Best security plugins for WordPress

Adaptive Login Action

Down in the last 7 days:21,029#71,030

by wpgear2 months ago

Adaptive Login Form: Adjusting compromise between Comfort and Paranoia.

ZEISMO Security

#71,054

by zeismodev13 days ago

WordPress firewall, local malware scanning, two-factor login and guided security setup. Review threats, manage access and get help.

HeaderGenie Security Headers

Down in the last 7 days:7,877#71,063

by headergenie6 days ago

Add HTTP security headers from WordPress. Scan what your site sends and enable safe defaults.

DH Rename Login URL and Two Factor Authentication

#71,068

by Ohid6 years ago

DH Rename Login URL helps you to rename or modify the default WordPress login area /wp-login.php and gives you Google Two Factor Authentication featur …

BuildsByLuke Upload Vault

Up in the last 7 days:2,432#71,092

by Luke W18 days ago

Secure Gravity Forms file uploads: see what a leaked URL exposes, then lock it down with deny rules and a capability-checked download proxy.

ice Scanner Security

#71,122

by icecodero7 days ago

Read-only security scanner: checks core and plugins against the official checksums and finds hidden code, risky settings and new admins.

PureGuard

#71,130

by Pure Guard6 days ago

Six security modes, branded challenge and block pages, a VPN-friendly filter, and a live Security/Performance dashboard for your WordPress site.

CartShark Security

Down in the last 7 days:4,420#71,172

by rapidspike1 month ago

Protect your store from Magecart-style web skimming attacks. CartShark tracks and alerts on malicious JavaScript that could steal customer card data.

FortisRestore

Up in the last 7 days:2,436#71,201

by fortisrestore2 months ago

Create encrypted WordPress backups, download recovery points, and perform guided staging restores.

Rat Two-Factor Authentication

Down in the last 7 days:4,423#71,208

by rathsh1 year ago

Lightweight and powerful Two-Factor Authentication plugin for WordPress with email-based OTP verification.

Bot Lockout

Down in the last 7 days:4,415#71,234

by kognetiks1 year ago

A lightweight WordPress plugin that protects your site from AI scrapers and bad bots using cryptographic JavaScript challenges.

AuditPulse Activity Log & Site Monitor

Up in the last 7 days:1,630#71,242

by Ajay Kumar3 months ago

Know your site. Before it's too late. Track every login, content change, plugin event and settings change.

Conversion.Business Gamified CAPTCHA

#71,259

by Kate3 months ago

Frictionless, gamified, native GDPR compliant CAPTCHA for WordPress and WooCommerce. Stop bots without annoying your customers.

4Login for Secure And Smart Access

Down in the last 7 days:15,647#71,266

by 4login1 year ago

4Login will give you an easy and powerful authentication (connect to an external server for authentication).

Stackbrace

#71,275

by Stackbrace8 days ago

Reports this site's versions and health to Stackbrace. It only talks outward.

Klydexa Website Audit

#71,283

by klydexa3 days ago

Audit SEO, performance, Core Web Vitals, accessibility, security, mobile, UX and WooCommerce - then fix what it finds in one click.

Sentinel Login Guard

Down in the last 7 days:12,418#71,290

by Hossein Ahmadi1 month ago

Professional protection for WordPress login: hide login path, geo-restrict access, manage IP whitelist and blacklist, and view login statistics.

CodeCaste Media and Safe SVG File Upload Rules

#71,298

by CodeCaste6 days ago

Set upload size limits, block file types, and safely allow SVG uploads. Works with the Media Library, file managers and other plugins.

Cloudusk 2FA

#71,309

by cloudusk9 months ago

A free and lightweight two-factor authentication (2FA) plugin for WordPress using TOTP and authenticator apps.

Logicdigger Website Health Monitor

#71,345

by logicdigger4 months ago

Logicdigger Website Health Monitor — performance, security, and diagnostics checks for WordPress with dashboard reporting and alerts.

Human Verification Brain Puzzle For Login Security Guard

#71,354

by Kamrul Islam2 months ago

Protect your WordPress login page with a fun 3×3 puzzle. Users must solve it before they can log in.

TalktoMonitor

Down in the last 7 days:9,731#71,355

by TalktoWP1 month ago

AI-powered WordPress health monitoring. Detects issues, explains them in plain English, and helps you fix them fast.

Corrected commenter IP for Cloudflare CDN

#71,363

by guguan1231 year ago

A plugin to correct commenter IP addresses for WordPress websites using Cloudflare CDN.

Gracewell Backup Manager

#71,372

by gracewell891 month ago

Simple and secure WordPress website backup solution. Creates complete backups of your database and wp-content files.

HandL AI Connector Access Control

Down in the last 7 days:8,953#71,382

by Haktan Suren1 month ago

See which WordPress plugins use AI. Control access. Track estimated spend before it becomes a surprise.

AV 2FA

#71,382

by Avrasys5 months ago

A simple and secure Two-Factor Authentication plugin that sends a verification code to your email.

Track unauthorized access

Down in the last 7 days:18,583#71,406

by Mansur5 years ago

Track unauthorized access to your WP website.

ActivityPilot

#71,432

by Piyush Asthana5 months ago

Track, visualize, and analyze admin and user activity in a timeline UI with break detection, workflows, REST API, and exportable audit logs.

Ethwebs Role Auditor

#71,433

by Sanmatiraj2 months ago

Lightweight security auditor monitoring user roles, catching direct database admin additions, and sending instant security alerts.

Pixelash Site Change

#71,464

by ektadev19 days ago

Detect and log meaningful changes to your content, plugins, themes, users and settings, with severity scoring and email alerts.

VCNS Security Automation Manager

Down in the last 7 days:20,371#71,549

by Simon Jackson12 days ago

Self-learning security headers, built-in attack detection and rate limiting, file-integrity monitoring, and free TLS certificates. No paywall.

Eclairman's User Login Blocker

Down in the last 7 days:1,486#71,558

by eclairman3 months ago

Disable login for selected users. Choose which accounts are blocked from a simple, searchable, sortable checklist in the admin.

CSGaku Site State Check

Down in the last 7 days:1,486#71,561

by csgaku5 months ago

Checks key WordPress site status items from the admin area without external API communication or automatic changes.

Brightery Secure 2FA

Down in the last 7 days:1,491#71,593

by Brightery6 months ago

Production-focused two-factor authentication for WordPress with authenticator apps, passkeys, forced enrollment, and advanced session hardening.

Tandem PHP Upgrade Gatekeeper

#71,614

by tandemresistentia3 months ago

PHP upgrade gatekeeper: target PHP policy, readiness tracking, and warn/soft-block on risky updates — not a one-shot scanner.

SPP Guardian Security & Maintenance

Down in the last 7 days:10,195#71,616

by talhastackbuggs2 months ago

Local malware scanning, integrity monitoring, safe quarantine, verified core repair, an optional firewall, and plain-language maintenance guidance.

FacetFence Product Filters

Down in the last 7 days:1,498#71,623

by Hamidreza Rezaei4 months ago

Protect WooCommerce filtered URLs from crawl floods with noindex/canonical controls, signed cookies, rate limits, logs, and rollback.

Snipfire Tweaks

Down in the last 7 days:11,738#71,684

by papaman1 month ago

71 tested one-click tweaks: security, a cleaner head, turn off what you don't use, maintenance mode, WooCommerce, EU VAT note, Greek shop pack.

OhmTang SD (Simple Download) for WooCommerce

Down in the last 7 days:1,497#71,695

by Ohm·Tang6 months ago

Free download buttons for WooCommerce stores with security features. Rate limiting & IP filtering. Perfect for free resources, not paid downloads.

Email Trap

Down in the last 7 days:15,783#71,711

by soliddigital5 years ago

An email trap that sends emails to one address of your choice (the WP Admin Email by default).

Vexalyn Deadwood

Down in the last 7 days:20,103#71,717

by Kantari Samy11 days ago

Finds installed plugins and themes that are closed, removed, abandoned or untested on WordPress.org, and alerts administrators.

Voho bot manager

Up in the last 7 days:1,423#71,757

by voho86 months ago

Stop OpenClaw-class AI crawlers and allied headless automation: enforce HTTP 403 and keep an auditable interception log in WordPress.

Lock PHP Files

Up in the last 7 days:1,608#71,783

by rokundev1 year ago

Completely disables PHP file editing through WordPress admin.

Papy3D Security Guard

Down in the last 7 days:15,445#71,835

by papy3d2 months ago

A modular, self-hosted WordPress security suite with no external CAPTCHA or TOTP service.

Trailmark Activity Log

Down in the last 7 days:3,426#71,850

by AlpiMobil1 month ago

Who did what, and when? A fast, privacy-friendly audit log for WordPress. 100% free, in English and Turkish.

PlugSeal

#71,854

by Marc Armengou12 days ago

Control what each active plugin is allowed to do. Allow or deny specific permissions per plugin, with immediate effect.

ScanDeath

#71,870

by burncycle1 month ago

Local WordPress protection with IP blocking, security logs, local rules, and optional ScanDeath Cloud synchronization.

Nexora Engine

Up in the last 7 days:1,613#71,887

by Auralogics Labs1 month ago

Enterprise WordPress Infrastructure Platform. Static delivery, Ghost Protocol fingerprint cloaking, and intelligent automation in one plugin.

Agentic Daisy AI Agent Firewall for WooCommerce

Down in the last 7 days:1,300#71,888

by agenticdaisy12 days ago

Store-aware rules for AI agents: hold refunds over an amount, catch large price changes, and stop money before it moves.

FBS Activity Tracker

#71,898

by Fazle Bari4 months ago

A modern, granular user activity and audit log WordPress plugin with a custom-designed dashboard interface for comprehensive site monitoring.