Best security plugins for WordPress

wPadlock

#60,475

by wpadlock7 years ago

wPadlock adds an additional PIN field to your login page and provides additional security against brute-force attacks

Sedattelli

#60,488

by sedattelli4 months ago

Bulk delete spam comments and user accounts, automatically ban their IPs to prevent spam from returning.

Integrity Sentinel

#60,498

by Bsidenet2 months ago

Audit WordPress integrity, known plugin vulnerabilities, login rate limits, admin activity, updates and frontend assets from one dashboard.

Patchmark

#60,524

by ClearanceClarence4 days ago

See what a plugin or theme zip, or an update, changes before it replaces the installed copy. Check plugins against WordPress.org.

VelociVaultor

Up in the last 7 days:7,085#60,611

by Platinaxe5 months ago

A powerful, free WordPress plugin designed to debloat, optimize, and secure your WordPress website.

TotalWeb

#60,626

by Pranshtech Solutions Private Limited2 months ago

TotalWeb strengthens your site security with malware defense, brute-force protection, firewall rules, and smart hardening controls.

StripBoard

Up in the last 7 days:9,767#60,636

by G Matta2 months ago

Simply disable unwanted WordPress features from one settings board.

Integrum Security Scanner

#60,675

by WPChef25 days ago

Scan your WordPress files for malicious code. Pick the folders, start a scan, and review suspicious files right inside wp-admin.

Plugonix Health Monitor

Up in the last 7 days:11,424#60,694

by Aman Brar14 days ago

Scores every installed plugin's health from 0–100 based on update recency, popularity, and compatibility signals from WordPress.org.

ScanForge File & Theme Security

#60,781

by adnan.limdi9 days ago

Audit WordPress plugins and themes for web shells, Tiny File Manager injections, modified files, and official repository checksum mismatches.

Atikur Security and Risk Monitor

Down in the last 7 days:6,819#60,782

by atikur207 months ago

Quickly review plugin update freshness, compatibility signals, and simple risk scoring in one dashboard.

Chokidar

#60,813

by PHP Artisan2 years ago

We are currently enhancing this plugin. Kindly await the upcoming release.

TwinCraft AutoGuard

Down in the last 7 days:10,297#60,824

by twincraftstudio2 months ago

Developed by TwinCraft Studio. Automatically keeps WordPress core, plugins and themes updated — with a backup before every update, a verification chec …

Birim REST Lock

Down in the last 7 days:10,071#60,844

by Melih Birim6 days ago

Disable the REST API for logged-out visitors without breaking forms. Allowlist routes, stop user enumeration, import from Disable REST API.

PrivacyScrubber ZTDS Guard

#60,850

by Ilya Sibiryakovtoday

Client-side GDPR & HIPAA PII sanitizer for WordPress forms (CF7, WPForms, Gravity, Elementor). Zero-PII MySQL vault, Smart CRM & 1-Tap Lead Cards.

Simple User Locking

#60,902

by Blackbam7 years ago

Prevent users (like e.g. ex-employees, rule breakers or spamers) from logging into your WordPress installation for a certain timeframe or permanently …

BridgeHub Security Insight

#60,925

by Md Jahid Shah4 months ago

Lightweight, read-only WordPress security audits with risk scoring, security checks, and actionable recommendations.

FPX Security Guard

#60,931

by freepdftxt1 month ago

Login protection, two-factor authentication, firewall and hardening for WordPress. Nothing leaves your server — no account, no cloud dashboard.

DevaGroup DevaGuard

Down in the last 7 days:10,907#60,932

by DevaGroup10 days ago

Read-only security monitor. Sends a daily signed report of versions, file integrity and admin events to your DevaGuard dashboard.

denglu1

Down in the last 7 days:6,472#60,983

by 登录(北京)科技有限公司5 years ago

登录易®是一个帮用户（通过扫码或推送）自动注册、登录并管理（例如，自动修改）账号密码的软硬件产品系列，专注解决使用密码时“烧脑”“密码疲劳”等问题。用户再不需要人工设置、记忆及输入众多密码就能在各种终端上网，既方便又安全

Brachmelder

#61,009

by Thorsten Kötzsch1 month ago

Warns you in plain language when plugins were closed, abandoned or are outdated on WordPress.org, and when your PHP version loses security support.

Controla

Up in the last 7 days:9,986#61,049

by oscarcontrola3 months ago

Keep track of your WordPress site's security and health by connecting it to Controla.

Anti-Bot, Anti-Spam & Fraud Protection for WooCommerce

Up in the last 7 days:9,984#61,058

by emkaylabs3 months ago

Hardware-backed bot protection, anti-spam, and fraud prevention for WooCommerce. Stops scalper bots and fake orders at checkout with zero friction.

All’s Well

Up in the last 7 days:1,865#61,089

by Agile Pixel19 days ago

Uptime and SSL checks for your WordPress site, with alerts for pending updates, risky settings and new administrators. Free plan, no card.

Webro Security

Up in the last 7 days:1,515#61,105

by webro1 month ago

Adds security headers, CSP, login protection, SMTP configuration and spam protection to harden your WordPress site.

Beziworld

Down in the last 7 days:5,399#61,128

by beziworld2 days ago

Advanced, fast and secure user-activity log with a tamper-evident audit trail. Every feature free: no paid tiers.

Guard Forge

Up in the last 7 days:1,868#61,172

by avakodeforge1 day ago

WordPress security plugin: brute-force login protection, two-factor login, file-integrity checks and a tamper-evident audit log. No account needed.

WPS Protect

#61,184

by Muhammad Junaid Tariq2 months ago

Move your login URL, stop brute-force attacks, and send HTTP security headers on every response. Lightweight, cache-friendly, no bloat.

ZIP Archive Scanner

Down in the last 7 days:6,476#61,198

by bPlugins3 months ago

Scan your entire WordPress file system to find leftover ZIP archives, review the risk, and clean them up with one click.

Simons FrameKiller

#61,200

by Simon Scherieble5 years ago

Simons FrameKiller adds the framekiller code to a Wordpress page

FBS Secure Optimize

Up in the last 7 days:11,039#61,232

by Fazle Bari9 days ago

Modular speed optimization, database & autoload cleaner, HTTP security headers, login brute-force shield, and 6-layer malware scanner.

Ghostables Defender Lite

Down in the last 7 days:12,133#61,252

by ghostables4 months ago

Active security for WordPress: vulnerability scanning, file integrity, hardening checklist, two-factor authentication, and a tamper-evident audit log.

ABC Integrity

Up in the last 7 days:9,974#61,257

by abc-drew18 days ago

Detect modified, missing, or tampered WordPress core files by comparing them against the official checksums published by WordPress.org.

AI CyberGuard

Up in the last 7 days:11,027#61,297

by yosikrivo3 months ago

All-in-one AI-powered WordPress security: firewall, malware scanner, login protection, file integrity & safety snapshots — and more.

H3SEC Guard

Down in the last 7 days:12,131#61,313

by h3st4k3r2 months ago

Lightweight WordPress security plugin focused on hardening, explainable risk scoring, activity logging, and a lightweight malware/integrity scan.

Genius Firewall

Up in the last 7 days:12,173#61,356

by Genius Plugin2 years ago

Democratized web security for free with the best website firewall designed for everyone from beginners to security experts using Wordpress.

PressVitals Site Auditor

Up in the last 7 days:1,874#61,358

by merolhack2 days ago

A headless-first diagnostic engine featuring 60+ probes for performance, security, and DB health. Extensible via REST API and filters.

Login Obfuscator

Up in the last 7 days:11,025#61,368

by pascal.sikora10 months ago

Enhance your site's security with Login Obfuscator.

Marketingbende Tiny Fixes

Up in the last 7 days:6,664#61,410

by marketingbende6 months ago

A lightweight collection of small WordPress cleanup, performance, admin, and privacy fixes with individual toggles.

SMEPlan Security Shield

Up in the last 7 days:8,158#61,413

by solotop1 month ago

Scheduled security scanning (files/DB/config), baseline/integrity checks, safe quarantine & rollback, and hardening for WordPress.

CaptchaLa

Up in the last 7 days:6,669#61,459

by captchala4 months ago

Smart privacy-first CAPTCHA for WordPress, WooCommerce, and 14+ form plugins. Mandatory server-token anti-replay.

SK Notice Hider

Up in the last 7 days:8,165#61,463

by Samarjit Kashyp11 months ago

Control WordPress notifications and automatic updates. Hide admin notices, update emails, and manage core updates.

WebSentry Security Monitor

#61,481

by Websentry Security10 days ago

Check your site's security from WordPress: SSL, security headers, cookies and DNS, graded A-F. Free account, no credit card.

SyncNet Patch Radar

Up in the last 7 days:10,402#61,578

by syncnetolivergiesbert7 days ago

Shows only the really critical vulnerabilities in widely used products – searchable, shareable and as RSS feeds. Data from BSI, CISA and NVD.

SafeUser

#61,599

by Ravi Novikau3 months ago

Instant Telegram alerts on every new WordPress user registration. Catch admin hijacking and suspicious signups in real time.

Study For Next Security

#61,617

by Study For Next1 month ago

Enterprise-grade WAF, Malware Scanner, 2FA, Auto-Repair, Geo-Blocking, Vulnerability Scanner, Bot Protection, and Speed Optimizer.

Nova Scan Lite

Down in the last 7 days:4,894#61,802

by SephX2 months ago

Lightweight WordPress malware scanner. Detects PHP backdoors, webshells, and injections with signature-based detection and core file integrity checks.

Genaro Maintenance Web Report

Down in the last 7 days:4,903#61,847

by genaro.com.do1 month ago

Genera a demanda reportes mensuales premium de mantenimiento y seguridad web para tus clientes con logs de tareas, recomendaciones automatizadas y ups …

CodeFaeries Store Sentinel

Down in the last 7 days:2,636#61,941

by Long Watch Studio - Code Faeries1 month ago

WooCommerce early warning system — monitors critical store actions and surfaces them in a chronological activity feed.

Secure360

#61,945

by diggitysolutions2 months ago

Universal security monitor, DoS detector, and robust URL migration engine for WordPress site management and safety.