Best security plugins for WordPress

FormCourier User Enumeration Protection

#73,911

by Den Slav1 month ago

Blocks common WordPress user enumeration methods and optionally hides public author archives.

AiutoComputerHelp Persistence Audit

Down in the last 7 days:19,493#73,922

by aiutocomputerhelp28 days ago

Read-only audit of persistence and reinfection indicators across key WordPress layers.

NHR Secure

Down in the last 7 days:10,386#73,947

by Nazmul Hasan Robin25 days ago

WordPress security that stays out of the way: login protection, two-factor, firewall, hardening, a scanner and an activity log.

Defentry

#73,973

by Md Jahid Bin Sabit14 days ago

WordPress login security: limit login attempts, lock out brute-force IPs, and verify new devices with a stop password, trusted devices & alerts.

Visitor Filters

Down in the last 7 days:21,936#73,978

by visitorfilters3 months ago

Real-time visitor intelligence, threat prevention and analytics for your WordPress site.

ZeroBot Security

Down in the last 7 days:13,695#74,029

by ZeroBot1 month ago

Free brute-force login protection and XML-RPC blocking, plus an optional bot firewall backed by the live ZeroBot threat network.

ShieldSquare

Down in the last 7 days:23,857#74,035

by ShieldSquare8 years ago

ShieldSquare plugin provides users access to Dashboards to follow up on traffic and understand bot activity on their websites.

Chimy’s AI Coding Lab

Down in the last 7 days:3,917#74,046

by chimy27 days ago

一个更顺手的 WordPress 后台：写文章、整理媒体、优化图片，还自带 AI 助手。

Tuning4Web

Down in the last 7 days:16,668#74,050

by Piotr Kunicki26 days ago

Checks your site the way an anonymous visitor sees it, verifies that your WordPress hardening actually works, and lists external scripts it loads.

SyGy Security Log & Anti-Bot

Down in the last 7 days:23,690#74,070

by SyGy26 days ago

Proactive Anti-Bot shield for WP Comments, WooCommerce, CF7, WPForms, Elementor, wpForo, bbPress & BuddyPress with GDPR logging.

AiutoComputerHelp Stored Payload Audit

#74,086

by aiutocomputerhelp1 month ago

Read-only scan of selected WordPress database tables for possible stored XSS indicators, with safe plain-text inspection of flagged values.

A360 Login Avatar Panel

Down in the last 7 days:14,491#74,088

by A36022 days ago

Adds an extra avatar-selection step to the WordPress login screen for selected users.

Shift8 IP Intel

Down in the last 7 days:11,321#74,104

by shift87 years ago

Plugin that establishes an IP Address reputation score from getipintel.net. IP Reputation data is encrypted using OpenSSL and stored in a _SESSION var …

VaultShift

Down in the last 7 days:13,704#74,134

by Saju Gopal5 days ago

Secure WordPress with malware scanning, WAF, login protection, hardening, backups, activity log, and spam defense.

Protos Content Protection Lite

Down in the last 7 days:25,233#74,149

by Protos Software5 months ago

Protect your content from being copied or stolen.

Lsyavuz Audit & Quality Tracker

#74,169

by lsyavuz2 months ago

A lightweight, secure, and modern audit log tool to track post changes, plugin activities, and user logins with a beautiful dashboard.

Merqivio Store Audit

#74,189

by merqivio2 months ago

Run a useful, free and local WooCommerce shop check for technical, security, product-data and compliance signals.

Custom Login URL Manager

#74,191

by WPDesigner2 years ago

Change the default WordPress login URL and redirect unauthorized attempts to a specified page for enhanced security.

Atmosvere (Formerly Trusted Accounts) for WordPress

Down in the last 7 days:9,609#74,195

by Trusted Accounts6 months ago

Protect your pages from bots, scrapers and spam — fully in the background and invisible to visitors. We stop bad visitors before they reach your site.

Kowalski Smart Shield

Down in the last 7 days:12,625#74,243

by kowalskismart14 days ago

Local, rule-based spam protection for WordPress forms, with scoring, monitoring, blocking and event logs. Release candidate.

CoreSpect Site Audit & Report

Down in the last 7 days:1,959#74,273

by ujjwalshres7 days ago

A one-click site health report for your WordPress database, performance, security, and files — exportable as HTML, PDF, JSON, CSV, or TXT.

Yuga AntiMalware

#74,389

by Yuga Web1 month ago

WordPress anti-malware plugin with tabbed admin panel, multi-mode scanning, quarantine, cleanup tooling, and post-hack recovery checks.

Login Protect

#74,428

by Morais Junior2 years ago

Monitors and controls failed login attempts

Sargas reCAPTCHA

Down in the last 7 days:2,743#74,487

by Sargas3 years ago

reCAPTCHA for login, signup, comment, WooCommerce, Mailchimp and other forms.