Best security plugins for WordPress

MazeGuard Security

Up in the last 7 days:7,489#58,059

by designmazeus18 days ago

Two-factor login, malware and file-integrity scanning, and account security, with findings that say what to do next.

Sovaryx Login Security

Up in the last 7 days:14,295#58,074

by pieceagency5 months ago

A free WordPress security plugin focused on login protection, security diagnostics, and API protection.

VisitorLog

Up in the last 7 days:7,522#58,159

by IT Augustine11 months ago

The VisitorLog plugin adds useful functionality to your site in the field of security, statistics and some other useful functions.

EVelum Safe Browsing

Up in the last 7 days:9,693#58,198

by kurdesigns11 months ago

A comprehensive safety exit system with customizable buttons and safe-browsing enforcement for sensitive websites.

Basic Auth for WP-Admin

#58,207

by Walid Sadfi3 years ago

Add an additional layer of security with this super light plugin that adds a basic authentication HTTP to the wp-admin and wp-login pages.

PS Monitor & Alerts for Telegram

Down in the last 7 days:1,922#58,213

by payamseidi2 months ago

Send WordPress and WooCommerce alerts to Telegram with secure setup, retries, diagnostics, and privacy controls.

FormShield

Up in the last 7 days:1,167#58,222

by arcoria1 month ago

Protect your WordPress forms from spam and bots with a simple CAPTCHA — without complicated setup, external accounts, or API keys.

WP Security Master

Down in the last 7 days:2,726#58,231

by Vuong Nguyen7 years ago

WP Security Master is great tool to add another security layer to protect your page. It automatically locks the admin page with passcode.

SSO JumpCloud

#58,279

by Airton Vancin Junior10 months ago

Securely connect WordPress with JumpCloud for Enterprise SSO via SAML 2.0 and automated user provisioning via SCIM.

CompatShield WP Site Auditor

Up in the last 7 days:483#58,298

by CompatShield4 months ago

Comprehensive WordPress security auditor. Scans for vulnerabilities, misconfigurations and threats — scored report with actionable fix steps.

iSupportive

#58,305

by isupportive2 months ago

Free WordPress support tickets, uptime monitoring and expert guidance in your dashboard, with optional 24/7 live chat plans.

CryptNote Secure Links

Up in the last 7 days:11,408#58,308

by Lucas Catão Moraes10 months ago

Integrates CryptNote.pro to generate encrypted links directly from the WordPress dashboard and replace emails with secure links.

InstallLock

#58,487

by granitepointsoftwaretoday

Protect WordPress core and themes from unauthorized changes with a separate authenticator code. Pro adds plugin protection.

Konfyra Access Control

#58,504

by gsrcoimbatore1 month ago

Locks non-admin roles out of wp-admin entirely, redirecting them to a frontend page you choose instead.

Gatorio

#58,581

by sichtelement4 months ago

Lightweight brute-force protection for the WordPress login.

Content Protection Desheecode

#58,624

by desheelabs1 year ago

Protect your website content from copying and unauthorized downloads.

ITMAROON EXTRA SETTINGS

Up in the last 7 days:9,857#58,649

by Isamu Takeda1 month ago

A plugin that provides the ability to configure WordPress site settings that are not provided by default in the admin screen using a GUI.

Authentication Plugin for the Baltics and Iceland

#58,700

by Nestech1 year ago

eID-based authentication plugin solution for WordPress and WooCommerce. Smart-ID, Mobile-ID, eParaksts, Audkenni.

Silo Scope

#58,950

by Silo9 months ago

Comprehensive site health monitoring for WordPress. Get a complete health report covering security, performance, server configuration, SEO, and plugin …

Login Gatekeeper

Up in the last 7 days:12,118#59,026

by learnhowwp1 year ago

Protect your login page by requiring a secret key and value in the login URL.

GhostLock Hide Login

#59,081

by Shubham Patil29 days ago

Hide WordPress login URLs and protect against brute-force attacks with IP blocking, country detection, logs, and IP whitelisting.

Kontinua

#59,091

by Host.it20 days ago

Connects a site to the Host.it Kontinua console. Host.it reads files and tables for a backup and can write them back. During a backup the site may str …

GuardLMS

Up in the last 7 days:7,908#59,153

by Luuk Verhoeven2 months ago

Reports your WordPress core, plugin and theme inventory to GuardLMS daily so known CVEs affecting your site are detected automatically.

TeraServer Clinic Scan & Repair Kit

#59,166

by famelhaut3 months ago

Scans for malware, keeps core/plugins/themes updated, and backs up your site — connected to your free or paid TeraServer Clinic account.

Saral Login Shield

#59,269

by Saral Techies20 days ago

Two-factor login, a hidden login page and login attempt limits, plus a login activity log. Forgot the login URL? Get it by email.

ShieldScope

Up in the last 7 days:1,107#59,319

by Dhiren Patel3 months ago

A thorough WordPress security scanner that checks your entire site for vulnerabilities and misconfigurations — without slowing it down.

PF Secure Toolkit

Down in the last 7 days:7,031#59,328

by Poet Farmer1 year ago

PF Secure Toolkit is a lightweight, modular plugin to harden WordPress by disabling unnecessary features.

Absoluto Access Gate

Down in the last 7 days:7,670#59,335

by Absoluto Designs9 months ago

Force users to login before viewing pages. Exclude specific pages and allow certain user roles/users to bypass the requirement.

Holovid® Secure Connect

Down in the last 7 days:7,668#59,337

by Holovid2 months ago

Two-factor authentication: TOTP codes or codeless Secure Connect login. Anti-phishing, encrypted secrets, no external dependencies.

Holographic Login Shield

Up in the last 7 days:12,591#59,348

by Holographic5 months ago

Lightweight login protection, brute-force defence and safer admin access controls for WordPress.

ShadowKrypt

Up in the last 7 days:12,592#59,358

by fabian885 months ago

Hide plugins and themes from the dashboard while keeping them active, plus security, SMTP, performance, update control, and speed tools.

Mandate App Security

Down in the last 7 days:7,674#59,366

by Paul5 months ago

WordPress Application Passwords carry the full access of their user. Mandate App Security adds per-credential policies to limit what each one may do.

ClickArmor Lite

Down in the last 7 days:2,810#59,399

by aaditi4155 months ago

Protect your content by disabling right-click, copy, inspect element, and text selection with modern toggle controls.

CyberGuard Security Connector

Down in the last 7 days:126#59,445

by Platinium Ltd4 months ago

Connect WordPress/WooCommerce to CyberGuard for monitoring, reports and enhanced e-commerce protection with the CyberGuard server agent.

Hubsine Spam Protection with Fallback for reCAPTCHA

Down in the last 7 days:2,813#59,477

by hubsine6 months ago

Protect your WordPress forms against spam and bots with Google reCAPTCHA V3 and V2.

UD Audit Manager

Down in the last 7 days:121#59,482

by Undefined Developer4 months ago

A lightweight, modular website auditing plugin for WordPress that scans and optimizes SEO, performance, security, and database health.

Obzervi Logs

Down in the last 7 days:123#59,497

by DigiFlow NYC1 month ago

Monitor user activity, track changes, and keep a secure WordPress audit log. Detect suspicious behavior and troubleshoot easily with Obzervi.

WEBKIH Secure Sitemap Generator

#59,758

by Jubayer Hossain8 months ago

Secure, lightweight XML sitemap plugin with post type filtering, manual regenerate, and optional search engine ping.

ProofShield

Down in the last 7 days:7,529#59,785

by Softwaregarten4 months ago

Block automated abuse on WordPress login, comments, and forms with privacy-friendly, self-hosted Proof-of-Work protection.

NiyiGuard

Up in the last 7 days:6,340#60,029

by harish2825 months ago

Self-hosted WordPress security: 2FA, lockouts, audit log, integrity, headers, rate limits, WooCommerce protection, and SDK. Free.

OptimizeSho

Up in the last 7 days:6,341#60,081

by ishayanabadtoday

Page cache, Core Web Vitals tools, firewall, wp2shell protection, Redis/Memcached object cache and database cleanup in one lightweight dashboard.

ShieldGate

#60,099

by damcen1238 months ago

Protect your site by hiding the login page with a secret slug and limiting failed login attempts.

Data443 Anti-Spam

Up in the last 7 days:1,289#60,117

by Data443 Risk Mitigation, Inc.2 months ago

Blocks comment and form spam by classifying the URLs it contains against the Data443 classification API.

Algo Spam User Wiper

#60,128

by algorisys2 months ago

Find WordPress users by email domain, soft-delete them into Trash, permanently delete in batches, and block blacklisted domains from registering.

Dotsquares Custom Login URL & Security Suite

Down in the last 7 days:5,984#60,170

by maheshsharmads3 months ago

Change your WordPress login URL, design the login page, and enhance your site's security with built-in protection tools.

Carticy SiteVitals

#60,197

by carticy1 month ago

WordPress security and performance in one plugin. See which plugin is slowing your site down, and harden your site in one click. No account needed.

Nativus Dashboard

Up in the last 7 days:9,949#60,227

by cr8vstacks14 days ago

Customize your WordPress admin dashboard with widgets, permissions, plugin visibility tools, notices, and debugging workflows.

Watrix Bot Guard

#60,235

by wataru takahashi13 days ago

Log automated traffic with four kinds of rules, then rate-limit and block the offending IPs. Record first, block once you have seen the real data.

Mobile WP Security

Down in the last 7 days:8,277#60,281

by dacalleg6 years ago

This plugin exposes the rest APIs to be able to control some aspects of wordpress security via the mobile app "Mobile Security for Wordpress&quot …

SudoWP Radar

Up in the last 7 days:6,282#60,327

by sudowp4 months ago

Security auditor for the WordPress Abilities API. Scans registered abilities for permission, schema, and exposure risks.