR | Free | - Pro folder name - Pro tag IDs | - JavaScript variables `cookieYes` - CSS classes `cky-*, cookie-law-info-bar` - cookies `cookieyes-consent` - files served by the vendor `cdn-cookieyes.com` | 3.5.8 | | [GDPR Cookie Compliance (Moove)](https://www.wp-masquerade.com/features/camouflaged-plugins/gdpr-cookie-compliance/) Plugin | Cookies and GDPR | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `moove_frontend_gdpr_scripts, gdpr_consent__*` - CSS classes `moove-gdpr-*` - cookies `moove_gdpr_popup` | 5.2.2 | | [iubenda](https://www.wp-masquerade.com/features/camouflaged-plugins/iubenda/) Plugin | Cookies and GDPR | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - JavaScript variables `_iub` - files served by the vendor `cdn.iubenda.com` | 3.13.7 | | [Real Cookie Banner](https://www.wp-masquerade.com/features/camouflaged-plugins/real-cookie-banner/) Plugin | Cookies and GDPR | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `realCookieBanner` - cookies `real_cookie_banner-*` - REST routes `/wp-json/real-cookie-banner/v1/` | 5.4.0 | | [WPConsent](https://www.wp-masquerade.com/features/camouflaged-plugins/wpconsent/) Plugin | Cookies and GDPR | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `wpconsent` - CSS classes `wpconsent-*` - cookies `wpconsent_preferences` | 1.2.0 | | [Cyr-To-Lat](https://www.wp-masquerade.com/features/camouflaged-plugins/cyr-to-lat/) Plugin | Languages and translation | Pro | No known public trace | No known trace | 7.2.0 | | [GTranslate](https://www.wp-masquerade.com/features/camouflaged-plugins/gtranslate/) Plugin | Languages and translation | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `gtranslateSettings` - CSS classes `gtranslate_wrapper` - files served by the vendor `cdn.gtranslate.net` | 5.0.2 | | [Loco Translate](https://www.wp-masquerade.com/features/camouflaged-plugins/loco-translate/) Plugin | Languages and translation | Free | No known public trace | No known trace | 2.8.9 | | [Polylang](https://www.wp-masquerade.com/features/camouflaged-plugins/polylang/) Plugin | Languages and translation | Pro | - Pro branded HTTP header - Pro cookies - Pro folder name - Pro tag IDs | - CSS classes `lang-item` | 3.9.1 | | [Translate WordPress (Google Language Translator)](https://www.wp-masquerade.com/features/camouflaged-plugins/google-language-translator/) Plugin | Languages and translation | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `glt_*` - CSS classes `glt-*, goog-te-*` - files served by the vendor `cdn.gtranslate.net` | 7.0.2 | | [TranslatePress](https://www.wp-masquerade.com/features/camouflaged-plugins/translatepress/) Plugin | Languages and translation | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `trp_*` - CSS classes `trp-*, translatepress-{locale}` | 3.3.8 | | [Weglot](https://www.wp-masquerade.com/features/camouflaged-plugins/weglot/) Plugin | Languages and translation | Pro | - Pro branded HTTP header - Pro folder name - Pro tag IDs | - CSS classes `weglot-*` - files served by the vendor `cdn.weglot.com` | 6.4.3 | | [WPML](https://www.wp-masquerade.com/features/camouflaged-plugins/wpml/) Plugin, commercial | Languages and translation | Pro | - Pro generator tag - Pro folder name - Pro tag IDs | - cookies `wp-wpml_current_language` - CSS classes `wpml-ls-*` | 5.2.0 | | [Advanced Custom Fields](https://www.wp-masquerade.com/features/camouflaged-plugins/advanced-custom-fields/) Plugin | Utilities | Free | - Pro folder name - Pro tag IDs | - JavaScript variables `acf` | 6.8.10 | | [Advanced Editor Tools (TinyMCE Advanced)](https://www.wp-masquerade.com/features/camouflaged-plugins/advanced-editor-tools/) Plugin | Utilities | Free | - Pro folder name - Pro tag IDs | No known trace | 5.10.1 | | [Ally (One Click Accessibility)](https://www.wp-masquerade.com/features/camouflaged-plugins/ally-web-accessibility/) Plugin | Utilities | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `ea11yWidget (when connected)` - CSS classes `ally-default` - files served by the vendor `cdn.elementor.com (when connected)` | 4.1.4 | | [Classic Editor](https://www.wp-masquerade.com/features/camouflaged-plugins/classic-editor/) Plugin | Utilities | Free | No known public trace | No known trace | 1.7.0 | | [Classic Widgets](https://www.wp-masquerade.com/features/camouflaged-plugins/classic-widgets/) Plugin | Utilities | Free | No known public trace | No known trace | 0.3 | | [Code Snippets](https://www.wp-masquerade.com/features/camouflaged-plugins/code-snippets/) Plugin | Utilities | Free | No known public trace | No known trace | 4.0.0 | | [Custom Post Type UI](https://www.wp-masquerade.com/features/camouflaged-plugins/custom-post-type-ui/) Plugin | Utilities | Free | No known public trace | No known trace | 1.19.3 | | [Disable Comments](https://www.wp-masquerade.com/features/camouflaged-plugins/disable-comments/) Plugin | Utilities | Free | No known public trace | No known trace | 2.9.1 | | [Duplicate Page](https://www.wp-masquerade.com/features/camouflaged-plugins/duplicate-page/) Plugin | Utilities | Free | No known public trace | No known trace | 4.5.9 | | [Easy Table of Contents](https://www.wp-masquerade.com/features/camouflaged-plugins/easy-table-of-contents/) Plugin | Utilities | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `ezTOC, eztoc_smooth_local` - CSS classes `ez-toc-*` | 2.0.89 | | [File Manager (WP File Manager)](https://www.wp-masquerade.com/features/camouflaged-plugins/wp-file-manager/) Plugin | Utilities | Free | No known public trace | No known trace | 8.0.7 | | [FluentSMTP](https://www.wp-masquerade.com/features/camouflaged-plugins/fluentsmtp/) Plugin | Utilities | Pro | No known public trace | No known trace | 2.4.1 | | [Font Awesome](https://www.wp-masquerade.com/features/camouflaged-plugins/font-awesome/) Plugin | Utilities | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - files served by the vendor `use.fontawesome.com` | 5.2.1 | | [Header Footer Code Manager](https://www.wp-masquerade.com/features/camouflaged-plugins/header-footer-code-manager/) Plugin | Utilities | Pro | - Pro signed HTML comments | No known trace | 1.1.46 | | [Jetpack](https://www.wp-masquerade.com/features/camouflaged-plugins/jetpack/) Plugin | Utilities | Free | - signed HTML comments - short link - Pro folder name - Pro tag IDs | - CSS classes `jetpack-*, jp-*` - files served by the vendor `stats.wp.com, i0.wp.com` | 16.3.1 | | [Maintenance (WP Maintenance)](https://www.wp-masquerade.com/features/camouflaged-plugins/wp-maintenance/) Plugin | Utilities | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `mtnc_front_options` | 4.32 | | [Max Mega Menu](https://www.wp-masquerade.com/features/camouflaged-plugins/max-mega-menu/) Plugin | Utilities | Pro | - Pro folder name - Pro tag IDs - Pro generated-file folders | - CSS classes `mega-menu-*, max-mega-menu` | 3.10.9 | | [Meta Box](https://www.wp-masquerade.com/features/camouflaged-plugins/meta-box/) Plugin | Utilities | Pro | - Pro folder name - Pro tag IDs | - CSS classes `rwmb-* (public forms only)` | 5.15.3 | | [Shortcodes Ultimate](https://www.wp-masquerade.com/features/camouflaged-plugins/shortcodes-ultimate/) Plugin | Utilities | Pro | - Pro folder name - Pro tag IDs | - CSS classes `su-*` | 7.9.2 | | [Simple Custom CSS and JS](https://www.wp-masquerade.com/features/camouflaged-plugins/simple-custom-css-and-js/) Plugin | Utilities | Pro | - Pro signed HTML comments - Pro folder name - Pro generated-file folders | No known trace | 3.55 | | [Table of Contents Plus](https://www.wp-masquerade.com/features/camouflaged-plugins/table-of-contents-plus/) Plugin | Utilities | Pro | - Pro folder name - Pro tag IDs | - tag IDs `#toc_container` - JavaScript variables `tocplus` - CSS classes `toc_*` | 202609.1 | | [TablePress](https://www.wp-masquerade.com/features/camouflaged-plugins/tablepress/) Plugin | Utilities | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs | - CSS classes `tablepress, tablepress-id-*` | 3.4.1 | | [The Events Calendar](https://www.wp-masquerade.com/features/camouflaged-plugins/the-events-calendar/) Plugin | Utilities | Pro | - Pro branded HTTP header - Pro folder name - Pro tag IDs | - JavaScript variables `TribeCalendar, tribe_l10n_datatables` - CSS classes `tribe-*, tec-*` - REST routes `/wp-json/tribe/events/v1/` | 6.18.3 | | [WordPress Importer](https://www.wp-masquerade.com/features/camouflaged-plugins/wordpress-importer/) Plugin | Utilities | Free | No known public trace | No known trace | 0.9.7 | | [WP Go Maps](https://www.wp-masquerade.com/features/camouflaged-plugins/wp-go-maps/) Plugin | Utilities | Pro | - Pro folder name - Pro tag IDs | - JavaScript variables `WPGMZA, wpgmza_*` - CSS classes `wpgmza*` | 10.1.10 | | [WP Mail SMTP](https://www.wp-masquerade.com/features/camouflaged-plugins/wp-mail-smtp/) Plugin | Utilities | Free | No known public trace | No known trace | 4.10.3 | | [WP-PageNavi](https://www.wp-masquerade.com/features/camouflaged-plugins/wp-pagenavi/) Plugin | Utilities | Pro | - Pro folder name - Pro tag IDs | - CSS classes `wp-pagenavi (archives using it)` | 3.0.1 | | [WPCode](https://www.wp-masquerade.com/features/camouflaged-plugins/wpcode/) Plugin | Utilities | Free | - Pro folder name - Pro tag IDs | No known trace | 2.4.1 | | [wpDiscuz](https://www.wp-masquerade.com/features/camouflaged-plugins/wpdiscuz/) Plugin | Utilities | Pro | - Pro signed HTML comments - Pro folder name - Pro tag IDs - Pro generated-file folders | - tag IDs `#wpdcom` - JavaScript variables `wpdiscuzAjaxObj, wpdiscuzUCObj` - CSS classes `wpd-*, wpdiscuz-*` | 7.6.75 | | [Yoast Duplicate Post](https://www.wp-masquerade.com/features/camouflaged-plugins/yoast-duplicate-post/) Plugin | Utilities | Free | - Pro folder name - Pro tag IDs | No known trace | 4.7 | ### How the camouflage works 1. **Free version, from level 1 of the Identity module.** WP Masquerade first turns on each plugin’s official setting when one exists (Yoast SEO, Rank Math, All in One SEO, Elementor, LiteSpeed Cache...), then an output filter removes generator tags, signed HTML comments, the brand class of the JSON-LD block, branded HTTP headers sent by PHP and version numbers slipped into the page’s classes (Astra; WPBakery with Pro). Details on the [WordPress technical links](https://www.wp-masquerade.com/features/wordpress-technical-links/) page. 2. **Pro, file URLs.** [File URL aliases](https://www.wp-masquerade.com/features/file-url-aliases/) replace `/wp-content/plugins/` and `/wp-content/themes/` with neutral URLs, each one checked before it is turned on. 3. **Pro, per-plugin camouflage.** One switch per detected plugin: its folder gets a neutral six-character name, so do the folders of generated files (`uploads/elementor`, `uploads/hummingbird-assets`...), and the IDs of its style and script tags are renamed (`astra-theme-css` becomes `k7q2xa-theme-css`). Masking applies to visitors and to logged-in customers. The site team (administrators, editors, authors) sees the pages unchanged, so they can work. To choose the software announced instead of WordPress, see [imitating another CMS](https://www.wp-masquerade.com/features/cms-imitation/). ### What a detector measures, before and after We ran Wappalyzer’s public rules (community version) on two sets of pages: a test page that reproduces the real markup of the plugins in this list, and a test site on which 40 plugins and one theme from the list were installed at the same time, then uninstalled. | Configuration | Test page | Real test site | | --- | --- | --- | | No masking | 21 technologies detected, including WordPress | 15 technologies, including WordPress | | Free version, Identity level 2 | 17 | 12 | | Pro: file URL aliases level 3 and camouflage of all plugins | 5, WordPress is no longer detected | 4, WordPress is no longer detected | *With Pro, what remained was WooCommerce (its CSS classes), the block editor’s `wp-block-*` classes, Ninja Forms (a JavaScript variable), AddToAny (script served by the vendor) and, on the test page, Gravity Forms and Borlabs Cookie (classes, banner ID). All 146 stylesheets and scripts of the test site loaded normally.* ### What stays visible, and why - **JavaScript variables, CSS classes, cookies, REST routes**: the plugin’s scripts and stylesheets read them by name. Renaming them would break the plugin, so WP Masquerade never touches them. - **Files served by the vendor** (static.addtoany.com, js.stripe.com, cdn.weglot.com...): they come from the vendor’s servers, out of reach of a plugin. - **Headers added by the server or by a cache** (LiteSpeed, SiteGround, NitroPack, Breeze, Hummingbird when the page comes from the cache): they are added before or after WordPress, and some of them control the cache. - **Pages already cached** before activation: they keep their traces until the cache is purged. Breeze writes its comment into its cache file with no setting to remove it. - **Commercial plugins** (Gravity Forms, Avada, WPBakery, Slider Revolution, MemberPress, LearnDash, Borlabs Cookie...): their traces are taken from the vendor’s documentation and from detector rules, as the “Checked” column shows. Camouflage makes automatic detection much harder, it does not make a site invisible. Keep your plugins up to date: that is the protection that matters most against a known vulnerability. ### Your plugin is not in the list? It is still handled. The free version removes the generator tags of any plugin and HTML comments that carry a known brand name. The Identity tab shows every active plugin on your site with what stays visible, and Pro’s camouflage also works for a plugin that is not in the list: its folder and the IDs of its tags are renamed the same way. ### A list updated between releases Plugins change folders, comments and tags from one version to the next, and new popular plugins appear. With Pro, the catalogue no longer depends on plugin releases alone: new entries and fixes are published on our license server, signed, then downloaded by each site with an active license during its daily check, or right away with the “Check for catalogue updates” button in the Identity tab. Each update is checked again on your site before it is used; an invalid, older or badly signed response never replaces the last valid version. Entries of the free version are never replaced, only completed. Without an active license, the catalogue shipped with the plugin stays the only one in use. ### Frequently asked questions **Do I need to change my plugins’ settings?** No. WP Masquerade turns on each plugin’s official setting itself while public pages are displayed, without changing your saved settings. Just purge your caches after activation. **Can the camouflage break a plugin?** JavaScript variables, CSS classes, cookies and file contents are never modified. Folder renaming is only turned on after each new URL has been checked successfully. If a plugin feature stops working (slider, form, popup), turn off its camouflage switch: the rest of the site keeps its protection. **What does “checked on version” mean?** It is the plugin version on which its traces were recorded: installed on a test site with its public pages read, or source code read, or the vendor’s documentation for commercial plugins. A newer version may add a trace; the list is updated along with WP Masquerade and, with Pro, between releases. **Why does my browser still show a plugin’s comments?** When you are logged in as an administrator, you see the site without masking. Check in a private browsing window, after purging the caches. #### Related reading - [Imitating another CMS](https://www.wp-masquerade.com/features/cms-imitation/) - [WordPress technical links](https://www.wp-masquerade.com/features/wordpress-technical-links/) - [File URLs (aliases)](https://www.wp-masquerade.com/features/file-url-aliases/) - [Hosting and cache compatibility](https://www.wp-masquerade.com/features/hosting-and-cache-compatibility/) ### Erase your plugins’ traces The free version already removes the generator tags, signed comments and branded headers of the 50 most common plugins; Pro covers over 200. Pro renames their folders and IDs, plugin by plugin, from €59 per year excl. tax. [See Pro pricing](https://www.wp-masquerade.com/pricing/) [Download the free version](https://www.wp-masquerade.com/download/) --- Source: https://www.wp-masquerade.com/features/wordpress-technical-links/ Updated: 2026-11-05T20:54:51+00:00 ## Remove WordPress technical links WordPress and its plugins add links and signatures to every page that give away its identity. RSD, WLW, shortlinks and plugin comments are removed for free; REST API and oEmbed announcements, with Pro. ### What this module does In the HTML head of every page, WordPress advertises several technical URLs: remote publishing (RSD, Windows Live Writer), a shortlink like `?p=123`, the REST API announcement, and oEmbed discovery. These links rarely do anything for your visitors, but they tell bots loud and clear that your site runs on WordPress. The **WordPress technical links** module (called “Discovery” in the guide) removes them, from the most useless to the most impactful. As soon as WordPress is hidden, the free version also removes the HTML comments and generator tags left by plugins (Yoast SEO, Site Kit, Elementor, cache plugins...): see below. ### Why it helps These links are among the first clues detection tools read. Removing them completes the [imitation of another CMS](https://www.wp-masquerade.com/features/cms-imitation/): a site that claims to be Drupal but keeps `wp-json` links in every page is quickly unmasked. ### Levels | Option | Effect | Version | | --- | --- | --- | | Remove nothing | All technical links stay in place. | Default | | Remove remote publishing links | RSD and Windows Live Writer, which are obsolete today. | Free | | Also remove shortlinks | Removes URLs like ?p=123. | Free | | Also remove the REST API announcement | The API keeps working; it’s simply no longer advertised. | Pro | | Also remove oEmbed discovery | Other sites will no longer show rich previews of your posts. | Pro | *Each option includes the previous ones. Levels 1 and 2 are free; levels 3 and 4 require WP Masquerade Pro.* !["WordPress technical links" setting: five options, from removing the remote editing links to removing oEmbed discovery, each with its risk label](https://www.wp-masquerade.com/media/2026/10/admin-liens.webp) *The five options of the Technical links module (screenshot taken with Pro).* ### Free or Pro #### In the free version Free - Removes remote publishing links (RSD, Windows Live Writer) - Removes shortlinks (?p=123) - Plugin HTML comments and generator tags removed (as soon as WordPress is hidden) #### With WP Masquerade Pro Pro - Removes the REST API announcement ( tag and HTTP Link header) - Removes oEmbed discovery The Essential, Recommended, and Maximum modes set this module to levels 2, 3, and 4. Without Pro, the Recommended and Maximum modes stop at level 2. ### Plugin HTML comments and generator tags As soon as WordPress is hidden (Identity module at level 1 “Hide WordPress” or above, so in all three modes), the free version also removes the `` tags and the signed HTML comments that well-known plugins and themes add to public pages. These signatures often give the plugin’s name and version, and they are enough for detection tools to recognize WordPress. This feature depends on the Identity module, not on the levels of this module. - **SEO**: Yoast SEO, Rank Math, All in One SEO, The SEO Framework. - **Analytics, tags and consent**: Site Kit by Google, MonsterInsights, ExactMetrics, GTM4WP, WP Statistics, Matomo, Meta pixels, Complianz, Jetpack. - **Cache and performance**: WP Super Cache, W3 Total Cache, LiteSpeed Cache, WP Fastest Cache, Hummingbird, WP-Optimize, Autoptimize; WP Rocket (comment replaced by a generic text). - **Page builders, themes and frameworks**: Elementor, WPBakery, Slider Revolution, Divi, Redux. - **Commerce, languages and forms**: WooCommerce, WPML, WPForms, Smash Balloon, and WordPress itself. **Method**: each plugin’s official setting first (a filter, option or constant provided by its developer), which also applies to the page the cache stores; then an output filter on public pages requested with GET or HEAD; finally the cache plugin’s last filter for LiteSpeed Cache and Hummingbird. Your saved settings are not changed. Kept in place: the imitated software’s generator tag, the content of scripts ([JSON-LD](https://www.wp-masquerade.com/glossary/structured-data/) included) and styles, conditional comments and cache markers. **Option**: “Remove all HTML comments from public pages” (Identity tab, off by default) also removes your theme’s neutral comments. **Limitations**: - Breeze writes its comment into its cache file, with no setting: it is not removed. - WP Rocket does not allow its comment to be removed: `` remains, with no plugin name. - Pages cached before activation keep their comments until the cache is purged (“Purge caches” button, Diagnostics tab). - HTTP headers, CSS classes, JavaScript variables, file URLs and the ?ver= parameter are not affected. Logged-in visitors see the pages without masking. The plugin-by-plugin details, with the exact strings removed and how to check your site, are in our article [HTML comments and generator tags: erase the traces of WordPress](https://www.wp-masquerade.com/html-comments-generator-tag-wordpress/). ### Limitations and precautions - Removing a discovery link doesn’t disable the corresponding API. - Levels 3 and 4 may prevent some apps from discovering the APIs or embedding your posts automatically. Test the integrations you actually use. - To actually block entry points such as [XML-RPC](https://www.wp-masquerade.com/glossary/xml-rpc/) or the author list, see [hardening](https://www.wp-masquerade.com/features/hardening/). ### Frequently asked questions **Do I need to configure Yoast SEO, Elementor or my cache plugin to remove their comments?** No. Masquerade Security turns on their official setting itself while public pages are displayed, without changing your saved settings. Just purge the caches after activation. **Can removing these comments break my site?** The content of scripts, styles and JSON-LD is never modified, and the markers cache plugins need (noptimize, mfunc, esi...) are kept. On any error, or for a page larger than 4 MB, the page is sent unchanged. **Why do I still see the comments in the source code?** Logged-in administrators see the pages without masking, and a page cached before activation keeps its comments until the cache is purged. Check in a private browsing window after purging the caches. #### Related reading - [Imitating another CMS](https://www.wp-masquerade.com/features/cms-imitation/) - [Hardening: XML-RPC, pingbacks, authors](https://www.wp-masquerade.com/features/hardening/) - [Over 200 camouflaged plugins and themes](https://www.wp-masquerade.com/features/camouflaged-plugins/) ### Start free, upgrade to Pro when you’re ready The free version already hides WordPress, moves the login page, blocks XML-RPC and counts bots. Pro locks down logins, renames file URLs and monitors your sites for you: known vulnerabilities, core integrity, activity log, email alerts and the update status of all your sites in your member area. From €59 per year excl. tax, far less than the cleanup offers whose prices we checked. [Compare the costs](https://www.wp-masquerade.com/pricing/#cout-piratage). [See Pro pricing](https://www.wp-masquerade.com/pricing/) [Download the free version](https://www.wp-masquerade.com/download/) --- Source: https://www.wp-masquerade.com/features/file-url-aliases/ Updated: 2026-11-05T20:53:41+00:00 ## Rename wp-content in WordPress With WP Masquerade Pro, /wp-content/ disappears from your pages: file URLs are renamed, then verified from your browser before they go live. ### What aliases do The URLs of your images, stylesheets, and scripts contain `/wp-content/`, `/wp-includes/`, `/wp-content/plugins/`… It’s the most visible sign of a WordPress site, and the easiest way to guess which plugins are installed. **Available in WP Masquerade Pro only.** The free version doesn’t rename any file URLs. It does, however, hide the plugin’s own files (readme, translations) from scanners. The **File URLs** module in WP Masquerade Pro replaces these paths with aliases of your choice on your public pages. A server-side rewrite rule maps each alias to the real folder. **The physical folders are not moved**: WordPress, your plugins, and your backups keep working normally. | Folder | Default alias | Example | | --- | --- | --- | | wp-content | assets | public-assets | | uploads / media | media | gallery | | wp-includes | system | runtime | | Plugins | modules | extensions | | Themes | skins | presentation | ### Verified before going live This is what sets WP Masquerade apart: nothing changes for your visitors until verification succeeds. Three steps: 1. **Choose** the level and names, then save. 2. **Copy the rules** shown into your [.htaccess](https://www.wp-masquerade.com/glossary/htaccess/) (or your [Nginx](https://www.wp-masquerade.com/glossary/nginx/), IIS, or Caddy configuration). The block matches your saved settings exactly. 3. **Verify and activate**: your browser downloads a test file through each alias and compares its SHA-256 hash with the original. If everything matches, the new URLs go live. If not, the previous plan stays in place and the cause of each failure is displayed. Verifying from the browser gets around the anti-bot protections some hosts use, such as TigerProtect at o2switch, which block requests a site makes to itself. [See hosting compatibility](https://www.wp-masquerade.com/features/hosting-and-cache-compatibility/). ### What’s included Pro - Aliases for wp-content, media, wp-includes, plugins, and themes, with server rules and in-browser verification - “Suggest paths for this profile” button - Blocking of the old URLs (404) - URL rewriting in inline scripts, JSON, and