Best firewall plugins for WordPress

LogiShield Security

Up in the last 7 days:5,952#56,068

by newWebber8 months ago

LogiSheild Security with 2FA, limit login, custom login URL, and temp login is your go-to login security plugin for WordPress.

Qevix Shield

Up in the last 7 days:5,504#56,415

by qevixlabs1 month ago

WordPress security: login protection, 2FA, reCAPTCHA, malware scanning, firewall and an activity log. Every protection is off until you turn it on.

NexiGuard

Down in the last 7 days:2,137#56,804

by Nexiby LLC2 months ago

Restrict website access by IP addresses, CIDR ranges, countries, and regions.

RokthamBot

Up in the last 7 days:10,119#57,604

by Muhammad Sadiq ALi1 month ago

Complete AI bot firewall with per-bot controls, verified detection, emergency lockdown, and referral tracking.

Country and Continent Blocker

Down in the last 7 days:2,590#57,700

by jack1111114 years ago

Block ips by country and/or continent.

OptimizeSho

Up in the last 7 days:6,341#60,081

by ishayanabadtoday

Page cache, Core Web Vitals tools, firewall, wp2shell protection, Redis/Memcached object cache and database cleanup in one lightweight dashboard.

Dotsquares Custom Login URL & Security Suite

Down in the last 7 days:5,984#60,170

by maheshsharmads3 months ago

Change your WordPress login URL, design the login page, and enhance your site's security with built-in protection tools.

Watrix Bot Guard

#60,235

by wataru takahashi13 days ago

Log automated traffic with four kinds of rules, then rate-limit and block the offending IPs. Record first, block once you have seen the real data.

TotalWeb

#60,626

by Pranshtech Solutions Private Limited2 months ago

TotalWeb strengthens your site security with malware defense, brute-force protection, firewall rules, and smart hardening controls.

FPX Security Guard

#60,931

by freepdftxt1 month ago

Login protection, two-factor authentication, firewall and hardening for WordPress. Nothing leaves your server — no account, no cloud dashboard.

AI CyberGuard

Up in the last 7 days:11,027#61,297

by yosikrivo3 months ago

All-in-one AI-powered WordPress security: firewall, malware scanner, login protection, file integrity & safety snapshots — and more.

Genius Firewall

Up in the last 7 days:12,173#61,356

by Genius Plugin2 years ago

Democratized web security for free with the best website firewall designed for everyone from beginners to security experts using Wordpress.

NMR Checkout Firewall for WooCommerce

Up in the last 7 days:5,353#61,409

by mirceatm5 months ago

Protect WooCommerce cart, checkout, and Store API endpoints from bots, floods, and fake orders.

SMEPlan Security Shield

Up in the last 7 days:8,158#61,413

by solotop1 month ago

Scheduled security scanning (files/DB/config), baseline/integrity checks, safe quarantine & rollback, and hardening for WordPress.

Study For Next Security

#61,617

by Study For Next1 month ago

Enterprise-grade WAF, Malware Scanner, 2FA, Auto-Repair, Geo-Blocking, Vulnerability Scanner, Bot Protection, and Speed Optimizer.

Malware Scanner by Antivirus.ai

#61,639

by Plugins.shop1 day ago

WordPress antivirus and malware scanner with file integrity, 2FA, firewall, local signatures and reviewed Free recovery by Antivirus.ai.

SR WORKS ArmorPro

Up in the last 7 days:715#61,956

by SRWorks LLC1 month ago

Free WordPress security: WAF, firewall, brute force protection, two-factor authentication, passkeys, country blocking, and security headers.

VigiGuard Security

Up in the last 7 days:711#61,999

by Kashif Ahmed Khan8 months ago

Simple one-click WordPress security. Protect your site in 30 seconds.

FP Site Security

Up in the last 7 days:3,390#62,148

by Joseph Mendez4 months ago

Lightweight WordPress security: login defense, firewall, malware scans, file monitoring, and local backups — all running on your own site.

007AJ Security Scanner & Firewall

Up in the last 7 days:9,970#62,156

by 007AJ.com12 days ago

Login lockout, a lightweight firewall, a core file integrity scan, hardening switches and an activity log, running on your own server.

Nivoli Edge

#62,677

by calimonk3 days ago

Free security check, one-click hardening and a login-code audit for WordPress. Add the managed edge to refuse attacks before they reach PHP.

NeverLast Security Lite

#62,677

by neverlast16 days ago

Local-first WordPress security: bounded firewall, login controls, administrator TOTP, health checks, integrity evidence and activity logs.

WPG Shield

#62,919

by Rakesh Raja2 days ago

WordPress security and firewall plugin: malware scanner, 2FA login protection, brute force lockout, wp-config hardening and headers, verified.

LungoTech IP Guard

Up in the last 7 days:8,169#63,132

by ltechid3 months ago

Enterprise-grade .htaccess IP blocker with automated temporary IP purging, CIDR range support, and a modern UI.

Jass Bots Entry Control Manager

#63,348

by Jaswant Singh1 month ago

Protect your site from bad bots, manage allow/deny for search engines, AI crawlers, and more.

PlugeGuard

#63,484

by Maruf Hossain1 year ago

Scans your WordPress installation for hardcoded login credentials (usernames/passwords) and allows safe removal from PHP files.

Lunexia Security

#63,509

by lunexiait1 month ago

Complete WordPress security, 2FA login protection, WAF firewall, malware scanner, 1-click quarantine, and .htaccess server hardening.

xZeroProtect

Down in the last 7 days:1,280#63,599

by Ben Khalife25 days ago

Lightweight firewall for WordPress — blocks bots and scanners, tracks real visitor analytics with zero external dependencies.

Baskerville AI Security

Up in the last 7 days:4,648#63,818

by eQualitie11 days ago

Advanced WordPress security plugin with AI bot detection, GeoIP access control, CAPTCHA challenge, and optional AI cloud analysis.

PB4Host Security

Down in the last 7 days:2,695#63,933

by support@pb4host.com1 month ago

Enterprise Security Suite for WordPress: Web Application Firewall (WAF), Active Malware Scanner, Brute-Force Defense, 2FA, and System Hardening.

Blog Cutter Smart Security Management

#64,199

by Blog Cutter AI28 days ago

Helps reduce automated abuse with a visitor challenge, login shields, optional two-factor authentication, local hardening, and logs.

Nimble Security

Up in the last 7 days:4,115#64,381

by nimbleplugins.com19 days ago

Local WordPress security with 2FA, integrity monitoring, firewall, malware scanning, quarantine, incident response and recovery readiness.

Rapid Security Manager

Down in the last 7 days:13,044#65,046

by rapidplugins1 month ago

WordPress security with TOTP 2FA, recovery codes, trusted devices, Basic WAF, CSP, GeoIP, security headers, hardening, and diagnostics.

MVO Segurança e Proteção

Up in the last 7 days:4,966#65,085

by MVO Tools25 days ago

Modular WordPress security with 2FA, firewall, login protection, malware checks, encrypted quarantine and activity logs.

Speed in China

Down in the last 7 days:9,628#65,279

by Brandon Ernst1 month ago

Test website speed from mainland China, scan Great Firewall blocked resources, and localize Google Fonts from your WordPress dashboard.

Really Simple Firewall Sync

Up in the last 7 days:6,472#65,300

by Icarez8 months ago

Import and export blocked user agents for Really Simple Security (Pro & Multisite).

Jibong Purr-tection

Up in the last 7 days:890#65,338

by Aldrian Loyola16 days ago

Free, all-in-one WordPress security: firewall, malware scanner, two-factor login with passkeys, brute-force protection, live traffic and alerts.

NullState Security™

Up in the last 7 days:2,633#65,412

by SalesPC1 month ago

Short Description: Free WordPress security plugin – malware scanning, brute-force protection, two-factor authentication, and more.

GreenPNG

#65,986

by wpmmcc6 days ago

Traffic security, marketing attribution, conversion funnels, CRM scoring, and local analytics in one private, self-hosted plugin.

TrapFlux Request Firewall

#65,987

by susheelhbti4 months ago

Lightweight, behavior-based bot firewall. Blocks scanners before WordPress loads, with text attack reports for your hosting company.

Xerotact SHIELD-X Security

Down in the last 7 days:5,358#66,536

by xerotact14 days ago

Shared-hosting security with WAF logging, opt-in enforcement, malware scanning, login protection, hardening, backups, and audit tools.

Defen.so Connector

#67,071

by defenso2 months ago

Firewall, malware & file-change scanner, brute-force protection, rate limiting, plus free uptime + SSL monitoring — one-click connect, no API key.

DominoGuard Security

#67,478

by Dominopress1 month ago

Ultra-lightweight WordPress security plugin. Offering robust WAF, 2FA, Malware Scanners, Magic Links, Activity Log & Emergency Recovery Toolkit.

Dwarpal

#67,608

by Dwarpal2 days ago

Firewall, malware scan, login security, and SEO hack protection for WordPress.

FortressX Security

Down in the last 7 days:6,802#67,629

by Fortressxtoday

FortressX Security helps protect WordPress with login protection, firewall tools, security checks, hardening guidance and file integrity monitoring.

OOSOFT WAF Security

Down in the last 7 days:6,801#67,726

by oosoft5 months ago

A production-ready WordPress application-level Web Application Firewall (WAF) with request filtering, upload malware protection, and security logging.

AbyssGuard

#67,826

by abyssguard9 days ago

WordPress security plugin protecting from vulnerabilities, zero-day attacks, harvesters, spam, and hacking attempts.

Papy3D WAF

Down in the last 7 days:17,137#67,847

by papy3d1 month ago

A local pre-WordPress application firewall with bounded inspection, declarative rules, observation mode, and safe server diagnostics.

The I.T. Bear Guardian

Down in the last 7 days:9,449#68,260

by theitbear5 days ago

Stops hackers and AI bots that rush the site. You choose how firm. wp-admin stays open. Available directly on WordPress.org.

Bot Storm Radar

#68,368

by Rafael Minuesa28 days ago

Sees the bot swarms that per-address tools miss, says in plain words when a storm is running, and refuses scanner probes before a page is built.