Best security plugins for WordPress

Super Duper Two-Factor Login

Down in the last 7 days:271#26,134

by Super Duper Plugins2 months ago

Free 2FA for WordPress: authenticator app, email codes, backup codes, WooCommerce, role enforcement, plus optional server and upload hardening.

eID-Login

Up in the last 7 days:34#26,140

by eidlogin2 months ago

The eID-Login plugin offers an alternative login to WordPress, using an electronic identity (eID) like e.g. the German eID ("Personalausweis").

AVAR Server Monitor

Up in the last 7 days:88#26,188

by AVAR Solutions1 month ago

Privacy-first WordPress monitoring: uptime, SSL, cron and server checks, a Site Health score and an alert center, plus login protection.

CRA Vuln Notify

Down in the last 7 days:9#26,192

by macroncode2 months ago

Monitors plugin/theme vulnerabilities and manages Cyber Resilience Act (CRA) notification deadlines, with a dashboard and ready-to-use drafts.

BotZoom

Up in the last 7 days:1,544#26,261

by wned1 month ago

Blocks bots that scan your site for leaks, stops brute-force logins and keeps a local log. No account and no external service needed.

LinkRail Redirects, 404 & Security

Up in the last 7 days:64#26,267

by devshujon5 months ago

All-in-one redirect manager, broken-link repair and admin URL security for WordPress. 301/302/307/308/410, regex, hidden /wp-login, IP whitelist, emer …

Tiny 2FA + Brute Force Protection

Up in the last 7 days:584#26,291

by Web Guy5 months ago

A simple two-factor authentication plugin that just works.

IP Blacklist for Cloudflare

Down in the last 7 days:19#26,307

by Matt Miller17 days ago

Blacklist IP addresses that attempt to login with a banned username through Cloudflare.

Core Checksum Verifier

Down in the last 7 days:306#26,385

by kamranmayo1 year ago

Verifies the integrity of your WordPress core files with official checksums. Displays modified/missing files.

WT Hardening

Up in the last 7 days:216#26,502

by Webmasters.Teamtoday

WordPress hardening without touching your theme: XML-RPC, user enumeration, login limiter, security headers, strong passwords, event log.

Ninja Forms

Down in the last 7 days:91#26,764

by Data443 Risk Mitigation, Inc.5 months ago

The easiest way to make your Ninja Forms GDPR-compliant. Fully documented, extendable and developer-friendly.

MaxtDesign REST API Control

Up in the last 7 days:189#26,817

by MaxtDesign1 month ago

Full control over your WordPress REST API. Block, restrict, or whitelist endpoints per user role. Lightweight, fast, zero frontend footprint.

Sitemap Guardian

Up in the last 7 days:603#26,823

by Sitemap Co.2 months ago

Free, practical security monitoring and hardening for WordPress.

PKL WPz REST API Authentication

Up in the last 7 days:74#26,835

by Palmiiz Kittinan1 month ago

Control WordPress REST API access by requiring user authentication with API key system.

Bang Vulnerability Scanner

Down in the last 7 days:505#26,863

by Marcus Downing8 years ago

Reports if your WordPress site has any known vulnerabilities.

Quarivo Comment Shield

Down in the last 7 days:324#26,910

by 菅原隆志3 months ago

Activate it and stay focused. Obvious comment spam is quietly quarantined, while possible false positives remain easy to review and restore.

One Active session

Down in the last 7 days:321#26,928

by Nomad Programmer11 years ago

This plugin clears all other logged in sessions and allow only one login by one user

TTC WordPress Tripwire Tool

Down in the last 7 days:87#26,973

by ljmacphee15 years ago

This plugin acts as a tripwire for you. It will give you a list of all files changed on your WordPress site in the last 1-99 days.

Server Security Scan

Down in the last 7 days:406#27,012

by wputils13 years ago

Scans wordpress website server security for detecting possible vulnerabilities and hacks.

Moatline Malware Scanner

Down in the last 7 days:1,032#27,016

by Next Nova Technologies1 day ago

Finds the malware hacked WordPress sites hide: fake plugins, hidden admins and database scripts. Built by a team that cleans hacked sites.

Webfiable Análisis de Sitios

Down in the last 7 days:358#27,122

by WebFiable1 month ago

Connects your WordPress site to the panel where Webfiable shows its analyses of your site's security and configuration.

CoxWall

Down in the last 7 days:2,624#27,255

by themelooks3 days ago

Professional WordPress security plugin with firewall, brute-force protection, login hardening, security headers, and file integrity monitoring.

Metadas Version Removal

Up in the last 7 days:37#27,271

by metadas5 months ago

A lightweight, zero configuration plugin that removes all WordPress version output from your site for improved security and cleaner markup.

GOOSEC

#27,272

by goosec1 month ago

Lists the external scripts loaded by your pages and tells you when a new destination appears.

ServicePress Connector Core

Up in the last 7 days:118#27,302

by Harmedia Studios3 months ago

Enterprise operational integration platform connecting WordPress and ServiceNow environments.

Steel Security & Hardening

Down in the last 7 days:6#27,353

by sweetwatermedia3 months ago

High-signal WordPress security auditing and hardening with practical site audit tools for administrators.

ELADIVINE Core

Up in the last 7 days:22,584#27,365

by Elad Yanai1 day ago

Security hardening that works on any theme, and steps aside wherever another plugin already does the same job.

SiteCare

#27,368

by SiteCare5 days ago

Wrong permissions expose your site or quietly break it. Fix them across your whole WordPress install in one safe click - no FTP or SSH.

Brozzme Change Username

Down in the last 7 days:58#27,439

by Benoti5 years ago

Easily change a WordPress Username, save time, increase security.

WebDmitriev Protection

Down in the last 7 days:125#27,494

by webdmitriev2 months ago

Lightweight security module, attack protection, and file integrity monitoring.

DadsFam Login Security

Up in the last 7 days:625#27,523

by dadsfam14 days ago

Stops brute-force attacks with its own self-learning Brain that knows your real people, locks bots out fast and fixes its own setup.

WP Essentials

Down in the last 7 days:200#27,687

by Craig F.10 years ago

All-in-one bundle of essential plugins and functions for all WordPress websites.

Lockr

Up in the last 7 days:39#27,694

by Chris Teitzel5 years ago

Lockr is the first API & Encryption key management service for WordPress, providing an affordable solution to secure secrets used by plugins.

SEON for WooCommerce

Down in the last 7 days:435#27,705

by seontechnologies8 years ago

SEON is an API-based fraud management solution helping merchants and payment providers radically reduce fraud loss. This extension connects your Wooco …

Stillward Security

Up in the last 7 days:273#27,754

by Adnan Ali1 month ago

Lightweight, safe-by-default WordPress security. Hardens your site without interfering with normal behaviour. Aggressive features are opt-in.

WPuppy

Down in the last 7 days:581#27,795

by Sem Wong8 years ago

WPuppy is software for automatically updating Wordpress Plugins, Themes and Core.

BaseCloud Security Manager

#27,812

by BaseCloud8 months ago

🛡️ Enterprise-grade WordPress security made simple. Implement military-standard HTTP security headers with zero technical knowledge required.

NPC Maintenance Inspector

Down in the last 7 days:215#27,823

by npc0117 days ago

WordPress maintenance health-check tool with 9-point diagnostics, history tracking, and optional AI-powered reports.

Chout

Down in the last 7 days:323#27,847

by Chout2 months ago

Customize the logo, links, colors and background on the WordPress login page. Give your WordPress login page a custom and professional look.

PowerSEC

Up in the last 7 days:963#28,052

by CinderEye LLC1 month ago

Free firewall/WAF, malware scanning, login protection, 2FA, file-integrity monitoring and local backups. Optional multi-site Central dashboard.

Yasakani Cache

Up in the last 7 days:108#28,100

by enomoto celtislab7 months ago

Simple ! Easy !! Ultra-high-speed !!!. Definitive edition of the page cache. And Bot and Security Utility.

Frumentarii Security Malware Scanner and Anti Virus

Down in the last 7 days:75#28,135

by Shieldfy10 years ago

Frumentarii is a fast and smart malware scanner. Can detect Web Malwares. With smart code highlighting you can identify the infection.

Bot Protector for PayPal for WooCommerce

#28,162

by Segun Adetubo10 months ago

Protect your WooCommerce PayPal checkout from bot attacks, card-testing, and fake failed orders.

Simple HSTS Preload

Down in the last 7 days:107#28,222

by kevin7 years ago

This plugin enables HSTS header on WordPress

GDPR Helper using CSP

#28,274

by bpassini4 years ago

This plugin allows easy addition of Content Security Policy

CIDRAM

Down in the last 7 days:521#28,291

by Maikuolan2 days ago

CIDRAM: A PHP-level CIDR/IP-based firewall solution.

VPN leaks test

Down in the last 7 days:602#28,295

by macvk13 days ago

VPN, DNS, WebRTC, email, torrent, open-port, and IP-blacklist checks for WordPress sites.

Ensomedia Security powered by shieldwave.io

Up in the last 7 days:34,618#28,336

by shieldwave12 days ago

Finds malware, tampered files, known vulnerabilities, injected content and risky settings, and explains each fix in plain words.

UltimaKit

#28,373

by Ankit Panchal1 month ago

180 admin, security and optimization tools in one plugin, all free. Enable only what you need; disabled modules never load.

Panomity DarkWeb Press

#28,532

by Panomity GmbH3 years ago

Panomity DarkWeb Press Foundation for DarkWeb Connectivity.