Best security plugins for WordPress

SecureLite Security

#30,573

by PixelGravitas9 days ago

Free firewall, malware scanner, limit login attempts, 2FA and hide login, plus an attack simulation that proves each protection works.

WP EzPz Tweaks

Down in the last 7 days:102#30,584

by WP EzPz2 years ago

Take the control of your WordPress Customized, Efficient, and Secure

Keel Defaults

Up in the last 7 days:367#30,646

by Dan Knausstoday

46 sane WordPress defaults, a warning when your core version is vulnerable, and the option to install the same-branch secure fix.

Two Factor Auth

#30,728

by oskarhane12 years ago

Secure WordPress login with Two Factor Auth. Users will have to enter an One Time Password when they log in.

Upgrade Notification by Email

Up in the last 7 days:599#30,738

by kkarpieszuk16 years ago

Sends daily notofication at admins' email if installation of Wordpress is out of date

SW Site Doctor

#30,786

by ScalingWeb Digital Services10 months ago

Scan your WordPress site for security risks, speed issues, and migration problems. Free with PageSpeed integration.

WP Require Auth

Down in the last 7 days:296#30,841

by joch12 years ago

This plugin makes it mandatory to be logged in before viewing any content.

Hard Guard Security

#30,890

by endriu77727 days ago

Free WordPress security plugin with malware scanner, vulnerability scanner, 2FA, brute force & login protection, audit log and hardening.

Open24 Security

Down in the last 7 days:2,504#31,013

by open246 days ago

Security hardening for WordPress and WooCommerce: lock down the REST API and login, limit admin accounts, get alerts and detect modified files.

Poke Monitor

Up in the last 7 days:1,163#31,041

by Gabor Angyal27 days ago

See who is poking your site: Cloudflare bypasses, secret-file scans, backdoor access, XML-RPC abuse and scanner user agents.

Bulwarden

Up in the last 7 days:9,907#31,047

by jgloeckl.de5 days ago

Site agent for health monitoring, malware scanning, encrypted backups and remote updates, driven by a Bulwarden hub you connect it to.

HumanGate

Up in the last 7 days:827#31,079

by DarkAI10 months ago

Protect your content from AI training crawlers and scraping bots. Add refusal signals, enforce blocks, and deter large-scale extraction.

Abdal Security Headers

Up in the last 7 days:1,714#31,262

by Ebrahim Shafiei (EbraSha)2 months ago

Enhance WordPress security with HTTP security headers and a Smart CSP Assistant that discovers real site resources for review.

Cloudbridge Mattermost

Down in the last 7 days:371#31,286

by joho689 months ago

Mattermost integration for WordPress. Tested with Mattermost 5.30.1+ and WordPress 5.5+.

Geosec

#31,343

by rbonfil9 months ago

Geosec protects your admin panel (wp-admin) by allowing access only from the countries you authorize.

Deviser Shield

Down in the last 7 days:6,162#31,415

by Vishnu Malhotra3 days ago

Monitor WordPress plugin activity and receive instant email alerts for activations, deactivations, deletions, and file changes.

Post Access Controller

Down in the last 7 days:514#31,478

by arsdehnel10 years ago

Enhances the Post "Visibility" options within the edit post page to allow specific users or groups of users access to the post.

Wieczo's Virus Scanner

Down in the last 7 days:245#31,504

by wieczo2 years ago

A plugin to scan uploaded files for viruses with ClamAV.

SVG Uploader

#31,527

by parasdev1 year ago

Short Description: A simple plugin to upload SVG files securely to WordPress media library.

InTouch Integrity Guard

Down in the last 7 days:1,258#31,527

by intouchdesigndev2 months ago

A lightweight file integrity checker, hardening toggles and opt-in known-vulnerability alerts — built to never slow your site down.

Anti DDOS/BOT reCAPTCHA Protection

Down in the last 7 days:702#31,611

by Pantelis Kaplanoglou4 months ago

Stop bad bots and limit DDOS attacks with Google reCAPTCHA. One-time human verification keeps automated traffic away. Translated in 132 languages.

Vulnerability Detector & Plugin Manager

Up in the last 7 days:547#31,631

by WebGarh Solutions1 year ago

Vulnerability Detector is a free plugin designed to secure your WordPress website by identifying known vulnerabilities in the WordPress.

TD Admin Lock & Load

Down in the last 7 days:323#31,647

by transcendev12 years ago

admin lock, admin locking, wordpress admin security, brute force Requires at least: 3.0 Tested up to: 3.8.1 Stable tag: 1.0.

Media File Limiter

#31,834

by teamredfox1 year ago

Restrict maximum upload file size and block dangerous extensions at upload time. Ensures early-stage validation for enhanced WordPress media security.

Simula Security Telemetry for Wordfence

Up in the last 7 days:347#31,852

by SiMULA2 months ago

Export Wordfence-generated telemetry into a node_exporter textfile collector .prom file and append incidents detected by Wordfence to a local log file …

Secure Owl Firewall

#31,853

by Sajber Sove11 days ago

Secure Owl Firewall is a smart rule-based protection that blocks threats and secures your site from attacks.

Shield WP Admin

Up in the last 7 days:339#31,861

by Differenz System5 months ago

Secure and harden your WordPress admin area with powerful features like custom login URLs, reCAPTCHA, brute-force protection, and more.

BotFend Anti-Bot Firewall

Up in the last 7 days:317#31,866

by Omajemite Don1 month ago

Professional security plugin protecting WordPress from malicious bots, spam, and server attacks using an advanced Web Application Firewall.

RESTless

#31,966

by BjornW8 years ago

RESTless disables REST calls for non-authenticated requests.

H Speed WP

#31,968

by yokudekiru10 years ago

ワードプレスの高速化やSEO対策、セキュリティ、スパムコメント、盗用などの対策等の様々な機能を実行するプラグインです。

Email Login Attempts

Up in the last 7 days:155#32,015

by tildemark11 years ago

This plugin will send an email whenever a someone tries to login via the WordPress login page.

Owl Security

Down in the last 7 days:139#32,037

by Owlgorithm Labstoday

All-in-one WordPress security: firewall, malware scanner, login security, 2FA and automatic backups. Free, no license needed.

Restrict Password Change for Non-Administrators

#32,068

by sabareeshr1 year ago

Short Description: Prevents non-administrator users from changing their passwords without admin approval.

Simple Changed Files

Up in the last 7 days:37#32,094

by Peter Wooster13 years ago

A very simple plugin that displays the names of files changed after a given time or within a time range.

PHPGuard Lite

#32,168

by phpguard19 months ago

Check WordPress plugins and PHP code for syntax errors before activating or using them.

Better Detection

#32,174

by bettersecurity2 years ago

Improve the security of your website by detecting unexpected changes to content

WP REST API Key Authentication

Down in the last 7 days:1,318#32,182

by Kamal Hosen1 year ago

A simple plugin to add API key-based authentication to the WordPress REST API. Manage multiple API keys and secure your REST API endpoints.

Fix It Easy Security Headers

Up in the last 7 days:682#32,183

by WP Fix It - WordPress Experts1 year ago

Configure core HTTP security headers for your WordPress site in a few clicks.

Stalza Security

Down in the last 7 days:711#32,204

by Fuad K M1 month ago

Smart WordPress security without the bloat: integrity, malware, vulnerability and brute-force protection, explained and prioritized.

•k•u•r•s Security

Down in the last 7 days:166#32,209

by kurs mediasystems1 year ago

This plugin lets you to strengthen your WordPress by deactivating unused functions that might be a security risk.

All In One Must Have

Down in the last 7 days:1,478#32,249

by minhlinh1009 years ago

Plugins synthesize the functions useful needed on a website to help you optimize your website and support you manager, security defence, seo website b …

LJPL Armored robots.txt

#32,272

by Lukasz Jasinski13 years ago

Add some directives to your robots.txt file to keep your site safer

WP Utility and Performance

#32,315

by Mayank Majeji2 years ago

This plugin allows you to enable / disable the unused resources included by WordPress and third-party themes and plugins.

Security Checker for Themes

#32,344

by Harpalsinh Parmar5 months ago

Analyze your WordPress theme's PHP code for issues, security vulnerabilities, and adherence to coding standards with a detailed report and score.

Buro Castra

#32,377

by burocastra2 months ago

Adds utilities to your WordPress, such as selectively disabling notifications per category.

DB Solution

#32,418

by Davide Baraldi1 month ago

Email 2FA, custom login URL, access monitoring, manual IP blocking, and login attempt logging for DB Solution.

VideoWhisper Security Audit

#32,435

by videowhisper1 day ago

AI-ready WordPress site health and security reports for administrators, with queued scans and optional read-only REST/MCP access.

SAM Support Access Manager

#32,438

by 2carets5 months ago

Grant temporary, monitored support access to developers and staff.

Empex CAPTCHA for Cloudflare Turnstile

#32,492

by empexdigital1 month ago

Invisible bot protection for WordPress forms via Cloudflare Turnstile. Install once, protect every form.

PlusExpert Admin Audit

#32,499

by plusexpert2 months ago

Lightweight administrator visibility and suspicious admin monitoring for WordPress.