Best security plugins for WordPress

SR WORKS ArmorPro

Up in the last 7 days:715#61,956

by SRWorks LLC1 month ago

Free WordPress security: WAF, firewall, brute force protection, two-factor authentication, passkeys, country blocking, and security headers.

WP Vulnerable Updates

#61,971

by Thamaraiselvam8 years ago

WP vulnerable updates is an automated Vulnerable checking plugin in real time and alert you if any vulnerable updates found on your WordPress site.

Activity Lens

#61,991

by Spidawebs1 year ago

Log user and post activities in a separate database for performance and compliance.

VigiGuard Security

Up in the last 7 days:711#61,999

by Kashif Ahmed Khan8 months ago

Simple one-click WordPress security. Protect your site in 30 seconds.

Encode Shortcode

Down in the last 7 days:3,476#62,014

by Julien MA Jacob7 years ago

Protect email address in your website against spam with shortcode like this : [encode email="hello@mail.fr"]My text to encode[/encode]

ZA Creative Login Shield

Down in the last 7 days:11,303#62,052

by Sipho Nhlapo2 months ago

Enterprise WordPress login security with 2FA, WebAuthn passkeys, risk scoring, analytics, file integrity, and vulnerability scanning.

Ironfang Security

Down in the last 7 days:2,793#62,060

by ironfang11 days ago

Security configuration checks for WordPress, with clear evidence and guidance. Checks run on your site and do not send information to Ironfang.

Katorymnd Contact Form

Down in the last 7 days:5,062#62,064

by Raymond11 months ago

Katorymnd Contact Form is a simple but secure contact form Verified and ready to use.

LoginEase

#62,106

by Killian Santos9 months ago

Passwordless login via secure magic links on the WordPress login form.

CyberNote Security Checker

#62,108

by teeeda11294 months ago

Diagnoses WordPress security settings and version status, presenting plain-language improvement steps in Japanese. No external requests. Lightweight.

Mcpelee Site Security Guard

#62,141

by DongHa16 days ago

Manage IP and country access rules, static error redirects, security logs, login protection, and file change monitoring.

FP Site Security

Up in the last 7 days:3,390#62,148

by Joseph Mendez4 months ago

Lightweight WordPress security: login defense, firewall, malware scans, file monitoring, and local backups — all running on your own site.

007AJ Security Scanner & Firewall

Up in the last 7 days:9,970#62,156

by 007AJ.com12 days ago

Login lockout, a lightweight firewall, a core file integrity scan, hardening switches and an activity log, running on your own server.

ARS Vigilo Sessions

Up in the last 7 days:9,985#62,184

by arjitsri1 month ago

Track and display the last login date and time of WordPress users, with session history, geolocation, idle auto-logout, and an admin dashboard.

PIIP

#62,210

by miya1 month ago

Automatically detects and masks PII in WordPress comments and forms to protect user privacy and support your GDPR compliance efforts.

Agentic Daisy AI Agent Firewall

#62,238

by agenticdaisy18 days ago

AI agent firewall for MCP and the Abilities API: hold risky agent writes for your approval, audit every action, and undo mistakes in one click.

Scinorx Site Risk Snapshot

Up in the last 7 days:9,423#62,271

by Scinorx Technologies Inc3 months ago

Review WordPress maintenance risk signals, inactive extensions, update visibility, admin count, and hardening basics.

Solutiontech Seguridad de acceso

Down in the last 7 days:7,212#62,274

by solutiontechcl14 days ago

Protects WordPress access with custom login URL, Micro-WAF, 2FA, IP control, brute force protection, core integrity, and local audit logs.

pars-optimizer

#62,280

by Pars Host Developer Team5 months ago

pars-optimizer is a comprehensive optimization plugin designed to speed up your website, enhance security, and beautify your WordPress admin panel.

My Trail Camera

#62,310

by Viktor Cech6 months ago

Trail camera management with anti-theft protection. Hidden HTML files on SD cards track and help recover stolen trail cameras.

LC Anti-Spam Registration

Down in the last 7 days:7,212#62,332

by Celsius Anderson1 month ago

Prevent fake and automated bot registrations with lightweight honeypots, rate limiting, and intelligent username analysis.

Security Made Easy

Up in the last 7 days:5,842#62,333

by VeryEasy1 year ago

A set and forget solution for WordPress security.

TechDex Search Scrape Guard

Up in the last 7 days:215#62,334

by Dexter Nelson3 months ago

Protects the public WordPress search feature from spam, automated abuse, deep pagination, and excessive search activity.

Codevera AI Access Control

Down in the last 7 days:3,564#62,339

by codevera6 months ago

Decide which plugins are allowed to expose their abilities to the WordPress AI feature. Block any plugin, or any single ability, with one click.

Nivoli Edge

#62,677

by calimonk3 days ago

Free security check, one-click hardening and a login-code audit for WordPress. Add the managed edge to refuse attacks before they reach PHP.

NeverLast Security Lite

#62,677

by neverlast16 days ago

Local-first WordPress security: bounded firewall, login controls, administrator TOTP, health checks, integrity evidence and activity logs.

Arabdown Permissions

Down in the last 7 days:2,467#62,750

by asemalkamel3 months ago

Visual control over what each user role sees in WordPress: hide admin menus, plugins, widgets, and admin-bar items per role — with toggles, no code.

Hardened Clean

Down in the last 7 days:6,075#62,771

by Janos Moga4 years ago

Lightweight protection to and cleaning of your Wordpress website.

SiteMedic Rescue Toolkit

#62,794

by prakashghai4 months ago

Diagnose and safely repair WordPress issues with site health, debug, security, cleanup, and recovery tools.

Vyntic Guard

#62,798

by Vynatics2 months ago

Security plugin with malware scanning, brute-force protection, login security, IP blocking, activity logs, hardening, and custom login URLs.

Clicks Site Monitoring and Audit Logs

Up in the last 7 days:7,439#62,802

by sykologicist3 months ago

Monitor WP-Cron jobs, log PHP errors, and track user activity with real-time alerts to Slack, Discord, or email. Zero telemetry.

Simbe AI Website Care

Down in the last 7 days:8,270#62,807

by simbe11 month ago

Monitor plugins and themes for vulnerabilities, get email alerts, and check common issues. Built for freelancers and agencies managing many sites.

OpsGate

#62,827

by opsgate1 month ago

WordPress operational intelligence: know what is happening across your sites, what needs attention, and what to do next.

SeoNova Bot Radar

#62,852

by edison722 days ago

Bot traffic radar: who visits your site, what they are after, and what they cost you in money.

MDI Spam Sheriff (for GravityForms)

Up in the last 7 days:4,620#62,868

by Medium Interactive2 months ago

Blocks spam on Gravity Forms by checking every submitted email domain's registration age via RDAP; recently-registered domains are blocked.

WPG Shield

#62,919

by Rakesh Raja3 days ago

WordPress security and firewall plugin: malware scanner, 2FA login protection, brute force lockout, wp-config hardening and headers, verified.

Cloudusk Captcha

#62,923

by cloudusk2 months ago

Cloudusk Captcha provides a lightweight, developer-friendly CAPTCHA integration for WordPress sites.

UniverWP

Up in the last 7 days:8,646#62,943

by 7bar2 years ago

Univerwp is a plugin, as a framework, that aims to extend WordPress in various area: security, performance and additional features.

Ultimate Auditor

#62,973

by Mayank Majeji1 month ago

Audit your installed WordPress plugins for security, code quality, and standards issues, all from your WordPress admin.

Rapid2004 SH

Up in the last 7 days:10,562#62,977

by rapid200421 days ago

Lightweight WordPress protection tool. Removes generator version leaks, filters login authentication errors, and updates the local admin footer text.

Datametric Login Shield

Down in the last 7 days:3,709#62,991

by Ridvan Bilgin3 months ago

Hide your WordPress login URL and block access to wp-login.php and the wp-admin directory for logged-out visitors.

Pinery Static

#63,000

by amgoodman10 days ago

Export WordPress to a fast static site on Cloudflare Pages in pure PHP — no Node.js, no build server. Incremental deploys, SEO intact.

Kistn API Client

#63,025

by Christian Doebler2 months ago

Pushes installed plugin and theme inventory to the Kistn API for vulnerability monitoring.

WM Secure and Optimize

Down in the last 7 days:4,160#63,056

by Selvakumaran Krishnan3 years ago

One place for site security and site performance. Secure and optimize your site to perform better. WM Secure and Optimize

Passwordless X1280

#63,117

by Passwordless Alliance3 months ago

Passwordless login for WordPress with smartphone biometrics and mutual authentication, based on the ITU-T X.1280 international standard.

Numvra User Activity Log

#63,130

by numvra2 months ago

Records who did what on the site — content published or deleted, users created, roles changed, plugins switched — with the IP it came from.

LungoTech IP Guard

Up in the last 7 days:8,169#63,132

by ltechid3 months ago

Enterprise-grade .htaccess IP blocker with automated temporary IP purging, CIDR range support, and a modern UI.

Takumi Private Gate

Up in the last 7 days:5,673#63,153

by yoshiromoriyama1 month ago

Lock down your private WordPress site. Force login for all visitors, block REST API and XML-RPC, and lock out repeated failed login attempts.

BlockGlow

#63,155

by Mary Rose Elbambo21 days ago

Enhance, optimize, and protect your WordPress website with block-level CSS customization, performance tools, and security features.

SaniGlyph SVG

Down in the last 7 days:11,997#63,231

by shahidirfan10018 days ago

Fail-closed SVG validation that preserves approved artwork, with role controls, Media Library previews, and securely escaped inline output.