Best security plugins for WordPress

Aegis Shield

Down in the last 7 days:18,003#69,067

by Aegis Shield1 year ago

A powerful WordPress security scanner that detects suspicious code, file integrity issues, and offers expert support.

SanctumGate

Down in the last 7 days:8,730#69,072

by LaughterOnWater10 months ago

Simple granular access controls for WordPress sites. Keep content private for members while selectively making pages and categories public.

CleanVerify for WooCommerce

Down in the last 7 days:105#69,099

by FahimMurshed17 days ago

All-in-one customer verification, anti-fraud protection, quarantine trash recovery, and inactive account cleanup for WooCommerce.

Web Plura Security Center

Down in the last 7 days:5,113#69,106

by Web Plura5 days ago

Scan for suspicious files and security risks, strengthen login protection with 2FA/passkeys, and manage firewall and file-integrity controls.

SUDS Planner

Down in the last 7 days:812#69,117

by sudsmedia5 days ago

SEO that takes over from Rank Math or SEOPress, light security against SEO spam hacks, WebP images, and draft review for SUDS Planner.

Two Step Factor By SE

#69,123

by seplugins1 year ago

Add more security with the two factor authorisation.

FormThrottle Logger

#69,159

by Yogesh1 month ago

Protect Gravity Forms and Contact Form 7 from abuse with IP tracking, repeat-offender blocking, and restricted submission logs.

Shielda CAPTCHA

Down in the last 7 days:4,707#69,162

by mojtabaghasemi27 days ago

Official Shielda CAPTCHA plugin to protect WordPress, WooCommerce, and WPForms against automated bots, brute-force attacks, and spam.

Botveil Checkout Protection for WooCommerce

Down in the last 7 days:7,069#69,182

by berasubhajit1611 days ago

Stops checkout bots and abuse. Risky checkouts verify their email with a one-time code; repeat offenders are blocked for a while.

Bypass Guard for Cloudflare

#69,190

by Gabor Angyal1 month ago

Blocks requests that bypass Cloudflare by requiring a secret token header. For hosts that offer no stronger origin protection.

Z UpTime by Zubbin

Down in the last 7 days:13,555#69,207

by zubbin27 days ago

External monitors email you after your site is already down. Z UpTime watches from inside WordPress to catch failures before they take you offline.

Viktor’s Login Probe Protection

Down in the last 7 days:16,060#69,209

by Viktor Szépe2 months ago

Protects WordPress and WooCommerce login forms with signed, expiring, single-use tokens.

KhubaibTech OTP Registration Shield

#69,221

by Khubaib Mehmood5 months ago

Protect your WordPress registration form from spam bots by requiring new users to verify their email with a secure one-time code.

WMS HealthScan

#69,244

by wmsplugins1 month ago

Privacy-first WordPress site health checks for core, plugins, themes, PHP, security, database, media, links, backups, and performance.

WP Login Register

Down in the last 7 days:5,786#69,337

by kriss738 years ago

Keep track the users login. The plugin allows to save the data of each user's login (IP, username, date, time).

Security Shield by XD

#69,364

by 希扎尔 (Xī zhā ěr)1 year ago

Security Shield by XD is a security plugin that prevents unauthorized users from installing add-ons, injecting scripts, and modifying core files.

Integer Wp Security

Down in the last 7 days:5,801#69,436

by Lenon Leite6 years ago

WP security is a plugin responsible by security with short steps and fix the mainly security problems.

Blockary

Down in the last 7 days:725#69,447

by Michael8 days ago

Blocks visitors by country and blocks malicious login attempts before the page loads.

BoonRisk

#69,495

by Boon Band8 months ago

Security posture report for WordPress — 30+ checks, prioritized risks, and a printable report. Get a clear picture in minutes.

Assist Security

Down in the last 7 days:7,592#69,499

by AssistPress1 month ago

Rotate your WordPress security keys and salts safely, with verified atomic writes, key health checks, and a full audit trail.

ExploitShield Domain Monitor

Up in the last 7 days:4,062#69,525

by Dancho Danchev1 month ago

Threat-first, domain-scoped security monitoring inside WordPress.

Dynamic Password

Down in the last 7 days:9,622#69,526

by nyasro9 years ago

Change your PASSWORD dynamically Every Minute! Every Hour! Every Day! Every WeekDay! Every Month or Every Year! AUTOMATICALLY!!!

oOMF! Access

Down in the last 7 days:18,292#69,563

by oOMF!2 months ago

Turn the default WordPress login into a branded, passwordless, social-ready access hub with redirects and layered anti-abuse controls.

CoffeeDevs CVE Check for PHP

Up in the last 7 days:2#69,604

by coffeedevs12 days ago

Checks the PHP version of your server against known CVEs, the latest release of its branch and its official support dates.

Webboll Security

Down in the last 7 days:4,657#69,620

by muratkopar1 month ago

Behavior-first WordPress security: custom login URLs, brute-force protection, 2FA, threat engine, activity logging and more.

VulnDex Beacon

#69,635

by VulnDex2 months ago

Keep WordPress core, plugin, and theme inventory current in VulnDex for coordinated vulnerability management.

Cybexsoft Shield

Down in the last 7 days:18,365#69,637

by CybexSoft17 days ago

WordPress security in one place: login protection, file integrity, hardening, server audit and an activity log.

MB Challenge response authentication

Down in the last 7 days:16,466#69,662

by Yeora4 years ago

This plugin implements challenge response authentication. In addition, the WordPress hasher is replaced by native PHP libraries.

Adminvoro Toolkit

#69,663

by Nexiby LLC26 days ago

Customize your WordPress login, manage redirects, apply basic hardening, remove optional assets, and brand the admin footer.

Smart Site Health Monitor

#69,681

by meetupadhyay4 months ago

A complete WordPress site health dashboard — performance, security, database, plugins, SEO and more, with a live health score and one-click fixes.

SMS Partner

Down in the last 7 days:14,484#69,715

by SMS Partner1 year ago

Activer l'A2F ou la connexion via Numéro de téléphone sur votre WordPress grâce à SMS Partner

FreshRepo

Down in the last 7 days:9,003#69,717

by dilhan2 months ago

Identify 3rd-party vs official items, and easily clean and reinstall files from the official repository with 1 click.

Dastyar WP

Down in the last 7 days:13,297#69,721

by Rick Sanchez (Matin Beigi)6 years ago

WordPress Assistant plugin is a plugin to increase speed and security

Malsift

#69,724

by Blackspace Applications7 days ago

Find out whether your WordPress site has been hacked, clean it up safely, and keep attackers out with a firewall and login limits.

Squish Site Patrol

#69,726

by squishit7 months ago

Complete WordPress security, malware scanning, login protection, and performance monitoring in one clean dashboard.

Sendity

#69,733

by Christian Schätzleintoday

Sign-up and login with one message: visitors send a short code via WhatsApp or email. No form, no password, no confirmation email.

Dalmatian Dream User Session Limiter

#69,754

by Marin Horvat4 days ago

Limit maximum login duration and inactivity independently for each WordPress browser session, with warnings and bounded server-side cleanup.

Watchfox AI

#69,803

by ajeermahmood2 days ago

Vulnerability alerts by email. A plain-English plugin vulnerability scanner that says what to fix and by when. Free for one site.

WP Smart Analytics

Down in the last 7 days:1,494#69,840

by Vinod Sebastian4 years ago

WP Smart Analytics provides insights into visitor analytics provides security to your WordPress installation. This mobile friendly plugin uses only en …

EffortLess Website Health Check

#69,883

by domclic28 days ago

Public form where visitors submit a website URL and get a 0-100 health score, recommendations and a price estimate. Submissions are saved as leads.

Elevation Magic Link Login

#69,899

by Elevation Team9 months ago

Add a secure, passwordless login option to the default WordPress login form.

Nimble Operations

Down in the last 7 days:1,995#69,932

by nimbleplugins.com22 days ago

Monitor WordPress health, performance and incidents from one lightweight, privacy-conscious operations dashboard.

Opphisse Toolkit

#69,951

by opphisse20 days ago

Customize the WordPress admin experience, login screen, maintenance screen, admin entry alias, menu visibility, and basic hardening for client sites.

DANGO System Utilities

#69,953

by DANGO3 days ago

See which traffic really delivers orders, what shoppers search for, and harden and speed up WordPress, all from one lightweight plugin.

WP reCaptcha Login

Down in the last 7 days:6,976#69,995

by WP Academic7 years ago

License: GPLv2 or later This plugin uses reCaptcha V3 to add an extra layer of security at your login screen, preventing brute-force attacks.

SolverGuard Security Shield

#70,016

by solverwp2 months ago

Firewall, login protection, two-factor, file integrity monitoring, and audit logging, explained in plain language.

IntelliLanz

#70,052

by Mazlan Halim28 days ago

Understand your WordPress site's health, systems, components and known connections from one administrator dashboard.

Static Site Generator

Down in the last 7 days:18,371#70,089

by Katsushi Kawamori15 days ago

Generate static site.

OOSOFT 2FA Security

Down in the last 7 days:3,070#70,091

by oosoft5 months ago

Enterprise-grade Two-Factor Authentication for WordPress with TOTP, Email OTP, backup codes, and role-based enforcement.

HighPots Spam Protection

#70,106

by HighPots GmbH26 days ago

Multi-layer spam protection for WordPress forms with honeypot, rate limiting, token validation & comprehensive bot detection.