Best firewall plugins for WordPress

Wordfence Security

#11

by Mark Maundertoday

Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.

Limit Login Attempts Security

#34

by WPChef4 days ago

Limit login attempts and stop brute force attacks. WordPress security with 2FA, firewall, bot protection, IP blocking, and secure login monitoring.

Security Optimizer

#51

by SiteGround5 days ago

Secure your WordPress site from brute-force attacks, threats, malware, and bots. Free to use and easy to set up.

All-In-One Security (AIOS)

#56

by David Anderson / Team Updraft10 days ago

Protect your WordPress site with All-In-One Security (AIOS): easy-to-use login security, a powerful firewall, and much more.

Sucuri Security

#106

by Sucuri26 days ago

The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.

Anti-Spam, Spam FireWall by CleanTalk

Down in the last 7 days:1#239

by CleanTalk Inc12 days ago

Advanced antispam for comments, registrations & contact forms. No CAPTCHA, plus email validation and honeypot. We catch spam others miss!

Patchstack

Up in the last 7 days:27#288

by Patchstack3 months ago

Patchstack automatically identifies and mitigates security vulnerabilities in WordPress plugins, themes, and core.

MalCare WordPress Security Plugin

Down in the last 7 days:1#289

by malcare10 days ago

Get Bulletproof Security for your WordPress site. WordPress security plugin packed with comprehensive Firewall, malware scanner, cleaner & more.

Anti-Malware Security and Brute-Force Firewall

Down in the last 7 days:2#310

by Eli14 days ago

This Anti-Malware scanner searches for Malware, Viruses, and other security threats and vulnerabilities on your server and it helps you fix them.

NinjaFirewall (WP Edition)

Up in the last 7 days:1#343

by nintechnet2 days ago

A true Web Application Firewall to protect and secure WordPress.

BBQ Firewall

#346

by Jeff Starr3 days ago

The fastest firewall plugin for WordPress. Protect against a wide range of threats with minimal performance impact.

Login Lockdown & Protection

Up in the last 7 days:1#370

by WebFactory1 month ago

Protect, lockdown & secure login form by limiting login attempts from the same IP & banning IPs.

Hide My WP Ghost

Up in the last 7 days:11#400

by John Darreltoday

Hide My WP Ghost is a WordPress security plugin that hides WP paths and protects your site with Path Security, Firewall, Brute Force Protection, 2FA

Defender Security

Up in the last 7 days:2#519

by WPMU DEV - Your All-in-One WordPress Platform1 day ago

WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more.

Security Plugin, Firewall & Malware Scanner with Auto Removal

#886

by CleanTalk Inc1 day ago

Protect WordPress from malware, hackers, brute-force attacks & suspicious traffic. Includes firewall, login security, 2FA & vulnerability checks.

Shield Security

Down in the last 7 days:2#938

by Paul13 days ago

Smart WordPress security that blocks bots automatically, guides you to what matters, and repairs problems — without drowning you in noise.

BulletProof Security

#1,143

by AITpro2 months ago

WordPress Security Protection: Malware scanner, Firewall, Login Security, DB Backup, Anti-Spam...

Zero Spam for WordPress

Up in the last 7 days:3#1,201

by Highfivery Studio5 days ago

Free anti-spam for WordPress comments, logins, registrations and forms. No captchas, no moderation queue. Blocks bots before they post.

Forget Spam Comment

Down in the last 7 days:3#2,207

by Gulshan Kumar1 year ago

The ultimate solution to stop spam comments in the default commenting system of WordPress

IP Geo Block

#2,486

by tokkonopapa7 years ago

It blocks spam posts, login attempts and malicious access to the back-end requested from the specific countries, and also prevents zero-day exploit.

Security Ninja

Up in the last 7 days:3#2,518

by cleverpluginstoday

WordPress security plugin: free 8G firewall/WAF, 50+ tests, vulnerability/core scanning, events logging, AI reports.

RSFirewall!

Up in the last 7 days:14#3,460

by RSJoomla!8 days ago

Based on the success of the most popular firewall for Joomla!, RSFirewall! is now available to protect your WordPress website as well.

Vigilant

Up in the last 7 days:58#3,573

by Fernando Tellado1 day ago

Premium WordPress Security - 100% FREE: Firewall, 2FA, Security Headers, Login and Malware Protection, File Monitor, Security Audit & more

BotBlocker Security

Up in the last 7 days:1#3,684

by Yevhen Leonidovtoday

Complete security platform for everyday: block bots, brute-force, viruses, spam, fake crawlers. WAF, 2FA, no-malware, proactive defense.

Advanced IP Blocker

Up in the last 7 days:44#4,046

by IniLerm1 day ago

A complete WordPress security firewall: blocks IPs, bots, countries & ASN. Includes an intelligent WAF, Threat Scoring, Geo-Challenge, and 2FA.

Injection Guard

Up in the last 7 days:5#6,330

by Fahad Mahmood9 days ago

Blocks malicious and unknown query-string requests, detects injection attempts, and audits user capabilities and sessions.

Atlant Security

Up in the last 7 days:166#7,391

by Alex4 days ago

Enterprise-grade WordPress security: WAF, brute force protection, malware scanner, 2FA, honeypots, AI crawler control, and post-breach recovery.

Site Lockdown Security

Up in the last 7 days:93#7,547

by WP Fix It - WordPress Experts3 months ago

Audit, protect, monitor, firewall, and secure WordPress with premium tools at no cost.

WebTotem Security

Down in the last 7 days:76#7,727

by WebTotem1 month ago

WebTotem is a SaaS which provides powerful tools for securing and monitoring your website in one place in easy and flexible way.

Snitch

Down in the last 7 days:24#7,757

by pluginkollektiv8 months ago

Network monitor for WordPress. Connection overview for monitoring and controlling outgoing data traffic.

Atomic Edge Security

Down in the last 7 days:14#7,782

by shift81 month ago

WordPress firewall with cloud WAF rules, malware scanning, 2FA, vulnerability checks, IP blocking, and real-time security logs.

Security Safe

Down in the last 7 days:16#8,107

by Sovereign Stack, LLC8 months ago

This security plugin helps you quickly audit, harden, and secure your WordPress website.

Easy IP Blocker

Up in the last 7 days:25#9,364

by Carl Alberto6 months ago

Quickly block unwanted IPs in your WP site with CDN/proxy-aware IP detection

BitFire Security

Up in the last 7 days:40#10,307

by Cory Marsh1 month ago

Free WordPress firewall, bot blocking, login protection, and malware scanning. See suspicious traffic and investigate threats from your dashboard.

WEDOS

Down in the last 7 days:30#10,395

by wedos.com10 days ago

Protect your WordPress website with WEDOS Global: cloud WAF, DDoS protection, CDN and page cache, set up from WordPress.

Malcure Security Suite

Up in the last 7 days:6#11,522

by Malware Intercept1 year ago

🔐 All-in-one WordPress security: malware scanner (files+DB), force re-login, force logout, control logins, email-alerts. Cloud-based, light & fast.

QueryWall

Down in the last 7 days:17#11,910

by 4ley8 years ago

Autopilot protection for your WordPress against malicious URL requests.

Deactivate XML-RPC on WordPress

Up in the last 7 days:1#12,459

by tildemark11 years ago

This plugin will completely disable or deactivates XML-RPC on your WordPress installation. This will prevent any brute force attacks to your website u …

Limit Login Attempts (Spam Protection)

Down in the last 7 days:5#12,500

by wp-buy1 year ago

Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.

Spam Master

Down in the last 7 days:170#12,520

by TechGasp2 months ago

Real-time firewall and anti-spam for WordPress. Block spam bots, comments, logins & registrations. No CAPTCHA, no slowdown.

SAR One Click Security

Down in the last 7 days:64#12,547

by Samuel Aguilera1 year ago

Adds some extra security to your WordPress with only one click.

Protector

Down in the last 7 days:7#12,918

by Marcello Ruoppolo6 months ago

Protect your WordPress. The ultimate lightweight security suite. Block brute-force attacks, auto-repair infected core files, hide your login URL, set …

ReportedIP Hive

Up in the last 7 days:647#13,311

by Patrick Schlesinger7 days ago

Firewall, limit login attempts, 2FA with passkeys and anti-spam for comments and forms without CAPTCHA. Optional IP blocklist. GDPR-first.

Fail2WP

Down in the last 7 days:13#13,979

by joho6821 days ago

WordPress security plugin. Requires WordPress 6.2+ and PHP 7.4+.

WP Shieldon

Up in the last 7 days:99#15,043

by Terry L.3 years ago

WP Shieldon is a WordPress security plugin based on Shieldon library, a Web Application Firewall (WAF) for PHP.

Polar Mass Advanced IP Blocker

Up in the last 7 days:104#15,288

by polarmass1 year ago

Automatically block threats at the network level by forwarding Wordfence-detected IPs to Cloudflare.

Anti-Hacker

Up in the last 7 days:68#15,397

by emiliocini2 years ago

Anti-Hacker protects your Wordpress against hackers attacks, hiding sensitive information that would be used to exploit your site, detecting and fixin …

Bottle

Up in the last 7 days:246#15,687

by benrowland13 days ago

Bottle is a bot throttling plugin.

All in One Content Protector & Security

Down in the last 7 days:69#15,694

by Mahesh Thorat17 days ago

Find and fix security problems: a site scanner, vulnerability and file change alerts, login and bot protection, and safe fixes you can undo.

WP Guardian

Up in the last 7 days:126#15,912

by Ciprian Popescu1 month ago

For site owners who want an honest hardening checklist, not a heavy security suite: what to fix in WordPress, and what to ask your host for.