Best security plugins for WordPress

Force User SSL

#63,331

by Martin Teley9 years ago

This plugin forces logged in users to use SSL.

The Viking Critical Change Alert

#63,343

by Daniel van der Velden1 month ago

Logs critical site changes (plugins, themes, admin users) with dashboard, email digest, and webhooks.

Jass Bots Entry Control Manager

#63,348

by Jaswant Singh1 month ago

Protect your site from bad bots, manage allow/deny for search engines, AI crawlers, and more.

Syncific Vault

#63,357

by lightsyncpro5 months ago

Encrypt your AI API keys and keep them out of the WordPress database — one secure vault for WordPress 7.0 Connectors and every AI plugin.

Computernørden’s Security Panel

#63,366

by Albert van Harten2 days ago

Harden your WordPress site: HTTPS and HSTS, security headers, a full Content Security Policy builder, security.txt, and a readiness scanner.

Audit Log Mailer for All in One Security

#63,384

by Masaki (studioNoiR)10 months ago

Automatically exports and emails All in One Security & Firewall audit logs on a monthly basis in CSV format.

Mimic Guard

#63,390

by aoto21 days ago

Block spam submissions with honeypot fields and submission timing checks.

ControlPact Governance

#63,398

by ctrlpact1 month ago

Connect WordPress to ControlPact and govern automated post publication with ALLOW, APPROVE or BLOCK decisions.

Avenixr

#63,408

by avenixr4 months ago

Monitor installed plugins for known vulnerabilities, update gaps, compatibility signals, and security risk indicators.

OnGuard

#63,421

by On Guard1 year ago

OnGuard is Login Plugin that will challenge suspicious logins by email, send password compromise and new connection emails.

PlugeGuard

#63,484

by Maruf Hossain1 year ago

Scans your WordPress installation for hardcoded login credentials (usernames/passwords) and allows safe removal from PHP files.

Lunexia Security

#63,509

by lunexiait1 month ago

Complete WordPress security, 2FA login protection, WAF firewall, malware scanner, 1-click quarantine, and .htaccess server hardening.

Privacy Portal SSO (for WP)

Down in the last 7 days:5,358#63,511

by Privacy Portal2 years ago

Welcome privacy-conscious users to your website and/or email newsletter, with features like "Sign In With Privacy Portal" and "Subscribe Anonymously".

xZeroProtect

Down in the last 7 days:1,280#63,599

by Ben Khalife25 days ago

Lightweight firewall for WordPress — blocks bots and scanners, tracks real visitor analytics with zero external dependencies.

Login Captcha

#63,618

by sach39327 years ago

This plugin used to apply/add login captcha field to wordpress login form.

SmartWeb Disable Click

Down in the last 7 days:4,318#63,632

by smartwebtech391 year ago

SmartWeb Disable Click by SmartWeb Tech is a lightweight WordPress content protection plugin.

Maintain Hero Monitor

Up in the last 7 days:3,285#63,637

by stimsonm1 month ago

A WordPress website health dashboard with practical checks for SEO, security, accessibility, updates, configuration, and broken links.

Keyless Login

Down in the last 7 days:5,041#63,651

by susheelhbti5 months ago

Passwordless WebAuthn/FIDO2 login for WordPress. 100% pure PHP, zero external dependencies.

HealthSpark Site Health Dashboard

Down in the last 7 days:5,042#63,655

by Pluginjoy6 months ago

Your site's vital signs — all in one dashboard. Monitor accessibility, performance, security, SEO health, and EU compliance.

Kanshi

Up in the last 7 days:5,384#63,667

by Kanshi4 months ago

Protect WordPress forms by validating submissions with the Kanshi API before accepted entries reach form handlers and notifications.

GridXFlex Captcha Security

Down in the last 7 days:6,759#63,689

by Grid X Flex2 months ago

Self-hosted image CAPTCHA and silent honeypot for Login, Registration, Lost Password, and Comments forms. No API keys, no external services.

Proteside for WooCommerce

#63,693

by Proteside12 days ago

Helps you meet PCI DSS 4.0 requirements 6.4.3 and 11.6.1 by loading the Proteside client-side protection on your payment pages.

Vanguard Admin Protection & Notifications

Down in the last 7 days:5,587#63,754

by Luis12 days ago

Advanced protection against unauthorized administrator creation, role changes, and direct database access.

Togra Admin Enhancer

#63,758

by Togra Studio25 days ago

Turn WordPress features on or off from one screen. Every switch states what it changes before you save it.

Baskerville AI Security

Up in the last 7 days:4,648#63,818

by eQualitie11 days ago

Advanced WordPress security plugin with AI bot detection, GeoIP access control, CAPTCHA challenge, and optional AI cloud analysis.

Shift8 Security

Up in the last 7 days:4,162#63,828

by shift87 years ago

Plugin that implements several measures to generally improve the security of your Wordpress site. At this point security scan obfuscation of core Word …

VAPTCHA Human Verification

Down in the last 7 days:7,428#63,855

by vaptchateam2 months ago

Completely free VAPTCHA human verification for WordPress login, registration, password reset, and comments.

GeoGuard

#63,906

by Delwar Hossain10 months ago

Protect your content by blocking or redirecting visitors from specific countries.

JM Website Security Hardening

Down in the last 7 days:7,537#63,913

by Jose Mortellaro3 days ago

Decide what your site may load and who may use its files. Security headers are written for you.

PB4Host Security

Down in the last 7 days:2,695#63,933

by support@pb4host.com1 month ago

Enterprise Security Suite for WordPress: Web Application Firewall (WAF), Active Malware Scanner, Brute-Force Defense, 2FA, and System Hardening.

LCK cloud Connector

#63,973

by LCK cloud2 months ago

Restrict your existing pages and posts to members only. Official connector for LCK cloud, a free membership site building system.

Digiter Security Lite

Down in the last 7 days:15,381#63,986

by digiterorg7 days ago

Local login throttling, executable upload protection, security configuration checks and a trusted file integrity baseline.

RuleFence

Down in the last 7 days:14,720#64,005

by RuleFence1 month ago

See what Claude, ChatGPT and MCP agents can do on your site - then allow, hold or block each ability, with a signed audit trail.

CMS Watchman

#64,045

by gits2291 year ago

CMS Watchman provides robust security monitoring for WordPress sites, detecting vulnerabilities and integrating seamlessly with Watchman.

Repolog

Down in the last 7 days:7,334#64,086

by Repolog3 months ago

Audit your site's SEO, speed, security, accessibility, and AI readiness — scores and top fixes right inside the WordPress dashboard.

Online Everything Secure Login

Down in the last 7 days:6,531#64,115

by Online Everything Technologies12 days ago

Move the login page to your own address, stop password guessing, add a 2-step email code for admins and harden WordPress, with a log of every login.

PathGuard Redirects

#64,159

by MD. Samrat Hossen1 month ago

Block specific relative URLs on your site and redirect visitors to a custom destination or your theme's 404 page.

Blog Cutter Smart Security Management

#64,199

by Blog Cutter AI28 days ago

Helps reduce automated abuse with a visitor challenge, login shields, optional two-factor authentication, local hardening, and logs.

Jetpack Login

#64,306

by Harman Singh Hira9 years ago

This plugin simply remove default Login Form from login page. If you are really sick of spam logins that are happening gain and again, then simply use

Nimble Security

Up in the last 7 days:4,115#64,381

by nimbleplugins.com19 days ago

Local WordPress security with 2FA, integrity monitoring, firewall, malware scanning, quarantine, incident response and recovery readiness.

Netdesign Session Guard

#64,401

by Netdesign7 days ago

See who is signed in right now, spot accounts shared between several people, and limit how many devices an account can use at once.

Sentryvine

Down in the last 7 days:10,752#64,418

by sentryvine2 months ago

Scan WordPress files and published content for malware indicators, core integrity changes, and phishing risks.

Ninja Spam Protection

#64,418

by randomoutputs4 years ago

The ultimate solution to prevent spam comments like a ninja on the default commenting system for WordPress in WordPress.

Anonindo Security Advisor

#64,441

by Akshay Vasoya5 months ago

Lightweight WordPress security coach for scanning risks, explaining issues clearly, and guiding safer site improvements.

Allimedia Login & Prefix Guard

#64,474

by Aleš Zita - Allimedia2 months ago

Protect the login URL and change the database prefix through a verified workflow with readiness checks and automatic rollback.

REST API Only

#64,486

by jakubkanna10 months ago

Force all non-admin, non-AJAX, and non-REST API requests to return a 404 for headless or API-only sites.

BotSieve

Down in the last 7 days:9,873#64,651

by custonis5 months ago

Detect bots, AI crawlers and suspicious traffic on your WordPress site. Monitor traffic quality in real time with a modern lightweight dashboard.

Ganava Location Access Control

Up in the last 7 days:954#64,745

by sandipganava5 months ago

Control your site access globally with precision. Block or redirect visitors based on their country, region, or city using Cloudflare headers or high- …

OrioleOne Master Guard

Up in the last 7 days:3,379#64,761

by OrioleOne1 month ago

All-in-one WordPress security with brute-force protection, hardening controls, and a clear failed login audit log.

BeleShield Vulnerability Scanner

Up in the last 7 days:3,524#64,844

by beletech7621 days ago

Alerts you when an active plugin or theme has a known, unpatched vulnerability (CVE/WPVDB).