Best security plugins for WordPress

Hashcash

Down in the last 7 days:527#28,538

by pkaroukin8 years ago

Integrates Hashcash.IO proof-of-work widget with login/registration/comment forms.

JPEGcrypto

Down in the last 7 days:82#28,555

by Electric Blue Industries Ltd.5 years ago

JPEGcrypto safeguards JPEG images on your web site from 'copyright violation'. This plugin is discontinued.

WP Login Security 2

Down in the last 7 days:339#28,565

by andersvinther214 years ago

Whitelist User IP addresses. If a user logs in from an unknown IP the plugin sends an email to the user and optionally the admin with a one-time key.

Technical Site Auditor

Down in the last 7 days:2,278#28,660

by Kristoffer Pihlfelt3 days ago

Technical SEO, performance, security and database audit for WordPress, with manual guidance for every issue and one-click fixes you can undo.

WPGreeks Securities & SEO Tools

Up in the last 7 days:1,835#29,005

by WPGreeks Pro29 days ago

An advanced, robust, modular security, SEO, and productivity toolkit. Mask vulnerable routes, duplicate pages/posts, harden environments, generate HTM …

AutoCHMOD

#29,042

by belinde12 years ago

Protect folders and files from unhautorized changes managing filesystem permissions.

WP-Login and WP-Admin Whitelist

#29,043

by SwiftNinjaPro6 years ago

A Plugin That only allows whitelisted IP's, or optionally whitelisted browsers, to access wp-login, or optionally wp-admin.

CCA Site Health Advisor

Up in the last 7 days:2#29,051

by chriscourtassociates5 months ago

Simple WordPress health checks with clear explanations and practical recommendations for DIY website owners.

SeaSP Community Edition

Down in the last 7 days:285#29,058

by bluetriangle5 years ago

SeaSP Community Edition is an automated Content Security Policy Manager. SeaSP allows you to create, configure, manage, and deploy a Content Security …

Disable Author Archive Redirection

#29,059

by kimipooh5 months ago

The plugin disables the author archive redirection.

TrustBrain IP Access Control

Up in the last 7 days:485#29,064

by TrustBrain21 days ago

GeoIP-based access control plugin with country blocking, IP whitelist/blacklist, and access logging.

WordSec

Down in the last 7 days:824#29,065

by WordSec2 months ago

WordPress security plugin with firewall, malware scanner, and login protection. Block attacks and scan for malware from one dashboard.

PerfectSecurity

Down in the last 7 days:243#29,075

by IAmFoxx8 years ago

PerfectSecurity protects your WordPress login from malicious users and IP addresses.

sHub-Log

Down in the last 7 days:2,452#29,078

by SyntaxCloud LLC5 days ago

Records suspicious login attempts, 404s, and malicious requests, then blocks IPs after repeated attempts.

Ironclad CAPTCHA WP plugin

Down in the last 7 days:241#29,087

by Andrey Yeriomin14 years ago

3D objects-based CAPTCHA to get rid of spam in comments.

Contact Camo

Down in the last 7 days:434#29,094

by Plan Left4 months ago

Contact Camo protects email addresses from scrapers and bots — now with a native Gutenberg block so you can build beautiful, protected contact experie …

Proxy IP Addresses for Cloudfront with Wordfence

Down in the last 7 days:156#29,115

by emfluence interactive marketing2 years ago

Automatically update Wordfence's list of proxy IP addresses with Cloudfront IP addresses

Readme Detonator

Down in the last 7 days:630#29,120

by wolszewski8 years ago

This plugin will delete readme.html and license.txt from WordPress and increase security level of website.

Caret Country Access Limit

Down in the last 7 days:251#29,142

by caret2 years ago

国単位アクセス制限プラグイン - Caret Country Access Limit

FormShield

Down in the last 7 days:148#29,146

by GDimitrov6 months ago

FormShield protects your forms from bot spam using advanced pattern matching and behavioral analysis. No annoying captchas, unlimited forms.

WP Shield

Down in the last 7 days:364#29,183

by drupalmatts1 month ago

This plugin will allow you to secure your development, staging and UAT environments with an http authentication block.

WP Similar Basic Auth

Down in the last 7 days:371#29,201

by 256hax5 years ago

Protect WordPress admin page on similar Basic Auth without .htaccess.

Balada Fix

#29,254

by vladanrs4 months ago

Blocks unauthenticated access to vulnerable REST paths. Add paths in Settings → Balada Fix. Only admins can use them.

bad_ip WP

Down in the last 7 days:1,893#29,263

by Iridium Intelligence1 year ago

Lightweight WordPress firewall plugin to block malicious IPs, TOR nodes, and brute-force attacks with real-time sync and control.

WPG Page Protection

Down in the last 7 days:127#29,265

by David Powell1 year ago

Protects the page content against screenshots and disables features such as right-clicking and keyboard shortcuts.

Upsure

Up in the last 7 days:2,096#29,266

by Umbrella Web1 month ago

Plugin and theme updates that can't break your site. Automatic backup before every update, health check after, instant rollback if anything breaks.

Clean .htaccess Tool

#29,299

by Jeffrey Costa2 years ago

Clean .htaccess Tool simplifies WordPress security and performance by safely removing unused entries from your .htaccess file.

Lana Text to Image

Up in the last 7 days:50#29,313

by Lana Codes3 years ago

Easy to use text to image shortcode

Login by Magic

Up in the last 7 days:179#29,326

by Magic4 years ago

Login by Magic plugin replaces the standard WordPress login form with one powered by Magic that enables passwordless email magic link login.

Paranoid911

Down in the last 7 days:141#29,363

by jeka91118 years ago

Checks wordress installation (database and files) for changes and emails admin if any changes took place.

NIS2 Compliance

Up in the last 7 days:196#29,424

by Babini Mazzari4 months ago

A comprehensive security compliance plugin implementing logging, monitoring and vulnerability management features.

RC Geo Access

#29,574

by Rick Curran13 days ago

This plugin restricts access to the login page of your WordPress Admin based on the location of the user trying to access it.

Nullis Shield

#29,584

by Edward Samuel (Enigmaking)1 month ago

A Prevention-First security engine that eliminates bots before they hit your database. Lightweight, zero-bloat, and incredibly fast.

Hack-Info

#29,601

by wpgear26 days ago

Ext Security. Monitoring about evil hacking attempts and block IP via htaccess. Our reports - Simply, Briefly and in Detail.

SecurelyWP

Up in the last 7 days:1,072#29,663

by SecurelyWP2 months ago

SecurelyWP is a simple security plugin that protects your WordPress site right after activation—no setup needed for most features.

Version Cloak

Up in the last 7 days:451#29,692

by nextdoorentertainment4 months ago

Hide or decoy plugin, theme and core versions from scanners. Neutralize XML-RPC and lock down WP-Cron.

Grey Rock Block Synchroniser for Wordfence and Cloudflare

Up in the last 7 days:3,133#29,779

by Greyscale Zone3 days ago

Make your WordPress site boring to repeat attackers by synchronising qualifying Wordfence firewall blocks with Cloudflare.

MijnPress onderhoud

Up in the last 7 days:974#29,880

by ramon fincken5 years ago

Plugin used for maintenance clients, prevents clients from breaking sites

WP Security Coat

Up in the last 7 days:92#29,916

by leontinashe9 years ago

A security plugin mearnt to relieve you from your security issues in your wordpress website, built to prevent server , php/mysql and wordpress based a …

MY SECURITY

Up in the last 7 days:139#29,922

by creativestudiollc4 years ago

Implement the minimum security of wordpress.

Artiman Guard

Up in the last 7 days:864#29,956

by ArtimanWeb14 days ago

Self-hosted form abuse protection, registration firewall, 404 bot shield and SEO crawl protection.

WebDiagnosis Site Audit

#30,009

by Nicolas Blandel6 days ago

The quality control for your WordPress site. One complete audit, one report of 170+ checks, clear priorities and actionable fixes.

Search Protection

Down in the last 7 days:316#30,071

by hilfans1 year ago

Lindungi form pencarian Anda dari spam dan karakter berbahaya dengan daftar hitam dan integrasi Google reCAPTCHA v3.

Safe Sites

Up in the last 7 days:613#30,077

by Hidayat Mahetar8 months ago

Safe Sites is a WordPress security plugin offering real-time monitoring, file permission control, malware scanning, and plugin & theme security.

THiS SEO

Up in the last 7 days:641#30,088

by Frode Heimen5 months ago

SEO plugin for WordPress professionals and agencies. No ads, no green lights. Just fast workflow tools that save time.

Seriously Simple Spam Blocker

#30,118

by Garth Mortensen10 years ago

A plugin that interacts with the StopForumSpam.com api to protect your

WP-Simply remove generator tag

Down in the last 7 days:430#30,166

by Thimo Grauerholz10 years ago

If active, this plugin removes the WordPress version from your website header.

XQ Secure Form

Up in the last 7 days:102#30,306

by xqmsgdev4 years ago

XQ Secure Forms ensures that every piece of client information is secure, from submission to receipt. Transform your existing forms and collect secure …

AIFORYA Activity Log

Up in the last 7 days:39#30,520

by aiforya2 months ago

Log important admin activity (logins, content, plugins, users) with adjustable retention. Fully local, no API key, no external service.

Section-Specific Dashboard Lock

Up in the last 7 days:194#30,559

by newwaypmsco1 year ago

Lock specific sections and submenus of the WordPress admin dashboard with custom passwords for enhanced control and security.