Best security plugins for WordPress

Liaison Site Prober

Up in the last 7 days:18,656#54,910

by Liaison8 months ago

Liaison Site Prober helps you log and track key changes and user actions on your WordPress website — giving you better visibility and security.

DCI Admin Security

Up in the last 7 days:5,958#54,911

by DreamCode Infotech27 days ago

Protect WordPress login and wp-admin with IP allowlisting, custom login URLs, email OTP, rate limiting, CAPTCHA, logging and alerts.

Toply SkimShield

Up in the last 7 days:5,810#54,936

by TonioWeb5 months ago

Real-time script integrity monitoring and CSP automation for WooCommerce checkout. No API dependencies. Detects unauthorized scripts on checkout.

Kortech Shieldora

Down in the last 7 days:795#54,965

by kolmic15 months ago

Enterprise-grade security engine featuring brute-force mitigation, autonomous system hardening, and a real-time command center.

Clicks Admin Toolkit

Up in the last 7 days:15,475#54,966

by sykologicist1 month ago

304 toggleable WordPress admin modules for security, speed, SEO, SMTP, WooCommerce, and UX. One plugin. Zero overhead.

east115 Account Guard

Up in the last 7 days:15,480#54,987

by East1152 months ago

Limit one account to real owners. Stop account sharing on membership sites.

atshift IP Blocker

Up in the last 7 days:17,795#54,999

by @shift6 days ago

Review existing WAF IP records and manually manage Apache server blocks with backups, previews and rollback checks.

EMW Monitor Activity Log

Up in the last 7 days:11,892#55,003

by Escape AI3 months ago

Track and review important user and admin activity in WordPress.

Prevent user name and email leakage

#55,011

by Mark-k8 years ago

Stops user name enumeration and other type of user name and email leakages.

Defenora Secure Shield

#55,052

by Kirtikumar Solanki1 month ago

Login protection, brute-force lockouts, hardening, integrity scans, activity logs, and a transparent security score. Not a malware guarantee.

NG Secret link

Up in the last 7 days:14,694#55,065

by nikita.global6 years ago

Make your site accessible only with secret link

Stinoment Growth Assistant

#55,167

by STINOMENT4 days ago

Search Console insights, a daily site check-up, security and backups in one place, with clear next steps and undo for every change.

Obsyde Aegis

Up in the last 7 days:10,476#55,174

by obsyde6 months ago

Real-time threat detection, automated IP blocking, and AI-powered security analysis.

JAT Site Shield

#55,178

by Jeremy Anderson3 days ago

Lock WordPress down: login lockouts, two-factor codes, core hardening, an activity log with email alerts, and file integrity checks.

WP Remove Authors Sitemap from Yoast SEO

Down in the last 7 days:214#55,189

by WP Academic7 years ago

License: GPLv2 or later WordPress plugin to remove authors from the Yoast SEO Sitemap

Agent AI Bot Protect

Up in the last 7 days:7,588#55,195

by botshield1 year ago

Agent AI Bot Protect protects your WordPress content from AI scraping bots, preventing unauthorized data harvesting for AI training.

Cisilino Site Defense Network

#55,198

by Matteo Cisilino5 days ago

Blocks login brute-force attempts in .htaccess, optionally exchanges hostile IPs with the Cisilino network, offers whitelisting and basic hardening.

Decoded Site Diagnostics

#55,235

by decodedbrand1 month ago

Understand your WordPress health, performance, security and WP-Cron status with clear, actionable explanations.

Aegra Site Monitor

Up in the last 7 days:7,355#55,244

by Rob Art4 days ago

Spot broken links, content gaps, site health issues and admin activity. Understand traffic, database health and more from one WordPress dashboard.

Sysadmin Total Suite

Down in the last 7 days:440#55,251

by ricardomorales1 month ago

Core integrity, vulnerability audit, unused media cleanup, disk usage, profiling, users, WPO and AI bot blocking in one admin panel.

RIS Cloudflare CAPTCHA

Up in the last 7 days:9,836#55,274

by Md Taufiqur Rahman4 months ago

Privacy-friendly Cloudflare Turnstile CAPTCHA for WordPress login, registration, comments & WPForms. Stops bots and spam.

Sajjetti

#55,299

by Sajjetti1 year ago

AI-assisted theme and plugin scanner for security, performance, and best practices. Provides clear, actionable insights.

Signed Posts

#55,341

by Marc Armengou8 months ago

Signed Posts allows authors to sign posts, assuring content integrity. Signature verification proves post-signing alteration hasn't occurred.

RockScout AI

Up in the last 7 days:5,115#55,345

by netbiel3 months ago

See which of your plugins have known security holes, what each one means, and what to fix first.

ARACNE Security

#55,420

by CERWALL_SOLUTIONStoday

Exposure scanner with a security score and basic WordPress hardening.

Encrypted Post Type

#55,429

by NewJenk4 years ago

Encrypted Post Type provides a custom post type where the content of each post is encrypted.

CaspianCMS Backup & Recovery

#55,432

by caspiancms1 month ago

Instantly recover your hacked WordPress site. Nuke & Pave restoration destroys infected files and rebuilds a clean site in seconds.

Cypress North Password Policy

Down in the last 7 days:385#55,458

by cypressnorth2 months ago

NIST-aligned password policy with HIBP breach checking, layered failed-login lockout, and an audit log.

DecaCrew

Down in the last 7 days:3,554#55,468

by Totaliweb2 months ago

Ten agents watch over your site and propose every fix for your approval. Nothing changes on its own, and almost everything can be undone.

Manzari Anti-Spam Shield

Up in the last 7 days:6,703#55,491

by Gerry Manzari11 months ago

A lightweight anti-spam plugin using honeypot, timing, keyword, and reCAPTCHA v2 Checkbox protection. Blocks bots silently while keeping UX clean.

Recap Site Auditor

#55,534

by recapwp1 month ago

A deterministic WordPress site auditor and fixer: finds security, configuration, update, and account problems, then fixes them on confirm, with undo.

PW Security and Backup

Up in the last 7 days:11,962#55,548

by pwfeedtr3 months ago

Security monitoring, login protection, file integrity checks, protected backups, and read-only comparison in one panel.

CodeMedic SupplyScope

#55,577

by adrianmikula3 months ago

Scans WordPress plugins for vulnerable Composer dependencies and reports CVEs before they become breaches.

DIESIS JWT Auth for Cloudflare Access

Up in the last 7 days:4,087#55,610

by DIESIS Media6 days ago

Validates Cloudflare Access JWTs at the WordPress origin so protected paths stay closed to requests that bypass Cloudflare.

TatarDev Account Alerts

#55,610

by Guzel Mitroshina2 months ago

Configurable email notifications for user account events.

Balaeno Webmaster

Up in the last 7 days:5,019#55,682

by balaeno2 months ago

Full website maintenance in plain language: health, updates, backups, security, performance and a Safe Fix Engine that makes fixes reversible.

Mokomaro Login Guard Lite

Up in the last 7 days:13,098#55,690

by mokomaro15 days ago

Local password-login protection with temporary connection limits and a privacy-conscious activity summary. No account or license key required.

Zashita 24/7 Security

Up in the last 7 days:8,960#55,702

by wp-addon11 days ago

Move wp-login.php to your own address, check WordPress core files against official checksums and keep a log of logins.

UX3 Security

Up in the last 7 days:12,126#55,705

by ux3security1 month ago

Cloud-managed firewall, bot protection, and threat monitoring. Manage rules, bans, and allow-lists from a central dashboard.

Peace Protocol

#55,714

by Billy Wilcosky1 year ago

A secure, decentralized protocol for WordPress administrators to connect their sites and build a network of trust through cryptographic handshakes.

Scudo Security

Up in the last 7 days:3,595#55,748

by Totaliweb2 months ago

Environment-aware security: firewall, malware & integrity scan, brute-force protection and 2FA — safety-first, with previews and rollback.

108WP Content Protector Lite

#55,755

by 108WP7 months ago

Basic content protection for your WordPress site. Disable right-click, left-click, print, default browser shortcuts, and more.

Incident Agent

Down in the last 7 days:336#55,785

by Craig Gomes7 months ago

Complete WordPress monitoring with real-time alerts, error tracking, and uptime monitoring. Know about issues before your users do.

Bollwerk

#55,830

by yuracodetoday

Protects your WordPress site automatically. No setup needed. Stops password guessing and blocks malicious traffic before they reach you.

MH Smart Firewall

#56,041

by Maroon Horizon Ltd (Vladimir Marusic)11 days ago

Firewall, malware scan & IP blocking for WordPress, with Quick Scan Overall Security Rating, hardening, quarantine and integrity checks. PRO adds AI.

CloudAware Security Audit

#56,092

by CloudAware3 months ago

This plugin adds auditing functionality to Wordpress.

Allow Username Edit

#56,188

by thaxam1 year ago

A WordPress plugin that allows administrators to safely edit usernames of registered users with an activation checkbox to prevent accidental changes.

360 Orbit Header Security

Up in the last 7 days:16,508#56,278

by Jörg Liwa18 days ago

Sets modern HTTP security headers (HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy and more) with a one-click quickstart and clear options.

Gracewell Security Suite

Up in the last 7 days:16,505#56,300

by gracewell8927 days ago

Login protection, authenticator 2FA, manual file integrity checks, WordPress hardening and activity logging in a responsive security dashboard.

zenVPN

Up in the last 7 days:16,851#56,301

by Pavel Kartautsau1 year ago

Add an extra level of security to the wp-admin section of your WordPress by allowing access only via a secure dedicated tunnel provided by zenVPN.