Best firewall plugins for WordPress

Wordfence Security

#11

by Mark Maunder1 month ago

Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.

Limit Login Attempts Security

#34

by WPChef2 days ago

Limit login attempts and stop brute force attacks. WordPress security with 2FA, firewall, bot protection, IP blocking, and secure login monitoring.

Security Optimizer

#51

by SiteGround4 days ago

Secure your WordPress site from brute-force attacks, threats, malware, and bots. Free to use and easy to set up.

All-In-One Security (AIOS)

Up in the last 7 days:1#56

by David Anderson / Team Updraft9 days ago

Protect your WordPress site with All-In-One Security (AIOS): easy-to-use login security, a powerful firewall, and much more.

Sucuri Security

#106

by Sucuri25 days ago

The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.

Anti-Spam, Spam FireWall by CleanTalk

#239

by CleanTalk Inc10 days ago

Advanced antispam for comments, registrations & contact forms. No CAPTCHA, plus email validation and honeypot. We catch spam others miss!

MalCare WordPress Security Plugin

#288

by malcare9 days ago

Get Bulletproof Security for your WordPress site. WordPress security plugin packed with comprehensive Firewall, malware scanner, cleaner & more.

Patchstack

Up in the last 7 days:27#289

by Patchstack3 months ago

Patchstack automatically identifies and mitigates security vulnerabilities in WordPress plugins, themes, and core.

Anti-Malware Security and Brute-Force Firewall

Down in the last 7 days:2#310

by Eli12 days ago

This Anti-Malware scanner searches for Malware, Viruses, and other security threats and vulnerabilities on your server and it helps you fix them.

NinjaFirewall (WP Edition)

Up in the last 7 days:1#343

by nintechnet1 day ago

A true Web Application Firewall to protect and secure WordPress.

BBQ Firewall

#346

by Jeff Starr2 days ago

The fastest firewall plugin for WordPress. Protect against a wide range of threats with minimal performance impact.

Login Lockdown & Protection

Up in the last 7 days:2#370

by WebFactory1 month ago

Protect, lockdown & secure login form by limiting login attempts from the same IP & banning IPs.

Hide My WP Ghost

Down in the last 7 days:9#418

by John Darrel1 day ago

Hide My WP Ghost is a WordPress security plugin that hides WP paths and protects your site with Path Security, Firewall, Brute Force Protection, 2FA

Defender Security

Up in the last 7 days:3#519

by WPMU DEV - Your All-in-One WordPress Platform1 month ago

WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more.

Security Plugin, Firewall & Malware Scanner with Auto Removal

Down in the last 7 days:3#886

by CleanTalk Inc12 days ago

Protect WordPress from malware, hackers, brute-force attacks & suspicious traffic. Includes firewall, login security, 2FA & vulnerability checks.

Shield Security

Down in the last 7 days:1#938

by Paul11 days ago

Smart WordPress security that blocks bots automatically, guides you to what matters, and repairs problems — without drowning you in noise.

BulletProof Security

#1,143

by AITpro2 months ago

WordPress Security Protection: Malware scanner, Firewall, Login Security, DB Backup, Anti-Spam...

Zero Spam for WordPress

Up in the last 7 days:4#1,199

by Highfivery Studio4 days ago

Free anti-spam for WordPress comments, logins, registrations and forms. No captchas, no moderation queue. Blocks bots before they post.

Forget Spam Comment

Down in the last 7 days:8#2,206

by Gulshan Kumar1 year ago

The ultimate solution to stop spam comments in the default commenting system of WordPress

IP Geo Block

#2,484

by tokkonopapa7 years ago

It blocks spam posts, login attempts and malicious access to the back-end requested from the specific countries, and also prevents zero-day exploit.

Security Ninja

Down in the last 7 days:1#2,518

by cleverplugins5 days ago

WordPress security plugin: free 8G firewall/WAF, 50+ tests, vulnerability/core scanning, events logging, AI reports.

RSFirewall!

Up in the last 7 days:15#3,457

by RSJoomla!6 days ago

Based on the success of the most popular firewall for Joomla!, RSFirewall! is now available to protect your WordPress website as well.

Vigilant

Up in the last 7 days:61#3,596

by Fernando Telladotoday

Premium WordPress Security - 100% FREE: Firewall, 2FA, Security Headers, Login and Malware Protection, File Monitor, Security Audit & more

BotBlocker Security

Down in the last 7 days:13#3,698

by Yevhen Leonidov1 day ago

Complete security platform for everyday: block bots, brute-force, viruses, spam, fake crawlers. WAF, 2FA, no-malware, proactive defense.

Advanced IP Blocker

Up in the last 7 days:45#4,071

by IniLerm4 days ago

A complete WordPress security firewall: blocks IPs, bots, countries & ASN. Includes an intelligent WAF, Threat Scoring, Geo-Challenge, and 2FA.

Injection Guard

Down in the last 7 days:4#6,329

by Fahad Mahmood8 days ago

Blocks malicious and unknown query-string requests, detects injection attempts, and audits user capabilities and sessions.

Atlant Security

Up in the last 7 days:215#7,412

by Alex3 days ago

Enterprise-grade WordPress security: WAF, brute force protection, malware scanner, 2FA, honeypots, AI crawler control, and post-breach recovery.

Site Lockdown Security

Up in the last 7 days:115#7,547

by WP Fix It - WordPress Experts3 months ago

Audit, protect, monitor, firewall, and secure WordPress with premium tools at no cost.

WebTotem Security

Down in the last 7 days:66#7,699

by WebTotem1 month ago

WebTotem is a SaaS which provides powerful tools for securing and monitoring your website in one place in easy and flexible way.

Snitch

Down in the last 7 days:19#7,750

by pluginkollektiv7 months ago

Network monitor for WordPress. Connection overview for monitoring and controlling outgoing data traffic.

Atomic Edge Security

Up in the last 7 days:84#7,799

by shift81 month ago

WordPress firewall with cloud WAF rules, malware scanning, 2FA, vulnerability checks, IP blocking, and real-time security logs.

Security Safe

Down in the last 7 days:11#8,117

by Sovereign Stack, LLC8 months ago

This security plugin helps you quickly audit, harden, and secure your WordPress website.

Easy IP Blocker

Up in the last 7 days:72#9,320

by Carl Alberto5 months ago

Quickly block unwanted IPs in your WP site with CDN/proxy-aware IP detection

BitFire Security

Up in the last 7 days:28#10,312

by Cory Marsh1 month ago

Free WordPress firewall, bot blocking, login protection, and malware scanning. See suspicious traffic and investigate threats from your dashboard.

WEDOS

Down in the last 7 days:15#10,368

by wedos.com9 days ago

Protect your WordPress website with WEDOS Global: cloud WAF, DDoS protection, CDN and page cache, set up from WordPress.

Malcure Security Suite

Down in the last 7 days:3#11,534

by Malware Intercept1 year ago

🔐 All-in-one WordPress security: malware scanner (files+DB), force re-login, force logout, control logins, email-alerts. Cloud-based, light & fast.

QueryWall

Down in the last 7 days:31#11,934

by 4ley8 years ago

Autopilot protection for your WordPress against malicious URL requests.

Limit Login Attempts (Spam Protection)

Up in the last 7 days:10#12,455

by wp-buy1 year ago

Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.

Deactivate XML-RPC on WordPress

Down in the last 7 days:19#12,476

by tildemark11 years ago

This plugin will completely disable or deactivates XML-RPC on your WordPress installation. This will prevent any brute force attacks to your website u …

Spam Master

Down in the last 7 days:119#12,503

by TechGasp2 months ago

Real-time firewall and anti-spam for WordPress. Block spam bots, comments, logins & registrations. No CAPTCHA, no slowdown.

SAR One Click Security

Down in the last 7 days:20#12,541

by Samuel Aguilera1 year ago

Adds some extra security to your WordPress with only one click.

Protector

Down in the last 7 days:5#12,922

by Marcello Ruoppolo6 months ago

Protect your WordPress. The ultimate lightweight security suite. Block brute-force attacks, auto-repair infected core files, hide your login URL, set …

ReportedIP Hive

Up in the last 7 days:601#13,351

by Patrick Schlesinger5 days ago

Firewall, limit login attempts, 2FA with passkeys and anti-spam for comments and forms without CAPTCHA. Optional IP blocklist. GDPR-first.

Fail2WP

Down in the last 7 days:3#13,947

by joho6820 days ago

WordPress security plugin. Requires WordPress 6.2+ and PHP 7.4+.

WP Shieldon

Up in the last 7 days:141#15,038

by Terry L.3 years ago

WP Shieldon is a WordPress security plugin based on Shieldon library, a Web Application Firewall (WAF) for PHP.

Polar Mass Advanced IP Blocker

#15,390

by polarmass1 year ago

Automatically block threats at the network level by forwarding Wordfence-detected IPs to Cloudflare.

Anti-Hacker

Up in the last 7 days:32#15,392

by emiliocini2 years ago

Anti-Hacker protects your Wordpress against hackers attacks, hiding sensitive information that would be used to exploit your site, detecting and fixin …

All in One Content Protector & Security

Down in the last 7 days:70#15,688

by Mahesh Thorat16 days ago

Find and fix security problems: a site scanner, vulnerability and file change alerts, login and bot protection, and safe fixes you can undo.

Bottle

Up in the last 7 days:74#15,978

by benrowland11 days ago

Bottle is a bot throttling plugin.

WP Guardian

Up in the last 7 days:26#16,013

by Ciprian Popescu1 month ago

For site owners who want an honest hardening checklist, not a heavy security suite: what to fix in WordPress, and what to ask your host for.