Best security plugins for WordPress

Korisec Security

Down in the last 7 days:18,927#72,694

by korisec18 days ago

Cloud vulnerability checks, login protection, and free encrypted backups to your own Google Drive with one-click rollback.

Imedes AI Bot Verify

#72,700

by imedes2 months ago

Verify supported AI bot identities, allow legitimate agents, and block spoofed claims.

SSL Expiration Notifier

Down in the last 7 days:5,538#72,714

by emree2 years ago

Sends an email notification if the SSL certificate expiration is within set days range.

CoreSeal

Down in the last 7 days:7,900#72,731

by applidata561 day ago

Checks WordPress core files against official checksums, scans themes and plugins for malware, and repairs or quarantines suspicious files.

CAS Antivirus

Down in the last 7 days:23,509#72,750

by soysupercas1 month ago

Free WordPress security plugin with malware scanner, HTTP Security Headers, WordPress core restoration and TOTP Two-Factor Authentication.

Surbma

Down in the last 7 days:9,308#72,786

by Surbma3 years ago

A GDPR Multisite plugin, that adds special privileges to a subsite Administrator for Privacy settings.

Walkiria Maintenance

Down in the last 7 days:6,316#72,810

by Víctor Alonso1 month ago

Security & Maintenance Suite for WordPress: uptime monitoring, file integrity scanning and custom login URL protection.

Luckduo Login Guard

Down in the last 7 days:7,374#72,811

by sophia06067 months ago

Short Description: Protect your WordPress login from brute-force attacks with IP lock and login attempt limits.

Witen Blocker

Down in the last 7 days:16,448#72,874

by witenlabs3 days ago

Security firewall for WordPress: block attackers and bad bots, limit login attempts, add 2FA, scan for malware, and choose which AI crawlers get in.

Digipacket Site Audit

Down in the last 7 days:9,395#72,894

by Digipacket7 days ago

Check your site's security, speed, SEO and maintenance with 56 checks, a score out of 100, and plain-language explanations.

Honk Me

Down in the last 7 days:5,949#72,931

by Honk! Honk!1 month ago

Get orders, failed payments, form entries, suspicious sign-ins and site errors in Honk, on your iPhone, Apple Watch and the web.

Triage Agent Connector

#72,937

by mikeywazowski1 month ago

Sends WordPress inventory to WP Triage for risk scoring, vulnerability matching, and prioritized fix recommendations.

Beryl Admin Gate

#72,957

by berylstudio1 month ago

Authenticated proxy access for WordPress administration, local security checks and optional XML-RPC authentication control.

ZetaRank StoreGuard for WooCommerce

#72,991

by zetarank1 month ago

Lightweight WooCommerce account security with math CAPTCHA, honeypots, bot checks, and brute-force protection.

zmadmin

Down in the last 7 days:791#73,001

by zmaxteam10 months ago

Enhance WordPress backend security with access key protection. Protect your admin dashboard with custom URL parameters to prevent unauthorized access.

Country Access Control by CodeCaste

Down in the last 7 days:898#73,059

by CodeCaste1 month ago

Restrict front-end access by visitor country using a local IP database. No external APIs are used at runtime.

Fake Admin

#73,109

by pigeonposse8 months ago

Prevent your administrator user from being exposed to the public with just a few clicks.

InkDNA

Down in the last 7 days:14,176#73,156

by Ashar Chougle5 months ago

Per-buyer fingerprints for downloads (PDF/images). DRM-free and screenshot-resilient. WooCommerce compatible.

ToR Studio Agent Readiness Scanner

Down in the last 7 days:12,592#73,191

by tef13 days ago

Free 80-check site audit in wp-admin: AI readiness, SEO, security, speed, and a full build fingerprint. No key needed.

gobookmart login protector

Down in the last 7 days:9,945#73,207

by Gobookmart11 months ago

A lightweight plugin to safely change your WordPress login URL and block access to wp-login.php.

SiteDoc

#73,220

by aizazawan3 months ago

Detect, diagnose, and fix site problems before they cost you traffic or revenue. Scans for plugin conflicts, performance bottlenecks, security risks, …

Simple Password Policy

Down in the last 7 days:16,711#73,225

by iworks (Marcin Pietrzak)3 months ago

Secure Your Site with Strong Passwords

Khushal Login Path Guard

Down in the last 7 days:9,947#73,231

by Khushal Tank5 months ago

Change your WordPress login URL and protect your site from brute-force attacks. Blocks default login paths with 404 errors.

Mool Role Restrictor

Down in the last 7 days:219#73,265

by mool9 months ago

Restrict WordPress admin access per role using one clean settings page.

Nubocoder Agency Manager Client

Down in the last 7 days:11,877#73,266

by César Siancas20 days ago

Lets your agency's hub remotely manage its team's user accounts on this site, through signed requests and permissions you control.

Samohyb GoodAccess

Down in the last 7 days:8,663#73,286

by Minor5 years ago

This plugin hides your WordPress administration side of the public internet but makes it accessible from any location with GoodAccess App.

Your Web Shield

#73,291

by peterswe1 year ago

Your Web Shield blocks high-risk IPs and limits request rates, providing enhanced security for your site.

Sectorize

Down in the last 7 days:10,321#73,343

by Marg1 month ago

Transform author archives into elegant sector-based content organization with automatic SEO optimization. ---

Ulasaslan Site Scanner

Down in the last 7 days:11,584#73,376

by ulasaslan4 months ago

AI-powered health auditor. Scans performance, SEO, images, security, and WooCommerce — explains every issue and tracks your score over time.

Fake Order Blocker for WooCommerce

Down in the last 7 days:10,315#73,410

by gabrielh211 year ago

Helps prevent fake/spam WooCommerce orders using a decoy product approach plus basic product/cart protections. Simple admin screen under WooCommerce.

AUREVYX

Down in the last 7 days:2,865#73,429

by sobhitjadoun1 month ago

Enterprise-grade WordPress website engineering cockpit, architectural health index, site discovery, performance benchmarks, and security intelligence.

VaaniLog

#73,432

by Ashwin Kumar Dave2 months ago

Monitor important WordPress changes in a clear, human-readable admin timeline.

SRI Shield

#73,437

by SPINX Digital5 days ago

Add Subresource Integrity hashes to enqueued scripts and styles, approve changed files before they are trusted, and scan pages for missing SRI.

3task Doorman

#73,553

by 3task14 days ago

REST API and MCP access control: disable REST API routes for guests, limit AI agents and application passwords, see which plugin opened each door.

WingPilot

Down in the last 7 days:22,084#73,603

by ilyag15 days ago

Your WordPress site, now with an AI team behind it. Build, improve and manage it through conversation, with every change previewed and approved.

Guardlo Security & Malware Scanner with Trust Badge

Down in the last 7 days:9,459#73,632

by dansebastian7 months ago

Secure your WordPress site with a core malware scanner, verify server infrastructure, and display a verified trust badge to boost visitor confidence.

Greyfu Login Captcha

Down in the last 7 days:3,561#73,636

by greyfu11 months ago

A lightweight captcha that protects your WordPress login page from automated bot attacks using a simple math challenge.

Georgica Compliance & Accessibility Check

#73,642

by rogeorgica14 days ago

Check your site for common GDPR/cookie, accessibility (EAA / WCAG basics) and security issues. Plain-language fixes. Runs locally, no tracking.

Novelience Password Change Alerts

#73,670

by novelience6 days ago

Alerts users to password updates made through WordPress core APIs, including profile updates, resets, and direct setters.

Custonis

Down in the last 7 days:946#73,685

by custonis5 months ago

Detect publicly exposed backup files, debug logs and sensitive data on your WordPress site.

CCC Site Guard

Down in the last 7 days:7,501#73,750

by Caronima Inc.10 months ago

Daily Update Report Notifications and Security Measures.

Elevoire Website Audit

Down in the last 7 days:17,971#73,773

by Elevoire3 months ago

Meet your site's new best friend. A lightweight, read-only audit that inspects your WordPress core, performance, security, SEO, and accessibility …

Espresso Diagnostics

Down in the last 7 days:17,355#73,774

by jack6 years ago

Plugin that extracts data on WP installation, installed themes, installed plugins and server info for diagnostic purposes. Export data in csv and json

Webtechee External Links Security

#73,778

by WebTechee10 months ago

Automatically adds secure attributes to external links in post content.

Unmask

Down in the last 7 days:17,356#73,837

by Eric Mann8 years ago

Expose support for WordPress

Gatalyn Login Approval

Down in the last 7 days:10,244#73,840

by sergiopw3 months ago

Adds email and/or Telegram-based login approval before or after credential entry.

Ovanap Admin Toolkit

#73,841

by Ovanap5 days ago

Replace a stack of single-purpose tweak plugins with one toolkit: cleanup, hardening, performance and admin tidying, each behind a simple toggle.

Scotty

Down in the last 7 days:22,199#73,842

by gfazioli1 month ago

Your WordPress engineer for superior site maintenance, optimization, and control.

Governance Guardrails

#73,860

by Malcolm Peralty4 months ago

Governance Guardrails provides file-based rules for managing admin behavior, capabilities, uploads, and operational hardening from code.

Break-Glass Access

#73,876

by KVWB2 months ago

Break-glass emergency backup: a chosen user can make a full backup when the web administrator is unreachable — without becoming an administrator.