Best security plugins for WordPress

Wordfence Security

#11

by Mark Maunder1 month ago

Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.

Jetpack

#17

by Automattic5 days ago

Connect ChatGPT, Claude, or another AI agent to your site. Plus backup, malware scan, firewall, stats, CDN, and SEO tools in one plugin.

Really Simple Security

#18

by Really Simple Plugins13 days ago

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate.

Hostinger Tools

#20

by Hostinger4 days ago

Simplified WordPress management. Manage site info, maintenance, security, & redirects.

Limit Login Attempts Security

#34

by WPChef2 days ago

Limit login attempts and stop brute force attacks. WordPress security with 2FA, firewall, bot protection, IP blocking, and secure login monitoring.

Loginizer

#46

by Softaculous10 days ago

Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.

Security Optimizer

#51

by SiteGround4 days ago

Secure your WordPress site from brute-force attacks, threats, malware, and bots. Free to use and easy to set up.

Safe SVG

Up in the last 7 days:2#52

by 10up12 days ago

Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.

ManageWP Worker

#55

by ManageWP6 days ago

A better way to manage dozens of WordPress websites.

All-In-One Security (AIOS)

Up in the last 7 days:1#56

by David Anderson / Team Updraft9 days ago

Protect your WordPress site with All-In-One Security (AIOS): easy-to-use login security, a powerful firewall, and much more.

MainWP Child

#86

by mainwp5 days ago

MainWP Child establishes a secure link between your WordPress sites and your self-hosted MainWP Dashboard, simplifying site management.

Kadence Security

#88

by Nexcess24 days ago

Harden your site security with Login Security, Two-Factor Authentication (2FA), Vulnerability Scanner, Firewall, and more. Formerly iThemes Security.

User Role Editor

#90

by Vladimir Garagulya4 days ago

User Role Editor WordPress plugin makes user roles and capabilities changing easy. Edit/add/delete WordPress user roles and capabilities.

Sucuri Security

#106

by Sucuri25 days ago

The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.

SiteGuard WP Plugin

Up in the last 7 days:1#108

by jp-secure12 days ago

Adds WordPress login and admin protections, including CAPTCHA, login lock, login alerts, renamed login URLs, and SiteGuard WAF tuning support.

Admin Menu Editor

#157

by Janis Elsts2 months ago

Lets you edit the WordPress admin menu. You can re-order, hide or rename menus, add custom menus and more.

Limit Login Attempts

Down in the last 7 days:1#201

by Automattic3 years ago

Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.

Activity Log

#220

by Elementor11 days ago

Monitor every change on your WordPress site — who did what, when, and where it came from — for a complete audit trail and stronger security.

InfiniteWP Client

Down in the last 7 days:1#267

by revmakx2 months ago

Install this plugin on unlimited sites and manage them all from a central dashboard. This plugin communicates with your InfiniteWP Admin Panel.

CloudSecure WP Security

Up in the last 7 days:3#281

by XServer25 days ago

CloudSecure WP Securityは、管理画面とログインURLをサイバー攻撃から守る、国産・日本語対応のセキュリティ対策プラグインです。 簡単な設定だけで、不正アクセスや不正ログインからWordPressを保護し、サイトのセキュリティを高めます。

Patchstack

Up in the last 7 days:27#289

by Patchstack3 months ago

Patchstack automatically identifies and mitigates security vulnerabilities in WordPress plugins, themes, and core.

Two Factor

Up in the last 7 days:2#309

by WordPress.org1 month ago

Enable Two-Factor Authentication (2FA) using time-based one-time passwords (TOTP), email, and backup verification codes.

Anti-Malware Security and Brute-Force Firewall

Down in the last 7 days:2#310

by Eli12 days ago

This Anti-Malware scanner searches for Malware, Viruses, and other security threats and vulnerabilities on your server and it helps you fix them.

WPS Limit Login

Down in the last 7 days:1#315

by NicolasKulka1 month ago

WPS Limit login limit connection attempts by IP address

NinjaFirewall (WP Edition)

Up in the last 7 days:1#343

by nintechnet1 day ago

A true Web Application Firewall to protect and secure WordPress.

BBQ Firewall

#346

by Jeff Starr2 days ago

The fastest firewall plugin for WordPress. Protect against a wide range of threats with minimal performance impact.

Jetpack Protect

#356

by Automattic2 months ago

Free daily vulnerability scans & WordPress security, powered by WPScan (an Automattic brand) and its 60,000+ vulnerability database. No setup needed!

Access Governance for WordPress (aka AAM)

Down in the last 7 days:1#396

by AAM Plugin20 days ago

Access Governance for WordPress. Understand, control, and continuously govern who and what can access your WordPress website.

Hide My WP Ghost

Down in the last 7 days:9#418

by John Darrel1 day ago

Hide My WP Ghost is a WordPress security plugin that hides WP paths and protects your site with Path Security, Firewall, Brute Force Protection, 2FA

Defender Security

Up in the last 7 days:3#519

by WPMU DEV - Your All-in-One WordPress Platform1 month ago

WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more.

Stream

#560

by XWP2 months ago

Real-time activity log and audit log for WordPress. Track every user action — logins, edits, plugin & settings changes — and get alerts.

WP fail2ban

Down in the last 7 days:8#636

by invisnet19 days ago

WP fail2ban uses fail2ban to protect your WordPress site.

Stop User Enumeration

Up in the last 7 days:4#671

by fullworks16 days ago

Helps secure your site against hacking attacks through detecting User Enumeration

Login No Captcha reCAPTCHA

#708

by Robert Peake5 months ago

Adds a Google No Captcha ReCaptcha checkbox to your Wordpress and Woocommerce login, forgot password, and user registration pages.

Titan Anti-spam & Security

#725

by Themeisle10 days ago

Block spam comments, defend against login attacks, strengthen site security. Anti-spam, brute-force protection & two-factor authentication built in.

WP Hide & Security Enhancer

Up in the last 7 days:1#756

by nsp-code1 month ago

Protect your website by concealing vulnerable WordPress traces, plugins, themes, login/admin url. 2FA, Captcha, Firewall, Security Headers etc.

Companion Auto Update

Down in the last 7 days:1#820

by Papin Schipper7 months ago

Manage all updates on your WordPress site. Stay in the know with several optional e-mail notifications and logs. For free.

Modular DS

Up in the last 7 days:5#826

by Modular DS26 days ago

Manage all your WordPress sites from one place. Automate updates, backups, uptime monitoring, security, reports, and more.

SecuPress with Simple SSL

Up in the last 7 days:1#885

by SecuPress2 days ago

Protect your WordPress with SecuPress, analyze and ensure the safety of your website daily.

Security Plugin, Firewall & Malware Scanner with Auto Removal

Down in the last 7 days:3#886

by CleanTalk Inc12 days ago

Protect WordPress from malware, hackers, brute-force attacks & suspicious traffic. Includes firewall, login security, 2FA & vulnerability checks.

underConstruction

#903

by Garrett Grimm2 years ago

Creates a 'Coming Soon' page that will show for all users who are not logged in

NinjaScanner

Up in the last 7 days:1#905

by nintechnet2 months ago

A lightweight, fast and powerful virus scanner for WordPress.

Protect Uploads

Up in the last 7 days:2#910

by Protect Uploads1 month ago

Protect your uploads directory. Prevent browsing, password-protect files, add watermarks, and discourage right-click copying.

Simply Static

Up in the last 7 days:7#917

by Simply Static1 day ago

Convert WordPress to static HTML. Boost performance 3-5x. Eliminate security vulnerabilities. Deploy anywhere.

Shield Security

Down in the last 7 days:1#938

by Paul11 days ago

Smart WordPress security that blocks bots automatically, guides you to what matters, and repairs problems — without drowning you in noise.

XO Security

Up in the last 7 days:3#971

by ishitaka3 months ago

XO Security is a plugin to enhance login related security.

WPFront User Role Editor

Down in the last 7 days:2#977

by Syam Mohan2 months ago

Easily allows you to manage WordPress user roles. You can create, edit, delete and manage capabilities, also copy existing roles.

Kadence Central

Up in the last 7 days:1#1,003

by Nexcess2 months ago

Manage multiple WordPress sites from one dashboard.

Blackhole for Bad Bots

Down in the last 7 days:2#1,043

by Jeff Starr2 days ago

Blackhole is a WordPress security plugin that detects and traps bad bots in a virtual black hole, where they are denied access to your entire site.

Stop Spammers Classic

Up in the last 7 days:1#1,105

by Web Guy3 days ago

A simplified, restored, and preserved version of the original Stop Spammers plugin.