Best security plugins for WordPress

BulletProof Security

#1,143

by AITpro2 months ago

WordPress Security Protection: Malware scanner, Firewall, Login Security, DB Backup, Anti-Spam...

Google Authenticator

Up in the last 7 days:4#1,149

by Ivan2 months ago

Google Authenticator for your WordPress blog.

Zero Spam for WordPress

Up in the last 7 days:4#1,199

by Highfivery Studio4 days ago

Free anti-spam for WordPress comments, logins, registrations and forms. No captchas, no moderation queue. Blocks bots before they post.

LWS Hide Login

Up in the last 7 days:5#1,327

by Aurélien LWS25 days ago

Secure your access to the admin page with this plugin !

MainWP Dashboard

Up in the last 7 days:2#1,345

by mainwp5 days ago

Run updates, backups, security and reporting across all client sites from your own server. Keep data private and prove your value with branded reports …

Restricted Site Access

#1,437

by 10up25 days ago

Limit access to visitors who are logged in or allowed by IP addresses. Includes many options for handling blocked visitors.

LWS Tools

Up in the last 7 days:4#1,440

by Aurélien LWS25 days ago

Optimize and modify your website's parameters

Inactive Logout

Up in the last 7 days:35#1,447

by Deepen Bajracharya1 month ago

Automatically logout idle user sessions, with logout redirections and concurrent limit logins all in one place.

WPS Cleaner

#1,464

by NicolasKulka2 months ago

WPS Cleaner cleans your WordPress site as well as your database.

Login With Ajax

Down in the last 7 days:4#1,489

by Marcus (aka @msykes)5 months ago

Add beautiful login forms with smooth AJAX login/registration effects, 2FA support, custom redrection options and many more login-related features!

WPVulnerability

Up in the last 7 days:2#1,503

by ROBOTSTXT.es2 months ago

Get WordPress vulnerability alerts from the WPVulnerability Database API.

TrustedSite

Down in the last 7 days:12#1,525

by TrustedSite1 month ago

Trust badges to increase sales.

Nexter Extension

Down in the last 7 days:1#1,612

by POSIMYTH10 days ago

Replace 50+ WordPress Plugins: Free SEO, Theme Builder, Code Snippets, Image Optimizer (WebP/AVIF), SMTP Email, Security, Performance & More

miniOrange 2FA

Up in the last 7 days:2#1,616

by miniOrange6 days ago

Free 2FA plugin for unlimited users with Passkey, Google Authenticator, Email/SMS OTP, Push Notification & passwordless login.

OpenID Connect Generic Client

Up in the last 7 days:29#1,628

by Jonathan Daggerhart8 months ago

A simple client that provides SSO or opt-in authentication against a generic OAuth2 Server implementation.

FluentAuth

Up in the last 7 days:17#1,667

by WPManageNinja5 days ago

Two-factor authentication, passkeys, social login, magic login, limit login attempts, file change scanning and audit logs for WordPress.

WPBruiser Security

Up in the last 7 days:1#1,792

by WPZOOM1 day ago

Security and anti-spam without CAPTCHA. Blocks bots on forms, comments and logins, limits login attempts and hardens WordPress. No outside service.

MilesWeb Tools

Down in the last 7 days:3#1,805

by MilesWeb1 year ago

MilesWeb Tools is a powerful WordPress plugin designed to enhance your site's functionality and security. It helps you manage security settings, …

AntiSpam for Contact Form 7

Up in the last 7 days:8#1,824

by Erik6 months ago

A trustworthy antispam plugin for Contact Form 7. Wave goodbye to spam and keep your inbox clean!

Plugin Check (PCP)

Up in the last 7 days:7#1,850

by WordPress.org2 days ago

Plugin Check is a WordPress.org tool which provides checks to help plugins meet the directory requirements and follow various best practices.

Lockdown WP Admin

Down in the last 7 days:8#1,866

by Sean Fisher9 years ago

Lockdown WP Admin conceals the administration and login screen from intruders. It can hide WordPress Admin (/wp-admin/) and and login (/wp-login.

Simple Login Captcha

Up in the last 7 days:4#1,951

by Nikolay Nikolov2 months ago

Adds a simple 3-digit number captcha on the login form.

The GDPR Framework By Data443

#1,975

by Data443 Risk Mitigation, Inc.3 days ago

Easy to use tools to help make your website GDPR-compliant. Fully documented, extendable and developer-friendly. Extensions to enterprise GDPR compli …

Captcha by BestWebSoft

Up in the last 7 days:1#1,992

by bestwebsoft3 days ago

1 The Ultimate Spam Protection Plugin Using Captcha for WordPress Forms.

Password Strength Settings for WooCommerce

Down in the last 7 days:5#2,030

by Danny Santoro3 years ago

Help secure your WooCommerce site by enforcing stronger passwords and taking additional control of your strength requirements.

Malcure Malware Shield

Down in the last 7 days:7#2,051

by Malcure Web Security27 days ago

Malware scanner and monitor.

Login by Auth0

Down in the last 7 days:33#2,063

by Auth02 years ago

Login by Auth0 provides improved username/password login, Passwordless login, Social login and Single Sign On for all your sites.

Login Security Captcha

Up in the last 7 days:2#2,094

by ScriptsTown1 month ago

Secure WordPress login, registration, and comment form with Google reCAPTCHA or Cloudflare Turnstile. Prevent Brute-force attacks and more.

Jetpack VaultPress

Up in the last 7 days:10#2,144

by Automattic25 days ago

(DEPRECATED: Please install "Jetpack VaultPress Backup" instead) Jetpack VaultPress offers real-time backups, one-click restores, and premiu …

Meta Generator and Version Info Remover

Up in the last 7 days:2#2,157

by Pankaj Mondal1 year ago

This plugin will remove the version info appended to enqueued style and script urls along with Meta Generator in the head section and in RSS feeds.

Brozzme DB Prefix & Tools Addons

Down in the last 7 days:6#2,173

by Benoti9 months ago

Easily change your WordPress DB prefix, save time, increase security.

Forget Spam Comment

Down in the last 7 days:8#2,206

by Gulshan Kumar1 year ago

The ultimate solution to stop spam comments in the default commenting system of WordPress

ReCaptcha Integration for WordPress

Up in the last 7 days:2#2,233

by weDevs1 year ago

reCaptcha for login, signup, comment forms, Ninja Forms and woocommerce.

WP Fingerprint

Down in the last 7 days:6#2,239

by DanFoster1 year ago

WP Fingerprint adds an additional layer of security to your WordPress website, working to check your plugins for signs of hack or exploit.

SMNTCS Disable REST API User Endpoints

Up in the last 7 days:5#2,324

by Niels Lange1 month ago

Hides the list of user accounts that the WordPress REST API shows to visitors who are not logged in, which helps prevent user enumeration.

WPScan

Down in the last 7 days:6#2,365

by ethicalhack3r1 month ago

WPScan WordPress Security Scanner - Scans your system for security vulnerabilities listed in the WPScan Vulnerability Database.

Exploit Scanner

#2,415

by Donncha O Caoimh (a11n)9 years ago

Search the files and database of your WordPress install for signs that may indicate that it has fallen victim to malicious hackers.

IP Geo Block

#2,484

by tokkonopapa7 years ago

It blocks spam posts, login attempts and malicious access to the back-end requested from the specific countries, and also prevents zero-day exploit.

WP Fail2Ban Redux

Up in the last 7 days:3#2,489

by Brandon Allen1 year ago

Records various WordPress events to your server's system log for integration with Fail2Ban.

Log cleaner for Kadence Security

Down in the last 7 days:12#2,502

by Michael Ott2 days ago

Restores the ability to manually delete Kadence Security (formerly Solid Security / iThemes Security) logs from the database.

Salt Shaker

Up in the last 7 days:10#2,506

by Nagdy18 days ago

Salt Shaker enhances WordPress security by changing WordPress security keys and salts manually and automatically.

Security Ninja

Down in the last 7 days:1#2,518

by cleverplugins5 days ago

WordPress security plugin: free 8G firewall/WAF, 50+ tests, vulnerability/core scanning, events logging, AI reports.

Booter

Down in the last 7 days:8#2,651

by uPress4 months ago

Booter - Bots & Crawlers Manager is a preventative measure (treatment in advance) and treatment of damages caused by crawlers and bots.

Prevent XSS Vulnerability

Up in the last 7 days:2#2,792

by Sami Ahmed Siddiqui1 year ago

This WP plugin blocks XSS by encoding harmful URL characters & safely handling HTML in $_GET. Customizable settings for enhanced website security.

WP EXtra

Down in the last 7 days:9#2,827

by COP2 months ago

Optimize your site instantly with one-click activation. WP Extra offers easy fixes and features for WordPress.

SP Move Login

Down in the last 7 days:3#2,886

by SecuPress11 months ago

Move your WordPress login page to protect it from bots. This plugin contains the Move Login module from SecuPress. Other security modules are availabl …

Stop XML-RPC Attacks

Up in the last 7 days:1#2,920

by Pascal CESCATO2 months ago

Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.

Melapress File Monitor

Up in the last 7 days:8#2,927

by Melapress2 months ago

Get email alerts for file and permission changes on your WordPress sites. No false positives!

Manage XML-RPC

Down in the last 7 days:19#3,074

by brainvireinfo1 year ago

Enable/Disable XML-RPC for all or based on IP list, also you can control pingback and Unset X-Pingback from HTTP headers.

WPMasterToolKit (WPMTK)

Up in the last 7 days:7#3,140

by Ludwig You1 month ago

Modular WordPress toolkit for security, performance, SMTP, WebP images, code snippets, redirects, administration and more.