Best malware plugins for WordPress

Global threat activity level Widget

Up in the last 7 days:10,478#37,352

by pcrisk8 months ago

Displays global virus and spyware activity level and latest spyware threats with guidelines how to remove them.

Code Scanner

#39,937

by Magda Sicknick7 years ago

Scans WordPress plugin, theme, and core directories for malicious code injections.

FirePhage Security

#42,954

by Nikola (FirePhage)3 months ago

WordPress security plugin with malware scanning, file integrity checks, login protection, update visibility, and optional FirePhage sync.

MAT Firewall

#44,460

by matpluginsofficial1 year ago

MAT Firewall is a powerful WordPress security plugin that helps protect your website from malicious attacks, brute force attempts, and unauthorized ac …

Luketom Compromise Review

#45,886

by lukehutton2 months ago

Incident-focused safeguards for a multi-site WordPress estate.

Banana Defender

Down in the last 7 days:7,709#46,253

by flexxdev6 days ago

WordPress Security — Made in Germany. Firewall, Virtual Patching, Malware Scanner & Login Protection. GDPR-compliant, cookie-free, no cloud.

Pura Vida Vulnerability Scanner

Up in the last 7 days:1,281#52,073

by trgomez4 months ago

Scan your plugins, themes and WordPress core against trusted vulnerability databases and get a clear, prioritized security overview.

Shakvaro Shield

Up in the last 7 days:7,885#52,224

by Shakil Ahamed4 months ago

Comprehensive WordPress security: firewall, brute force protection, 2FA, file integrity monitoring, hardening checks, and activity logging.

TeraServer Clinic Scan & Repair Kit

Down in the last 7 days:1,157#53,958

by famelhaut3 months ago

Scans for malware, keeps core/plugins/themes updated, and backs up your site — connected to your free or paid TeraServer Clinic account.

Obsyde Aegis

Up in the last 7 days:10,476#55,174

by obsyde6 months ago

Real-time threat detection, automated IP blocking, and AI-powered security analysis.

Aabcore Security Malware & Virus Scan

Up in the last 7 days:6,111#55,767

by Aabcore web1 month ago

Aabcore Security detects malware, viruses, and threats while providing firewall and website protection to block attacks and keep your site secure.

Bollwerk

#55,830

by yuracode2 days ago

Protects your WordPress site automatically. No setup needed. Stops password guessing and blocks malicious traffic before they reach you.

Swairish Site Security with SOC

Up in the last 7 days:13,136#56,201

by Swadhin Khan Mohammad Nakib3 months ago

WordPress malware protection, audit logging, SOC visibility, firewall controls, file scanning, hardening, CAPTCHA, and reports.

Vardalion Security

Up in the last 7 days:6,725#56,613

by vincewebdesign1 month ago

Behavioural WordPress security with threat scoring, brute-force protection, bot detection, automatic IP blocking, logging and recovery tools.

Genisoft Security Connector

Up in the last 7 days:5,327#56,686

by genisoftweb20 days ago

Secure read-only connector linking your WordPress site to the WP Security malware-scanning service for remote security audits.

ExploitShield Domain Monitor

#57,252

by Dancho Danchev1 month ago

Threat-first, domain-scoped security monitoring inside WordPress.

PressPatrol

#59,293

by Scooter2 months ago

Local file-integrity patrols for WordPress core, plugins, themes, administrators, uploads, reports, and weekly email summaries.

ShieldScope

Up in the last 7 days:1,107#59,319

by Dhiren Patel3 months ago

A thorough WordPress security scanner that checks your entire site for vulnerabilities and misconfigurations — without slowing it down.

Walkercorp Sentinelle

Up in the last 7 days:10,511#59,460

by sylvainmarchandwalkercorp10 days ago

WordPress security in plain language: firewall, hide login (custom login URL), activity log, limit login attempts and malware scan.

Integrum Security Scanner

Up in the last 7 days:12,891#59,783

by WPChef25 days ago

Scan your WordPress files for malicious code. Pick the folders, start a scan, and review suspicious files right inside wp-admin.

OS3 Website Protector

#59,974

by fsoft1 month ago

Protect your WP site from malware and virus

Georgica Compliance & Accessibility Check

Down in the last 7 days:3,637#60,365

by rogeorgica13 days ago

Check your site for common GDPR/cookie, accessibility (EAA / WCAG basics) and security issues. Plain-language fixes. Runs locally, no tracking.

Integrity Sentinel

#60,498

by Bsidenet2 months ago

Audit WordPress integrity, known plugin vulnerabilities, login rate limits, admin activity, updates and frontend assets from one dashboard.

007AJ Security Scanner & Firewall

Up in the last 7 days:8,331#61,105

by 007AJ.com11 days ago

Login lockout, a lightweight firewall, a core file integrity scan, hardening switches and an activity log, running on your own server.

ATV Web Security

Up in the last 7 days:2,792#61,763

by atvsoftwarelabs4 days ago

Block persistent changes on a compromised WordPress site — with optional AI-assisted false-positive filtering.

CoreSeal

Up in the last 7 days:10,456#62,093

by applidata5614 days ago

Checks WordPress core files against official checksums, scans themes and plugins for malware, and repairs or quarantines suspicious files.

Lunexia Security

#63,509

by lunexiait1 month ago

Complete WordPress security, 2FA login protection, WAF firewall, malware scanner, 1-click quarantine, and .htaccess server hardening.

SeguridadEnMiPC Detector de Anuncios y Malware

Up in the last 7 days:7,999#63,510

by juanluisfernz1 month ago

Ocho herramientas de seguridad en un panel: publicidad intrusiva, malware, integridad de archivos, configuración, usuarios, archivos expuestos y cabec …

CompatShield WP Site Auditor

#63,850

by CompatShield4 months ago

Comprehensive WordPress security auditor. Scans for vulnerabilities, misconfigurations and threats — scored report with actionable fix steps.

Weio Site Check

Down in the last 7 days:15,336#65,399

by weioai1 month ago

Checks HTTPS, SSL expiry, mixed content, core files, PHP in uploads, spam and cloaking signs and WooCommerce checkout, and explains each fix.

ABC Integrity

#66,351

by abc-drew17 days ago

Detect modified, missing, or tampered WordPress core files by comparing them against the official checksums published by WordPress.org.

Dhurandhar AI Security

Down in the last 7 days:1,799#67,538

by midhunesh6 months ago

AI-powered WordPress security plugin that detects vulnerabilities and enhances website protection.

TotalWeb

#67,783

by Pranshtech Solutions Private Limited2 months ago

TotalWeb strengthens your site security with malware defense, brute-force protection, firewall rules, and smart hardening controls.

Techbox Firewall

#68,340

by techboxdesign1 month ago

Web Application Firewall for WordPress. Blocks SQL injection, XSS, malicious bots, and bad requests.

Dwarpal

#68,571

by Dwarpal2 days ago

Firewall, malware scan, login security, and SEO hack protection for WordPress.

Aegis Shield

Down in the last 7 days:18,003#69,067

by Aegis Shield1 year ago

A powerful WordPress security scanner that detects suspicious code, file integrity issues, and offers expert support.

JAT Shell Scanner

Up in the last 7 days:4,322#69,125

by Jeremy Anderson4 days ago

Checks if your site is exposed to, or was hacked through, PHP2Shell (critical PHP bug) and wp2shell (WordPress bug). Optional fixes you can undo.

IntegriFix

Down in the last 7 days:14,614#69,335

by consilioweb1 month ago

Checks every file of your site against its official copy and tells you, in plain words, what was changed, added or removed.

FreshRepo

Down in the last 7 days:9,003#69,717

by dilhan2 months ago

Identify 3rd-party vs official items, and easily clean and reinstall files from the official repository with 1 click.

Detectant Malware Scanner

Down in the last 7 days:2,373#70,199

by detectant1 month ago

Scans WordPress uploads synchronously with Detectant and quarantines malware found by background reconciliation.

BadgerScan

Down in the last 7 days:9,441#70,628

by cyberbadger1 month ago

See your site the way an attacker does and the way only an admin can, reconciled into one honest A to F grade.

Trufend

Down in the last 7 days:2,763#70,766

by shewa1 month ago

Harden WordPress with brute-force protection, login security, security headers, malware scanning, backups, and more.

ScanDeath

Down in the last 7 days:11,484#70,882

by burncycle1 month ago

Local WordPress protection with IP blocking, security logs, local rules, and optional ScanDeath Cloud synchronization.

Uptrue Monitor

#70,972

by Sachin D6 months ago

Monitor your site from the inside — file injections, rogue admin users, foreign-language content, brute force attacks, and security misconfigurations.

NullState Security™

#71,720

by SalesPC1 month ago

Short Description: Free WordPress security plugin – malware scanning, brute-force protection, two-factor authentication, and more.

Papy3D Security Guard

Down in the last 7 days:15,445#71,835

by papy3d2 months ago

A modular, self-hosted WordPress security suite with no external CAPTCHA or TOTP service.

Scudo Security

Down in the last 7 days:15,679#71,839

by Totaliweb2 months ago

Environment-aware security: firewall, malware & integrity scan, brute-force protection and 2FA — safety-first, with previews and rollback.

Thessley Security Hardening

#72,269

by thessleysecurity1 month ago

Modular WordPress security hardening — IP/country blocking, request inspection, file integrity, malware scanning, and real-time alerting.

PreFlight Scanner

#72,550

by Boulley Technology3 months ago

Scan any plugin ZIP for PHP conflicts, class/function collisions, hook priority conflicts, and malicious code — before installing.

Quick Integrity Scanner

#72,874

by Medium Interactive4 days ago

Read-only file integrity checks for WordPress core, plugins, uploads and admin accounts. Detection only. Never changes a file.