Best security plugins for WordPress

CleanSite Stealth

Down in the last 7 days:150#52,802

by Sudeep S1 month ago

Reduce common WordPress fingerprints, protect selected public endpoints, and use a custom login URL without modifying WordPress core.

Milardovich File Modification Monitor

Up in the last 7 days:16,565#52,815

by Sergio Milardovich2 months ago

Detect edits to your plugins and themes by comparing them against the original files from WordPress.org, and get warned before updates overwrite them.

MajScan

#52,823

by fjacquin1 year ago

Surveillez automatiquement les mises à jour de WordPress Core, des plugins et des thèmes, et recevez des notifications par email.

Check Login Lite

Up in the last 7 days:8,559#52,841

by dynamokh6 months ago

A powerful security plugin to monitor login attempts, restrict access by IP or country, and receive alerts via email or Discord.

DesheeLabs Content Protection

#52,856

by desheelabs7 months ago

A comprehensive content protection plugin to prevent copying, right-click, text selection, and image saving on your WordPress site.

Pura Vida Vulnerability Scanner

Up in the last 7 days:8,464#52,902

by trgomez4 months ago

Scan your plugins, themes and WordPress core against trusted vulnerability databases and get a clear, prioritized security overview.

Henge Digital

#52,919

by Henge Digital - Giles2 months ago

The ultimate all-in-one agency toolkit for WordPress.

Shake Connect

Up in the last 7 days:8,460#52,940

by Jean Galea4 months ago

Securely connects this WordPress site to your WPShake dashboard for cross-site backup, update, monitoring, security, and reporting.

CodePros SVG Secure Support

Up in the last 7 days:8,457#52,953

by codeprosai4 months ago

Highly secure SVG upload support for WordPress. Validates, sanitizes, and protects SVG files through a multi-layer security pipeline.

TechnologyWisdom Secure Login Path

Up in the last 7 days:8,457#52,971

by Technology Wisdom1 month ago

Change WordPress dashboard login URL to a custom slug for better security.

Crawlantix AI Bot Tracker

#53,068

by crawlantix5 months ago

Track 30+ AI crawlers visiting your site with real-time dashboards, logging-only honeypot, and bot verification.

GDPR4EVERYONE

Up in the last 7 days:4,621#53,086

by jakubmudra1238 years ago

GDPR4Everyone allow you to easily inform users that your sites using cookies and get their consent with privacy policy.

ddosNull Shield

#53,090

by ddosnull1 month ago

AI-powered Layer-7 DDoS and bot protection for WordPress. Block bots, stop attacks, and keep your store online — one-click setup.

Pandora Cloud Monitoring

Up in the last 7 days:17,554#53,131

by Pandora FMS15 days ago

Monitor your WordPress with Pandora Cloud: versions, updates, performance, content and security — with a local history and charts.

Maasters Security Shield

Up in the last 7 days:507#53,143

by The Maasters8 days ago

Practical WordPress hardening with configurable security headers, CSP modes, login rate limiting, XML-RPC controls, and version hiding.

Kwistech Secure

Up in the last 7 days:5,180#53,162

by kwistech2 months ago

Twelve local hardening controls with an audit trail. No account, no telemetry, no third-party requests, nothing to configure elsewhere.

DevOrbit Login Shield

#53,352

by NiteshPatel1 month ago

Hide wp-login.php and wp-admin behind a custom URL of your choice to cut down on brute-force login attempts.

Vigil Security Scanner

Up in the last 7 days:15,537#53,357

by Vigil9 months ago

AI-powered WordPress plugin that scans for vulnerabilities and outdated components in plugins, core, and PHP. Stay secure with proactive alerts.

Webhook Logger for aaPanel

Up in the last 7 days:19,141#53,409

by guguan1237 months ago

Receive aaPanel Webhook information and send notifications via email.

DawsonyWeb Spam Protection and API Hardening

Down in the last 7 days:152#53,594

by DawsonyWeb14 days ago

Block comment spam, disable XML-RPC, restrict the REST API, stop user enumeration and block IPs, without a heavy security suite.

Disposable Email Detector

Up in the last 7 days:15,542#53,688

by Amzil Ayoub1 year ago

Blocks user registration with disposable or temporary email addresses. Supports WordPress and WooCommerce.

OpenBotAuth

Up in the last 7 days:8,881#53,695

by hammadtq9 months ago

Verify AI crawlers with HTTP Signatures and enforce allow/deny/teaser policies; also serves llms.txt and AI-ready feeds.

DIGITO Toolkit

#53,761

by DIGITO WEBS25 days ago

A modular toolkit with Security Health, Safe SVG Upload, Maintenance Mode, duplication, and Classic Editor tools.

OmniTrust for WooCommerce

Up in the last 7 days:9,740#53,801

by prestawach1 month ago

Async fraud-signal evaluation (Flag & Hold) and merchant-initiated fraud reporting for WooCommerce, backed by the OmniTrust API.

Simple Upload Weight Limit

#53,842

by SimpleWPlugins9 months ago

Keep your server lean. Set a strict maximum file size for all user uploads except administrators.

DH

Up in the last 7 days:16,630#53,877

by Dannie Herdyawan1 year ago

Rename WordPress media uploads on the fly with customizable naming patterns. Secure and lightweight.

Omninox Site Toolkit

Up in the last 7 days:16,099#53,882

by sobhitjadoun9 days ago

Modular WordPress toolkit for performance, defensive security, database hygiene, SEO diagnostics, error log analysis, and executive reporting.

ShadowScan Security Link

Up in the last 7 days:14,116#53,925

by shadowscan3 months ago

ShadowScan Guard local WordPress hardening and basic diagnostics, with optional Guard or ShadowScan portal connection for managed features.

Mi13 Clean Up

Up in the last 7 days:2,059#53,970

by mi136 months ago

Mi13 Clean Up — плагин для радикальной очистки WordPress от «мусора»:

Codiecool Action Guard for AI Agents

#53,980

by codiecool3 months ago

Human-approval queue, audit log, and undo for AI/MCP agent writes on WordPress.

Immens MCP Fortress

Up in the last 7 days:19,480#54,032

by Studio Immens3 months ago

Let AI manage your WordPress site. Connect Claude, ChatGPT, Gemini or Cursor to create content, manage media, and control settings — securely, no deve …

NX::Site SEO Audit

Up in the last 7 days:16,940#54,044

by netsolex1 month ago

Complete SEO & Content Audit Tool — Meta Tags, Headings, Images, Links, Sitemap, Security, Backup & Restore and much more.

Janric Simple Security Hardening

Up in the last 7 days:19,476#54,133

by keithlunt5 months ago

A lightweight plugin to disable XML-RPC, restrict the REST API, and hide the WordPress version.

DozWPSecure

Up in the last 7 days:9,976#54,140

by Dozty6 years ago

A basic security plugin for WordPress 4.x, 5.0 or higher. You can selectively disable unused features in WordPress core...

FreelanceBo Sentra Control

Up in the last 7 days:6,103#54,149

by FreelanceBo Group S.r.l.s1 month ago

Security agent connecting to FreelanceBo Sentra Control console for WAF, malware scanning, brute force protection, and vulnerability scanning.

zer0sh Site Health Monitor

Up in the last 7 days:14,722#54,218

by zer0sh22 days ago

Ultra lightweight WordPress plugin to monitor your website's performance, health, and security.

Stop Confusion

#54,239

by idandev4 years ago

This plugin allows you to check your themes' presence in WordPress remote repository from the admin panel, and block unwanted theme updates to pr …

Surbma

#54,308

by Surbma3 years ago

The most simple two factor authentication plugin for WordPress.

Rad 2FA

#54,435

by Rad1 month ago

Secure WordPress login with two-factor authentication: email one-time codes or a TOTP authenticator app, per role.

MarketXY

Up in the last 7 days:17,268#54,482

by Amit singh12 days ago

Instant company, domain, security and trust intelligence — as a WordPress admin tool and a public [marketxy_lookup] shortcode.

Char O’Day

#54,518

by hawkeyepierce897 days ago

Offline-first comment spam protection for WordPress with multiple configurable detection checks.

ArchivioID

Up in the last 7 days:5,810#54,528

by mtnviewpro7 months ago

OpenPGP signature verification, multi-signer workflows, key lifecycle management, and public proof pages for ArchivioMD.

Talistech Checkout Blocker for WooCommerce

Down in the last 7 days:1,939#54,748

by Talistech23 days ago

Block WooCommerce checkout by email address, full billing name, or billing address using server-side validation.

FuturisticIT Secure Login Access

Up in the last 7 days:5,790#54,781

by Futuristic IT4 months ago

Replace the default WordPress login URL with a custom endpoint and customize the login logo.

Complete Admin Suite

Up in the last 7 days:14,254#54,788

by wpplugged1 year ago

Streamlines your WordPress admin experience with essential tools and customization options in one package.

PSB Bot Traffic Controller

#54,822

by paulborile23 days ago

Block, limit, or allow AI crawlers, search bots, and scrapers by category — with rate limiting and robots.txt generation.

VWEB Admin Email Login Verify

Up in the last 7 days:2,839#54,849

by VWEB India1 month ago

Administrators must enter an email verification code after password login. Regular users log in without extra verification.

WP Remove Version Number

Up in the last 7 days:3,645#54,872

by WP Academic7 years ago

License: GPLv2 or later WordPress plugin to remove the version number from the WordPress front end.

Protector using ReCaptcha

Up in the last 7 days:16,968#54,887

by markhene1 year ago

Protect your WordPress site from spam and abuse by adding Google reCAPTCHA to login, registration, password reset, and comment forms.

Phantom User Lockout

Up in the last 7 days:5,959#54,894

by efraing1 month ago

Records logins that use usernames which don't exist (username, password tried, IP, location, host) and blocks the IP until you unblock it.