Best security plugins for WordPress

Aviiimageworks Security Monitor

#64,899

by aviiimageworks6 days ago

Monitor WordPress integrity, suspicious requests, login activity, users, extensions, uploads, and configuration from one security dashboard.

No More Bots

Up in the last 7 days:2,028#64,914

by FutrX3 years ago

No More Bots is a WordPress plugin that allows users to select specific pages where they have submission forms (login, register, contact, etc.).

AlertHub

#65,006

by pericodes2 months ago

Integrate your WordPress site with AlertHub to receive real-time notifications for critical events, manage custom alerts, and track logs.

FadeWatch

#65,029

by Prathamesh4 days ago

Find out which of your plugins are closed on WordPress.org (and why), which haven't been updated in years, and which can't be checked.

Rapid Security Manager

Down in the last 7 days:13,044#65,046

by rapidplugins1 month ago

WordPress security with TOTP 2FA, recovery codes, trusted devices, Basic WAF, CSP, GeoIP, security headers, hardening, and diagnostics.

MVO Segurança e Proteção

Up in the last 7 days:4,966#65,085

by MVO Tools25 days ago

Modular WordPress security with 2FA, firewall, login protection, malware checks, encrypted quarantine and activity logs.

Restrictify Extension Access Control

#65,088

by Abiodun Paul Ogunnaike3 months ago

Control access to plugin features and menus based on user roles, keeping your WordPress dashboard secure.

1-Click Disable All

#65,095

by Atakan Au2 months ago

Quickly deactivate all active plugins with one click – ideal for troubleshooting plugin conflicts.

EffortLess Temporary Secure Login

Down in the last 7 days:3,746#65,126

by domclic28 days ago

Generate temporary, passwordless login links for support and developer access, with automatic expiry and one-click revoke.

Aikon Role Manager

#65,128

by Andreas Andersson2 months ago

Aikon Role Manager empowers you to take full control of user roles and capabilities in WordPress.

Atelixo Changelog Digest

#65,167

by nicognito2327 days ago

All the changelogs of your pending plugin updates on one screen, with security and risky changes highlighted.

Storm Clean Admin

#65,181

by Wpstorm Genius11 months ago

A modern WordPress plugin to manage inactive users, monitor site activity, and keep your site optimized and secure.

Sitelemetry Audit

Down in the last 7 days:6,911#65,182

by Ozan Dikici1 month ago

Audit your site for security (free plan), SEO and AI readiness: a score, every finding with its fix, passing checks and an AI fix prompt.

Rudwexa

#65,184

by rudwexa2 months ago

Scan your site, understand what's wrong in plain language, and fix it — every fix backed by a snapshot you can roll back.

DecaGuard

#65,215

by DiegoDeca2 months ago

Tells you in plain English when something changes on your shop that you did not change. Watches only — it never blocks, deletes, or repairs anything.

Really Simple Firewall Sync

Up in the last 7 days:6,472#65,300

by Icarez8 months ago

Import and export blocked user agents for Really Simple Security (Pro & Multisite).

Dashboard Menu Visibility

Up in the last 7 days:6,470#65,327

by jakubkanna8 months ago

Choose which top-level WordPress admin menu items are visible, with checkbox controls in Settings.

JM Admin Role Lock

Down in the last 7 days:14,308#65,337

by Jose Mortellaro25 days ago

Keeps the Administrator role limited to users who already have it.

Jibong Purr-tection

Up in the last 7 days:890#65,338

by Aldrian Loyola17 days ago

Free, all-in-one WordPress security: firewall, malware scanner, two-factor login with passkeys, brute-force protection, live traffic and alerts.

SPM by Marwan

Up in the last 7 days:6,469#65,352

by Marwan Hatem5 months ago

Tracks load time and PHP errors for each active extension, storing logs in a custom database table.

IP Guard

#65,391

by dynahsty2 years ago

IPGuard is a robust security plugin that empowers administrators to safeguard user accounts by implementing IP address-based lockdowns.

NullState Security™

Up in the last 7 days:2,633#65,412

by SalesPC1 month ago

Short Description: Free WordPress security plugin – malware scanning, brute-force protection, two-factor authentication, and more.

Sumedia Urlify

Down in the last 7 days:15,627#65,436

by Sven Ullmann6 years ago

Makes /wp-admin/ and /wp-login.php pathes configurable using mod_rewrite.

TugraCyber

Down in the last 7 days:5,266#65,598

by skromets26 days ago

Monitors third-party scripts on your WooCommerce checkout, detects tampering and produces a PCI DSS 6.4.3/11.6.1 report.

ClickGuardian

Up in the last 7 days:3,551#65,628

by clickguardian2 months ago

Detect and block click fraud on your Google Ads, Meta, and Microsoft Ads campaigns. Paste your Project ID and start protecting ad spend in minutes.

OtpPal

#65,647

by rijensky27 days ago

Client-side plugin for OtpPal – Send and verify OTPs via WhatsApp.

Wyld Registration Sentry

#65,655

by Wyldcode - e-dimensionz, Inc26 days ago

Blocks user registration from invalid, disposable, free, or spammy email domains.

Mamotte! Login URL Changer

#65,683

by SatoruHatano2 months ago

Change your WordPress login URL to a custom slug, with optional IP whitelist and trusted device management for enhanced security.

Fstyle Front Protector

#65,716

by fstylegear095435 months ago

Protect your website content from unauthorized copying and inspection by restricting right-click and developer tools.

Redeyed Sentinel

#65,724

by Bruted2 months ago

Free CAPTCHA and IP-reputation for WordPress login, registration, lost-password and comments, with a block log. Inert until your keys are set.

Randomize Password

Up in the last 7 days:1,243#65,732

by Usman Ali Qureshi18 days ago

Introducing Randomize Password plugin. This feature-rich tool empowers administrators to effortlessly manage user passwords based on predefined schedu …

Ecommerce Frauds Check

Up in the last 7 days:662#65,785

by Md Sazzadul Islam1 year ago

Detect potential fraudulent orders and check customers' past fraudulent behavior before they cancel or reject.

Breach Radar via verisizintisi.com

#65,789

by Veri Sızıntısı1 year ago

Check your WordPress users’ emails against known breaches via verisizintisi.com and act on risks. Language: English | Türkçe → readme-tr_TR.txt

YouMe ID

#65,829

by youmeid6 years ago

The YouMe ID plugin provides two security features, i.e. an alternative CAPTCHA service and a quick login using smart phones.

Rupt

#65,849

by ahmedrupt27 days ago

Know which users and agents you can trust. Stop fake accounts, bots, account takeover, and account sharing on your WordPress site.

Dolutech Passwordless Login

Up in the last 7 days:4,309#65,907

by Lucas Catão Moraes1 year ago

Permite login seguro sem senha com tecnologia passwordless e autenticação de dois fatores (2FA) via TOTP.

Crovly

Down in the last 7 days:2,851#65,908

by crovly6 months ago

Privacy-first, Proof of Work captcha for WordPress. No image puzzles, no tracking. 22+ integrations included.

BTN Admin Restrictor

Down in the last 7 days:4,114#65,935

by btninfosolution8 months ago

Dynamically restrict access to dashboard menus for specific Admin users without changing their roles.

GreenPNG

#65,986

by wpmmcc7 days ago

Traffic security, marketing attribution, conversion funnels, CRM scoring, and local analytics in one private, self-hosted plugin.

TrapFlux Request Firewall

#65,987

by susheelhbti4 months ago

Lightweight, behavior-based bot firewall. Blocks scanners before WordPress loads, with text attack reports for your hosting company.

The Viking Abandoned Monitor

#66,027

by Daniel van der Velden10 months ago

Scans installed plugins and classifies them as Safe / Risk / Abandoned based on last updated date.

Matoma Two-Factor Authentication

Down in the last 7 days:13,250#66,043

by Matoma5 years ago

Matoma Two-Factor Authentication extends the login process by a 2nd factor to achieve increased security. After the user name and password are request …

WLock

#66,047

by Bytes Vibe2 days ago

Lock your site so only approved plugins and themes can be installed, using an allowed list you control from the dashboard.

HDYHaus Identity Verification

#66,061

by Mary Mojisola Job28 days ago

Verify a person's identity before WordPress creates their account, without replacing the native registration flow.

LyoGate

Up in the last 7 days:1,800#66,110

by Andres Hunger24 days ago

A modern, hardened WordPress login page with captcha, honeypot and brute-force protection — fully customizable, no third-party services.

DevForge Admin Toolkit

#66,118

by DevForge9 months ago

Total Control. Zero Clutter. Ultimate Performance. The most comprehensive WordPress admin toolkit.

KHALAF Login Access Guard

#66,142

by Ahmed Khalaf1 month ago

Protect your WordPress login page by moving /wp-login.php to a secret URL, with a fully customizable Access Denied page and live preview.

IC Security Guard

#66,168

by ITclan BD2 months ago

Protect your site from brute force attacks with hidden login, login lockout, Email OTP 2FA, REST API & XML-RPC hardening, and real-time email alerts.

JRT CommentShield

#66,214

by jrtwebsolutions9 months ago

Smart and AI-powered anti-spam protection for WordPress comments. Blocks bots and spam automatically, with optional ChatGPT-based detection.

Responsive Iframe Watchdog

#66,242

by lgrapplications9 years ago

Many WordPress administrators disable the ability to insert unfiltered_html for Editors and Authors roles to avoid being hacked via iframe or other ht …