Best security plugins for WordPress

MyelophOne Core

Down in the last 7 days:5,731#70,128

by ALIAKSANDR IVANOU4 months ago

Comprehensive lightweight FREE WordPress optimization plugin with performance tools, security features and maintenance utilities.

Nyambush

#70,134

by y1uda8 months ago

Connect your WordPress site to Nyambush ASM platform for continuous vulnerability monitoring and security assessment.

wenstonCaptcha

Down in the last 7 days:5,731#70,138

by wenstondev6 months ago

Self-hosted image CAPTCHA for WordPress. No third-party services or external requests. Privacy-first CAPTCHA. GDPR compliant.

Aria Security Suite

Down in the last 7 days:5,730#70,143

by Alireza Aminzadeh2 months ago

Standalone WordPress security: local WAF, TOTP 2FA, malware scanner, hardening, live traffic, and an optional Enterprise API.

BotObservatory

#70,150

by traveliaq2 months ago

Observe human and machine traffic, identify suspicious automation, and optionally quarantine aggressive scrapers.

NullSquare

Up in the last 7 days:100#70,151

by nullsquare2 months ago

Connect a WordPress site to NullSquare for domain verification, status synchronization, and an optional trust badge.

Smart Hide Login

Down in the last 7 days:3,067#70,157

by alextrejo5 months ago

Hide WP login page with customizable redirect and welcome page.

Dragon Compliance

#70,158

by Dragon Core1 month ago

CRA and NIS2 compliance for WordPress: software inventory, SBOM export, vulnerability scanning, readiness checklist and a timestamped evidence log.

BadActors.io Fraud Review for WooCommerce

Down in the last 7 days:14,072#70,197

by badactors10 months ago

Integrates WooCommerce with BadActors.io fraud detection API to help merchants identify, prevent and report fraudulent orders.

Detectant Malware Scanner

Down in the last 7 days:2,373#70,199

by detectant1 month ago

Scans WordPress uploads synchronously with Detectant and quarantines malware found by background reconciliation.

ScanBase

#70,214

by lego19951 month ago

Check your website's compliance with the Russian personal data law (152-FZ) from wp-admin: compliance score, violations and potential fines.

Sitevorx

Down in the last 7 days:5,730#70,216

by iNET7 days ago

An all-in-one WordPress toolkit for site optimization, security hardening, SMTP configuration, disk cleanup, and maintenance monitoring.

CrafyCAPTCHA

#70,227

by crafycaptcha14 months ago

Advanced bot protection with adaptive friction for WordPress and WooCommerce.

Haq Security CVE Monitor

Down in the last 7 days:14,715#70,256

by haqsec1 month ago

Real-time CVE vulnerability monitor and security auditing GUI dashboard for WordPress powered by Haq Security API.

Reventor Page Shield

#70,269

by REVENTOR10 months ago

Protect any page from logged-out users with a single click. Redirects logged-out visitors to a safe destination.

WTB Firewall

Down in the last 7 days:7,855#70,307

by wtbplugins2 months ago

Easy to use Firewall for securing your site. IP blocking, geo blocking, brute-force protection and rate limiting.

CodeCave Admin Security Auditor

#70,391

by CodeCave11 months ago

Track and display the last login time for each user in the WordPress admin users table.

Email TFA

Down in the last 7 days:9,181#70,405

by Justin Norton4 months ago

Add an extra layer of security via two-factor authentication with email for WordPress logins.

Post Migration Checklist

#70,414

by Vinod Pawar1 year ago

Helps site administrators perform a comprehensive checklist and scan after migrating a WordPress website. Identifies issues related to SEO, performanc …

NaveenCodes Login Guard

Down in the last 7 days:20,401#70,414

by Naveen Goyal27 days ago

Brute-force protection, live login-attempt log, IP block/allow lists, and instant email alerts — all on your server, zero external requests.

OS3 Website Protector

#70,440

by fsoft1 month ago

Protect your WP site from malware and virus

Vegestic

Down in the last 7 days:20,414#70,467

by vegesticsolutions4 months ago

Control concurrent login sessions per user — set limits, track login history, and force logout from your dashboard.

AFB Update Watch

Down in the last 7 days:20,461#70,503

by AFB Digital Solutions22 days ago

Know when a plugin changes owner or is closed on WordPress.org, and hold its updates until you have checked it.

CrashGuard Lite

#70,507

by Didio Silva Sousa1 year ago

Short Description: Emergency recovery tool to reset permalinks and provide clear recovery instructions.

LumeaPixel Access

Down in the last 7 days:505#70,527

by saimfd11 days ago

Gate WordPress pages, posts, or custom content behind an email check, with an optional one-time password. No account required.

TraceVault Audit Log

#70,533

by Naowas Morshed Eimon3 months ago

Security-focused activity logging, audit reporting, retention controls, privacy tools, and filtered exports for WordPress.

PressPatrol

#70,544

by Scooter2 months ago

Local file-integrity patrols for WordPress core, plugins, themes, administrators, uploads, reports, and weekly email summaries.

The Code Registry

Down in the last 7 days:6,074#70,558

by thecoderegistry2 years ago

Backup your code and analyze security vulnerabilities, third-party component usage, licensing issues, code quality and more with The Code Registry.

Beplus Security Headers & Script Auditor

Down in the last 7 days:7,135#70,598

by rimbeplus23 days ago

Enable common HTTP security headers, scan your site for external scripts/styles, and pick your own Content-Security-Policy rules.

Hanu Malware Guard

Down in the last 7 days:4,166#70,609

by Hanuit Solutions1 month ago

Scans files for malware, tracks file integrity, audits WP-Cron for planted jobs, and blocks login brute-force and common attacks.

Kaigai Spam Mail Blocker

Down in the last 7 days:6,015#70,612

by higherfield9 months ago

Blocks spam submissions from overseas contact forms. Supports Contact Form 7 and Elementor Pro Forms.

Elevoire Security Audit

Down in the last 7 days:12,219#70,621

by Elevoire3 months ago

Read-only WordPress security auditing plugin. Scans for security issues, explains the risks, and recommends fixes.

ModelGain PHP Security Monitor

#70,623

by ModelGain.com3 days ago

Free PHP runtime checks, optional scheduled monitoring and conservative email alerts.

BadgerScan

Down in the last 7 days:9,441#70,628

by cyberbadger1 month ago

See your site the way an attacker does and the way only an admin can, reconciled into one honest A to F grade.

DakyaCo Recaptcha

#70,705

by amirrezam757 years ago

Protect WordPress from spam with Dakyaco Captcha

MUDRAVA Admin Tweaks

#70,709

by MUDRAVA7 days ago

30+ toggleable admin-area tweaks in one plugin: branding, columns, media, security hardening, notification control, and cleanup.

Recent File Scanner

Down in the last 7 days:5,481#70,722

by Sam1 year ago

Scan themes and plugins for newly created files added in the last N days. Great for detecting suspicious uploads.

360 Orbit Login Guard

#70,747

by Jörg Liwa28 days ago

Protects your login against brute-force attacks: rate limiting, login history and generic error messages, with a safety net against admin lockout.

Trufend

Down in the last 7 days:2,763#70,766

by shewa1 month ago

Harden WordPress with brute-force protection, login security, security headers, malware scanning, backups, and more.

IGW Security History

#70,790

by Francisco GP (crishnakh)2 months ago

Review the security history of your installed plugins and check whether their current versions are affected by known vulnerabilities.

Tecnología Geek Seguridad Geek

Down in the last 7 days:1,868#70,832

by Tecnología Geek11 days ago

Security audit and hardening for WordPress in plain language: a clear 0-100 score, what every finding means, and safe one-click fixes.

Kareva Security Headers

#70,836

by karevatechsol2610 days ago

Set HSTS, CSP, X-Frame-Options and other HTTP security headers from your dashboard, with presets, testing and reporting.

SLIM Low Bandwidth Mode

Up in the last 7 days:352#70,953

by Caleb Queern4 months ago

Serve your WordPress site in SLIM mode — single-request, text-first, and network-resilient.

Elevoire Site Health Pro

Up in the last 7 days:14#70,973

by Elevoire2 months ago

A read-only diagnostic companion to WordPress Site Health, covering PHP, security, database, performance, and caching.

Torque

#70,980

by Hexydec1 year ago

A Wordpress plugin to optimise the transport of your website to the client. Reduce the load on your server and make your Wordpress website fly!

AI Crawler Guard

Down in the last 7 days:8,040#70,986

by aicrawlerguard.com11 months ago

Detect and control AI crawler access with local logging and history.

0Cert

#70,987

by Dimitrii Ulianov4 months ago

Add 0Cert identity-based encryption verification to your WordPress site. Zero certificates. Zero renewals.

FluxCDN Security

#70,990

by FluxCDN3 days ago

Stay ahead of plugin vulnerabilities and strengthen your site's security.

Wpshe Enhance

#71,000

by moxiaoyu4 months ago

Wpshe Enhance improves WordPress performance, security, media handling, and content management with practical optimization switches.

ArchivioMD

#71,003

by mtnviewpro6 months ago

Cryptographic content integrity for WordPress — hashing, signing, RFC 3161 timestamps, Rekor transparency log, and DANE corroboration.