=== WP IronShield Security — Login Guard, XML-RPC Blocker & Headers Pro ===
Contributors: kabeerahmed
Website: https://kabeer.site/plugins.html
Requires at least: 5.8
Tested up to: 6.7
Requires PHP: 7.4
Stable tag: 2.4.0
License: GPLv2 or later

Free lightweight alternative to Wordfence Pro & Solid Security ($99/yr). Blocks brute-force login attacks, disables XML-RPC DDoS endpoints, hides WP version fingerprints, blocks author enumeration scans, and injects HTTP security headers.

== Installation & Step-by-Step Tutorial ==
1. Upload `wp-ironshield-security.zip` via **Plugins -> Add New -> Upload Plugin** and click **Activate**.
2. IronShield immediately locks down brute-force login attempts (locks out IP for 15 minutes after 5 failed attempts), disables XML-RPC, blocks `/?author=1` username scraping, and adds `X-Frame-Options` & `X-Content-Type-Options` headers.
3. Check status anytime under **Settings -> 🔒 IronShield Security**.