Best firewall plugins for WordPress

Zero Budget Bot Shield

Down in the last 7 days:84#16,612

by Sam9 months ago

Free, lightweight WordPress plugin that blocks bots by country and prevents abuse via repeated 404 errors. Perfect for small organizations.

SiteFort Security

Up in the last 7 days:2,697#17,453

by securewpteam4 days ago

Free WordPress security with dynamic bot detection, network threat intelligence, cloud-assisted malware scans, login security and vulnerability detect …

Deerwood Country Access

Up in the last 7 days:127#17,511

by DeerwoodMedia12 days ago

Country blocking and intelligent IP protection for WordPress, powered by Cloudflare.

Bearmor Security

Up in the last 7 days:248#17,647

by bearmor13 days ago

Completely free WordPress security: firewall, 2FA with authenticator app, malware scan, file integrity, vulnerability alerts, AI summary.

Forge12 Security

Up in the last 7 days:1,508#17,888

by Forge12 Interactive GmbH5 days ago

Firewall, malware scanner, 2FA and login protection that keeps your visitors' data on your own server. No CDN, no tracking, made in Germany.

SecurynAI

Up in the last 7 days:9,366#18,994

by WisdmLabs2 days ago

Firewall, malware scanning, and vulnerability alerts — with every finding explained in plain English and the exact fix to apply.

Diamond Sierra Site Defense

#19,086

by teoleonardtoday

Daily malware scan, firewall, login protection and two-factor login. Checks files against WordPress.org and catches ClickFix fake-CAPTCHA injections.

Cloud Maestro

Down in the last 7 days:344#19,145

by 5 Star Plugins (Rob)25 days ago

Bulk deploy powerful WAF security rules to multiple Cloudflare domains with one click. Protect your sites from bots, malicious traffic, and threats.

Watchdog Security Lite

Up in the last 7 days:342#19,447

by Lumiverse Dynamic8 days ago

Smart WordPress security with hardening, malware scanning, login defense, Live Watch, persistence monitoring, WooCommerce protection and recovery.

Rate Limit Guard

Up in the last 7 days:117#20,118

by IP Stresser Guard1 year ago

This plugin safeguards your website from Layer 7 DDoS attacks and IP stressors by utilizing a rate limiting feature.

GranTech IP Firewall for AbuseIPDB

Up in the last 7 days:244#20,155

by Marc Gran9 days ago

Protect your WordPress site by detecting, blocking and reporting malicious IPs using the AbuseIPDB API. Includes brute-force protection.

Polanger Admin Suite

Up in the last 7 days:1,416#20,190

by Polanger18 days ago

Secure, control and customize WordPress with modular admin tools, access controls, 2FA, Firewall protection, activity monitoring, and more.

Iron Security

Down in the last 7 days:104#20,328

by WpIron1 year ago

Hardening tool that blocks hackers and protect against: Brute Force Attacks, Exploits, Injections, Clickjacking and other important functionalities.

CenterShield

Up in the last 7 days:4,360#20,424

by WPセンター11 days ago

WordPress security for Japanese sites: login protection, 2FA, file protection and malware scanning, each explained in clear Japanese.

Locktura Security

Up in the last 7 days:463#20,459

by Alain Lankers19 days ago

All-in-one WordPress security suite with local firewall, login protection, anti-spam controls, hardening, monitoring, and alerts.

Royal AI Firewall

Up in the last 7 days:847#20,570

by Royal Plugins1 month ago

See every AI agent on your site. Decide who gets your content — block, allow, or log-only for GPTBot, ClaudeBot, PerplexityBot, and 60+ others.

Proactive Security Suite

#20,836

by ITCS1 year ago

Welcome to the ProActive Security Suite Plugin Wiki Enhance your WordPress website's security with the ProActive Security Suite.

MoeSec Security

#20,838

by MoeSec2 months ago

MoeSec Security is a comprehensive plugin for Malware Scanning, Monitoring, Integrity, Security Hardening and Protection.

Liveupx Security

Down in the last 7 days:36#20,867

by Liveupx3 months ago

Complete WordPress security — Firewall, 2FA, Malware Scanner, Vulnerability Scanner, Login Protection, Security Headers. 100% free.

Deny All Firewall

Down in the last 7 days:160#20,925

by Olly Campion1 month ago

Stop unwanted requests before WordPress loads. Deny All Firewall uses .htaccess to allow genuine content and refuse everything else.

Failed Login Firewall reporting

Up in the last 7 days:7#21,013

by Anton Aleksandrov4 years ago

Report failed logins to centralized database and block IPs on firewall level!

Bastora Security Audit

Down in the last 7 days:915#21,285

by Bastora2 days ago

62-Punkte-Sicherheits-Check mit Firewall, Schadcode-Scanner, URL-Reputation, Captcha, Schwarm-Schutz und Auto-Reparatur der WordPress-Kerndateien.

Access Defender

Up in the last 7 days:325#21,311

by Huzaifa Al Mesbah1 year ago

Advanced VPN & proxy blocker for WordPress. 99.9% accuracy, multi-API rotation, real-time monitoring. Protect against fraud & spam.

WP Firewall

Down in the last 7 days:235#21,438

by Andrea De Giovine6 years ago

Protect WordPress from hacker attacks, spam and dangerous actions.

SentraIP

Up in the last 7 days:214#21,450

by moveforwardltd1 month ago

Block unwanted traffic by country, known bots, custom User-Agents and spam-comment IPs, using fast offline MMDB lookups. No account required.

Turbo Guard

Up in the last 7 days:3,200#22,793

by Turbo Addons6 days ago

WordPress security plugin with malware scanner, firewall, 2FA, vulnerability scanner, and file integrity checker. Free scan, 3 free cleanups.

Slotbaas

Up in the last 7 days:90#22,795

by hvmediabv2 months ago

De lichte totaaloplossing voor een WordPress-website die goed op slot zit: firewall, security scanner, brute-forcebescherming en automatische updates …

Custom settings for Sucuri Scanner

Down in the last 7 days:136#22,912

by Viktor Szépe10 years ago

Hide firewall related UI elements, relocate datastore path and more.

Wonderful Repeated Hit Blocker for Wordfence

Up in the last 7 days:356#23,565

by wonderfulplugins1 month ago

Blocks IP addresses that Wordfence has logged as attacking your site repeatedly within a short time window.

GeoGuard WP

#24,279

by Robert G.3 months ago

Blocks unauthorized role logins and account registrations from restricted countries using local MaxMind databases with customizable checkbox controls.

CoxWall

Down in the last 7 days:128#24,663

by themelooks1 day ago

Professional WordPress security plugin with firewall, brute-force protection, login hardening, security headers, and file integrity monitoring.

Malroot Security

Up in the last 7 days:749#24,803

by Niraj Pal4 months ago

Catches database-resident backdoors, rogue admins, malicious MySQL triggers and self-healing rootkits other scanners miss.

N0WPScan

#25,564

by GeekParadize6 years ago

Secure your Wordpress of WPScan Prevent hackers using WPScan to find vulnerabilities in your site, disable this plugin when you are security testing o …

TSI Visitor Blocker

Up in the last 7 days:196#25,722

by tsidigitalsolution16 days ago

Protect your WordPress site from unwanted visitors, spam, bots, and brute-force attacks with a lightweight and easy-to-use security solution.

ProbeGuard 404 Firewall for Cloudflare

Up in the last 7 days:545#25,748

by DanDawson20 days ago

Monitors 404 requests and blocks or challenges abusive IPs at the Cloudflare edge using IP Access Rules.

Nexura Security

Up in the last 7 days:5,311#26,308

by Nexura Security13 days ago

Free WordPress security plugin with malware scanner, firewall, 2FA & brute force protection. Lightweight alternative to Wordfence & Sucuri.

IP Blacklist for Cloudflare

Down in the last 7 days:143#26,347

by Matt Miller15 days ago

Blacklist IP addresses that attempt to login with a banned username through Cloudflare.

Blocked in China

Up in the last 7 days:1,173#26,379

by Brandon Ernst1 month ago

Is your site available behind the Chinese Firewall? Check for free using the Blocked in China API.

Sitemap Guardian

Up in the last 7 days:1,167#26,799

by Sitemap Co.2 months ago

Free, practical security monitoring and hardening for WordPress.

BotZoom

Up in the last 7 days:1,108#27,065

by wned1 month ago

Blocks bots that scan your site for leaks, stops brute-force logins and keeps a local log. No account and no external service needed.

WebDmitriev Protection

Up in the last 7 days:200#27,187

by webdmitriev2 months ago

Lightweight security module, attack protection, and file integrity monitoring.

ClearComet Cloak for MCP

Up in the last 7 days:45,043#27,248

by clearcomet9 days ago

Hide your WordPress MCP server and Abilities API from strangers. Only you and the AI assistants you choose get in.

CIDRAM

#27,431

by Maikuolan1 day ago

CIDRAM: A PHP-level CIDR/IP-based firewall solution.

bad_ip WP

Down in the last 7 days:421#27,691

by Iridium Intelligence1 year ago

Lightweight WordPress firewall plugin to block malicious IPs, TOR nodes, and brute-force attacks with real-time sync and control.

Stillward Security

Up in the last 7 days:1,258#27,848

by Adnan Ali1 month ago

Lightweight, safe-by-default WordPress security. Hardens your site without interfering with normal behaviour. Aggressive features are opt-in.

CB Bot Guard

Up in the last 7 days:2,099#27,858

by Chris M Ybanez25 days ago

Stop spam bots, scrapers and request floods before they load WordPress and WooCommerce, and cut server RAM and CPU spikes.

Bot Protector for PayPal for WooCommerce

#27,972

by Segun Adetubo10 months ago

Protect your WooCommerce PayPal checkout from bot attacks, card-testing, and fake failed orders.

PowerSEC

Up in the last 7 days:609#28,209

by CinderEye LLC1 month ago

Free firewall/WAF, malware scanning, login protection, 2FA, file-integrity monitoring and local backups. Optional multi-site Central dashboard.

TrustBrain IP Access Control

Up in the last 7 days:485#29,064

by TrustBrain20 days ago

GeoIP-based access control plugin with country blocking, IP whitelist/blacklist, and access logging.

WordSec

#29,070

by WordSec1 month ago

WordPress security plugin with firewall, malware scanner, and login protection. Block attacks and scan for malware from one dashboard.