Best security plugins for WordPress

Bat Activity Log

#46,797

by Jaroslav Svetlik5 months ago

Track important WordPress activity with detailed audit logs, filters, alerts, reports, and integrity checks.

Guardify Firewall

Down in the last 7 days:4,722#46,838

by BitCleric1 year ago

Guardify is a powerful WordPress firewall plugin designed to protect your website from a wide range of threats, including brute force attacks, SQL inj …

IP Logger & Duplicate Redirector

Down in the last 7 days:8,915#46,884

by Foluso Oluwole11 months ago

A lightweight plugin to log visitor IP addresses, detect duplicates, and optionally redirect repeat visitors.

WP Access Control Center

Down in the last 7 days:11,248#46,952

by Michael Finkenberger2 months ago

Take full control over authentication, sessions, and password security in WordPress – including real-time session monitoring, 2FA, and emergency tools

RSCSoft Activity Audit Log

Down in the last 7 days:13,248#46,982

by Masahiro Sakamoto11 months ago

Record WordPress user activity: posts, plugins, themes, logins. Filter logs, export CSV, and automatically clean old records.

Easy Country Spam Blocker

Down in the last 7 days:3,765#47,050

by Medium Interactive2 months ago

Easy Country Spam Blocker is a simple plugin that blocks spam traffic from your website.

Auto-Backup & One-Click Restore

#47,372

by Dcastalia LTD1 year ago

Complete WordPress backup and restore solution with real-time progress tracking, AJAX interface, and email notifications.

Brute Force Protector

Down in the last 7 days:1,404#47,391

by Kanhaiya Yaduwanshi5 months ago

Protect your WordPress site from brute force attacks, login security threats, and unauthorized access. Limit login attempts, block malicious IPs, and …

Back List

Down in the last 7 days:4,555#47,443

by w3prodigy16 years ago

Adds Whitelist and Blacklist options for Trackbacks and Pingbacks

AIS

#47,485

by AIS TECHNOLABS4 years ago

Blocks malicious IP Addresses, Spammers and Hackers from accessing page without compromising the performance of your WordPress Website.

IVGuard

#47,656

by manky10 years ago

IVGuard is the plugin that specialized for the protection and monitoring against the attacks to your website. Now you see and know everything.

Peakhour

Down in the last 7 days:435#47,659

by Daniel3 years ago

Seamlessly integrate wordpress with Peakhour's performance and security service. Peakhour can dramatically improve your page load times, block th …

PHP Floating Point DoS Attack Workaround

#47,686

by Sergey Biryukov14 years ago

Prevents 32-bit PHP versions from hanging when processing a request containing 2.2250738585072011e-308 value.

ROB (rat out blocker)

Down in the last 7 days:3,277#47,704

by stasionok5 months ago

Restrict execution of certain external requests with partial url or even regex to prevent personal data leakage (as example)

Cyber Smart Defence

Up in the last 7 days:247#47,747

by cybersmartempire10 months ago

Lightweight WordPress security firewall with login protection and threat monitoring.

Presscheck

Down in the last 7 days:788#47,774

by figoliquinn10 years ago

Integrates with the iOS Presscheck application allowing you to keep track of your site\'s security updates from your phone or watch.

OST Site Inspection

Down in the last 7 days:7,820#47,824

by orienst1 month ago

Verify a site before launch: visibility status, a pre-delivery checklist, stray domain URLs and PHP error logs, all in one admin screen.

Loyal Security

Down in the last 7 days:9,566#47,862

by Loyal Security6 days ago

Firewall, malware scanner, file integrity monitoring, hardening, 2FA, backups, and audit logging — one self-contained plugin.

WPTrigone Security

Down in the last 7 days:16,599#47,910

by Olivier / WP Trigone7 days ago

Professional security plugin focused on hardening, and essential security best practices for business websites and WooCommerce stores.

TrustedLogin Connector

Down in the last 7 days:9,687#47,960

by TrustedLogin1 month ago

The right way to provide support for WordPress customers. Secure logins and encrypted secret sharing.

Webtaru Site Options and Login Security

#48,011

by Aaditya Sharma1 month ago

Manage contact info, business hours, schema SEO, and harden login security with custom slugs and CAPTCHA from a single premium admin panel.

Fernet Encryption

Down in the last 7 days:10,894#48,276

by Hubbard Labs1 year ago

Fernet Encryption is a plugin that can be used to encrypt and decrypt data in WordPress using fernet.

DigoWatchWP

Down in the last 7 days:700#48,291

by digo18 years ago

The plugin DigoWatchWP scans your blog posts and pages for changes.

No mor admin

Down in the last 7 days:12,535#48,310

by leethompson14 years ago

This plugin is real simple and basic, it doesn't allow anyone that does not have admin rights to access wp-admin. This will help ensure security.

Toolbar flags

#48,316

by Scott J. Walter6 years ago

Displays the status of WP_DEBUG, DISALLOW_FILE_EDIT, and DISALLOW_FILE_MODS in the Toolbar.

Do Not Iframe Me

#48,362

by Jesse Lee13 years ago

Do Not Iframe My Wordpress Site

Secure Admin Login

#48,564

by jaymakadiya4 months ago

Protect your WordPress website by hiding the default wp-login.php and wp-admin URLs.

Fstyle Honeypot Bot Blocker

Down in the last 7 days:14,333#48,566

by fstylegear095431 day ago

Blocks bad bots and vulnerability scanners by IP when they hit a robots.txt trap or probe .env, .git or wp-config backups. No external service.

OLS 2FA

Up in the last 7 days:20,210#49,003

by One Loop Studio1 year ago

OLS 2FA is a lightweight plugin that enhances your website's security by adding email two-factor authentication (2FA).

Greenhouse Portal SSO

Up in the last 7 days:9,360#49,007

by ghmeh5 years ago

A client plugin that provides SSO (Single-Sign-on) or opt-in authentication against Greenhouse Portal Auth0 implementation.

Blueternal BOLT Security Toolkit

Up in the last 7 days:22,789#49,041

by jfgamsby8 days ago

WordPress and hosting security scanner with plain-English findings, safe hardening actions, reports, and optional AI summaries.

exlink-safe-filter

#49,049

by C1G1 year ago

高级外部链接安全过滤插件，提供白名单、灰名单、黑名单分类管理及多种安全防护选项。

WebOsmotic Diagnostics Dashboard

Up in the last 7 days:9,359#49,050

by sainawebosmotic72 months ago

Extends the default WordPress Site Health with deeper diagnostics, health scoring, actionable recommendations, and selected one-click fixes.

Onion Service by Adam Szokol

#49,058

by Adam Szokol10 months ago

A focused plugin designed to enable Onion Service & Mapping support for your WordPress site.

ALAN Captcha Forms

#49,098

by webandco1 year ago

ALAN Captcha is a privacy-first, GDPR compliant anti-bot solution that protects WordPress website forms, logins and more from spam, abuse and attacks.

IvoryGate

#49,100

by sebaklim934111 month ago

Passwordless WordPress sign-in using trusted IIS Windows Authentication and explicit identity-to-user mappings.

Orchestrator

#49,125

by Sergio Scabuzzo1 month ago

A plugin to track available plugin updates and optionally auto-update them based on time or security vulnerabilities.

Login Defender

Up in the last 7 days:19,964#49,135

by Amzil Ayoub1 year ago

Login Defender enhances your WordPress site's security by allowing you to change the default login URL.

Security Headers Audit

#49,162

by Chowdhari Chetan4 months ago

Manage HTTP security headers, monitor Content Security Policy (CSP) violations, capture browser console errors, and maintain a complete audit trail of …

What's going on

Up in the last 7 days:283#49,543

by jaimenj4 years ago

A simple Web Application Firewall for WordPress.

NEW Easy GDPR

Up in the last 7 days:18,542#49,653

by sameralshaer4 years ago

Cookie Compliance for GDPR, European and other cookie law and consent notice requirements on your website.

Vokull Security Center

Up in the last 7 days:22,624#49,757

by Steven Glogger2 months ago

Security monitoring and alerting: plugin, user, role and config changes, file integrity, passkeys, two-factor authentication and geo-aware logins.

WSKR Posts

#49,769

by wskr5 years ago

Bring the power of WSKR to WordPress. Turn your posts into premium content and generate pay-per-article revenue.

Digages Website Monitor

Up in the last 7 days:21,312#49,770

by Digages3 months ago

Digages Website Monitor tracks visitor activity, login attempts, and theme/plugin installs and updates to keep your WordPress site secure.

Basiru Checkout Fraud Guard for WooCommerce

#49,777

by basiru0046 months ago

Intelligent WooCommerce bot blocking for checkout abuse, carding protection, and operator review.

Proofwright

#49,788

by 1click2open1 day ago

EU Cyber Resilience Act toolkit: component inventory, SPDX & CycloneDX SBOM, hash-chained snapshots, a posture score, and a CRA document generator.

TapHuman

#49,803

by Kate1 month ago

Stop bots with gamified, privacy-first CAPTCHAs. Zero telemetry. Zero tracking. Powered by cryptographic Proof-of-Work. One-click setup.

Swairish Site Security with SOC

#49,806

by Swadhin Khan Mohammad Nakib3 months ago

WordPress malware protection, audit logging, SOC visibility, firewall controls, file scanning, hardening, CAPTCHA, and reports.

NetShield

#49,822

by Behnam Moradi6 months ago

Scans and blocks unreachable or unwanted external HTTP requests to dramatically optimize WordPress loading speed on restricted networks.

IRONCREED Request Log

Up in the last 7 days:21,306#49,856

by ironcreed1 month ago

Inspect bounded WordPress requests and optionally scheduled Hosting Ukraine nginx access logs with privacy controls.