Best security plugins for WordPress

Vulnity Security

#22,455

by manuelgalan3 days ago

Security monitoring and SIEM integration that keeps your WordPress sites safe in real time.

SbS Settings

Down in the last 7 days:311#22,475

by onepixelwp13 days ago

All-in-one WordPress & WooCommerce optimization. Modern AJAX toggle UI, completely free.

Site Cleanup Controls

Up in the last 7 days:79#22,477

by Abhishek Sinha2 months ago

Selectively disable WordPress features to improve performance, security, and cleanliness. Toggle each feature individually from a single settings page …

Issues Tracker

Up in the last 7 days:87#22,490

by Oleksandr Lysyi1 year ago

Issues Tracker allows you view and search WordPress logs, receive security advice, track 404 errors, and view your server settings.

SPIRALセキュアセッションマネージャー

Down in the last 7 days:158#22,539

by SPIRAL Inc.4 months ago

Easily add secure membership management and authentication features to your WordPress site using SPIRAL®.

Forvault Security

Up in the last 7 days:172#22,543

by Store Armory4 months ago

Forensic, read-only malware and integrity scanner: heuristic web-shell detection, core-checksum verification, and a file-change baseline.

Turbo Guard

Up in the last 7 days:2,220#22,548

by Turbo Addons7 days ago

WordPress security plugin with malware scanner, firewall, 2FA, vulnerability scanner, and file integrity checker. Free scan, 3 free cleanups.

DGN Webs Spam User Cleaner

Up in the last 7 days:182#22,560

by dgnwebs25 days ago

Intelligently scan and bulk-remove spam user accounts from your WordPress site using a multi-signal scoring engine.

GDPR Framework Add-on for Formidable Forms

Down in the last 7 days:51#22,622

by Data443 Risk Mitigation, Inc.5 months ago

Tools to help with making Formidable Forms GDPR-compliant. Fully documented, extendable and developer-friendly.

Yard

Up in the last 7 days:366#22,712

by Yard | Digital Agency1 month ago

Enhanced password and login security for WordPress.

Limit Login Countries

Down in the last 7 days:268#22,755

by Dirk Weise12 years ago

This plugin gives you the ability to limit WordPress admin logins based on the country the visitor's IP address is located in.

Yubikey

Up in the last 7 days:124#22,768

by Kieran O'Shea1 year ago

Enhanced login security for WordPress by requiring the presentation of a One Time Password (OTP) from a registered Yubikey

Limesnip Simple2FA

Down in the last 7 days:13#22,776

by Maurice Hason2 months ago

Simple email-based two-factor authentication for WordPress. Adds a clean, Linear-inspired verification screen to your login flow.

Slotbaas

Up in the last 7 days:105#22,811

by hvmediabv2 months ago

De lichte totaaloplossing voor een WordPress-website die goed op slot zit: firewall, security scanner, brute-forcebescherming en automatische updates …

Custom settings for Sucuri Scanner

Down in the last 7 days:18#22,899

by Viktor Szépe10 years ago

Hide firewall related UI elements, relocate datastore path and more.

POWER CAPTCHA

Down in the last 7 days:125#22,917

by POWER CAPTCHA7 months ago

POWER CAPTCHA protects your WordPress website and WordPress forms against bots and unauthorized persons. GDPR compliant!

BrandProtection

Up in the last 7 days:70#22,932

by devkamran8 months ago

Protect your brand with unique verification codes. Generate, assign to WooCommerce products, print QR tags, and enable frontend verification.

Site Lockdown Security for MainWP

#22,989

by WP Fix It - WordPress Experts4 months ago

Manage Site Lockdown Security across your MainWP child sites with fast lock-status visibility, bulk sync tools, and one-click lock actions.

Frontend HTTP Auth Protection

Up in the last 7 days:272#23,016

by Prashant Baldha10 years ago

Frontend HTTP Authentication Protection makes private front part of your website. When web developer like to give demo of website to end client before …

Protect WP Config File from Phishing Attacks

Down in the last 7 days:258#23,082

by Michele Butcher-Jones10 years ago

Returns a blank white page if people try to load the wp-config file (or backups of it) in a web browser.

SiteGuard Scanner

Up in the last 7 days:263#23,101

by EG Secure Solutions2 months ago

Companion plugin for the EG Secure Solutions vulnerability diagnostic service: signed site-ownership verification and plugin/theme inventory.

Secure Content Protector

Down in the last 7 days:144#23,156

by iSmart Web Service7 days ago

This Plugin will Secure your website content by disabling right-click, F12, disablig content and images copying.

SVG Safe Uploads

Down in the last 7 days:105#23,166

by Muhammad Umer Shahzad1 year ago

Securely upload SVG files in WordPress with built-in sanitization and admin settings.

TrustSig Security

Up in the last 7 days:418#23,413

by trustsig1 month ago

Stops bots, spam and brute-force attacks on your WordPress forms. No CAPTCHA, no account, no keys. Activate it and you are protected.

Security Headers & Caching

Up in the last 7 days:441#23,486

by Studio Be41 year ago

Enhance your WordPress site security with HTTP security headers and improve performance with smart caching. Works with all hosting providers.

Wonderful Repeated Hit Blocker for Wordfence

Down in the last 7 days:116#23,507

by wonderfulplugins1 month ago

Blocks IP addresses that Wordfence has logged as attacking your site repeatedly within a short time window.

Tweakr

Down in the last 7 days:135#23,514

by Andi Dittrich7 months ago

Supercharges your Blog with production grade Tweaks, Features and Utilities

UFP Identity

Down in the last 7 days:124#23,522

by richardl@ufp.com12 years ago

The UFP Identity plugin integrates Wordpress login and user management seamlessly with the UFP Identity platform.

Flex SSL

Down in the last 7 days:2,198#23,592

by Flex Plugins1 month ago

Force HTTPS, update site URLs, and add security headers. Supports reverse proxies, certificate checks, and lock-out recovery.

CSP Violation Reporter

Up in the last 7 days:4,194#23,614

by Guilherme Dumas Peres1 month ago

Collect and inspect Content Security Policy (CSP) reports with filtering, grouping, rate limits and automatic cleanup.

Admin Login Guard & Branding

Up in the last 7 days:135#23,626

by Code and core2 months ago

Change your WordPress login URL, hide wp-admin, track failed login attempts, and fully customize your login page design for enhanced security.

Shieldfy Security Firewall and Anti Virus

Up in the last 7 days:41#23,642

by Shieldfy8 years ago

Shieldfy is a cloud-based security shield for your website to protect it from web attacks and malwares.

Show Recaptcha Where Nedeed

Down in the last 7 days:231#23,698

by Ermald Billa11 months ago

This plugin fixes Contact Form 7's Recaptcha v3 so it only appears on pages with contact forms.

WM Guard

#23,713

by Witte Marketing1 month ago

Technical WordPress site checks for updates, file integrity, backups and security status in plain language.

Remove WordPress Version

Up in the last 7 days:59#23,732

by Umar Draz1 month ago

Remove the WordPress version from your site: hide the generator meta tag and strip ?ver= from stylesheet and script URLs.

Buddyfence

Down in the last 7 days:483#23,764

by JC4 years ago

This plugin allows you to restrict not logged-in users from accessing BuddyPress pages

RefiTune

Down in the last 7 days:206#23,830

by Tamas Rottenbacher1 month ago

Take control of WordPress with smart performance tweaks, security enhancements, and usability improvements. RefiTune is an all-in-one toolkit.

Users Login Monitor

Down in the last 7 days:296#23,868

by wpgear6 months ago

A freeware plugin, for daily-notify site administrator, about users who logged in during the day.

Permissions & Security Audit

Down in the last 7 days:287#23,889

by Andrew Stewart5 years ago

Permissions & Security Audit is a plugin that runs a series of tests to check common security issues with the following areas:

Secure Paste

Down in the last 7 days:27#23,890

by Nikunj Soni1 year ago

Secure your post by removing unnecessary HTML tags from post, page and custom post type content before inserting it to your WordPress database.

Better Captcha

#23,897

by bettersecurity2 years ago

Stop bad bots from attacking your forms using hCaptcha or simple maths questions

Page Authority

Up in the last 7 days:22#23,919

by Talisa @ Page Authority4 months ago

Restrict WordPress user accounts to administrator-approved email domains.

KillBot

Down in the last 7 days:297#23,942

by VOWE1 year ago

The KillBot plugin for WordPress uses the external KillBot service to protect websites from bots and automated traffic.

Plugin Auditor

Down in the last 7 days:77#24,006

by Tom Greenwood7 years ago

Have you ever had that situation where you have a bunch of plugins installed and you can't remember why half of them are there?

User Suspend

Down in the last 7 days:459#24,058

by Entrepreneur7 months ago

Suspend WordPress user accounts with timed or permanent bans, reasons, email notifications, and a full audit log.

GeoGuard WP

Up in the last 7 days:226#24,074

by Robert G.3 months ago

Blocks unauthorized role logins and account registrations from restricted countries using local MaxMind databases with customizable checkbox controls.

Anti-Brute Force, Login Fraud Detector WordPress plugin

#24,083

by aispera313 years ago

Anti-Brute Force, Login Fraud Detector Wordpress plugin is a security plugin that detects and blocks malicious IP addresses attempting to log into Wor …

AMWScan Antimalware Scanner Lite

Up in the last 7 days:809#24,094

by Marco Cesarato1 month ago

Block risky uploads and run malware, integrity, vulnerability, and reputation scans from your WordPress dashboard.

IP Informant Logger

#24,101

by whittakerj2 years ago

Logs and displays visitor IP addresses for website security and monitoring.

Defyn Security Manager

Up in the last 7 days:642#24,117

by Defyn24 days ago

Hide wp-admin behind a custom login URL and stop brute-force attacks with two-factor authentication, login limits, IP rules and an activity log.