Best security plugins for WordPress

NIX Anti-Spam Light

Up in the last 7 days:67#17,882

by NIX Solutions Ltd12 years ago

Easy-to-use tool to get rid of spam attacking your website AntiSpamLight is developed to help you to forget about annoying spam bots! No more spam and …

Deep Malware Cleaner

Up in the last 7 days:98#17,959

by wordpressdirect2 months ago

Lightweight deep malware scanner for WordPress — deep scan, core integrity check, backdoor fixer, redirect hack fix, and login protection.

Page Protection

Up in the last 7 days:120#17,981

by mortenf17 years ago

Protect pages and their subpages with user name/password, and keep protected pages from showing up in menus, search results and page lists.

Admin Country Allowlist

Down in the last 7 days:3#18,013

by Ric2 months ago

By far the simplest country allowlist plugin available. Locks admin panel and XMLRPC access to a given list of allowed countries.

Semisecure Login Reimagined

Up in the last 7 days:23#18,047

by laceous15 years ago

"Re-imagined" version of Semisecure Login that uses public and secret-key encryption to encrypt passwords when logging in.

Fuerte-WP

Down in the last 7 days:1,041#18,051

by Esteban4 days ago

WordPress security and maintenance plugin: schedule auto-updates, block malicious updates during supply chain attacks, enforce two-factor authenticati …

Simple Security

Down in the last 7 days:156#18,053

by ChrisHurst11 years ago

Access Log to track Logins and Failed Login Attempts

Freeze

Down in the last 7 days:39#18,054

by Jose Mortellaro1 month ago

It freezes your installation and tries to protect your abandoned website.

Jeepers Peepers

Up in the last 7 days:258#18,104

by Blobfolio1 month ago

An extensible tool for recording WordPress events to a system log.

ShieldUp

Down in the last 7 days:206#18,123

by shieldup2 years ago

ShieldUp helps you to tackle bad bots, scrapers, hackers, enhancing website security and optimizing performance for a seamless user experience.

Cloud Maestro

Up in the last 7 days:491#18,192

by 5 Star Plugins (Rob)26 days ago

Bulk deploy powerful WAF security rules to multiple Cloudflare domains with one click. Protect your sites from bots, malicious traffic, and threats.

OPI Security Boost

Up in the last 7 days:107#18,212

by Marcin Pietrzak (OPI)3 months ago

OPI Security Boost plugin adds basic hardness to your site.

DMN (Security Centre)

Down in the last 7 days:82#18,226

by DMN Creative2 years ago

The DMN (Security Centre) plugin keeps your word fences whitelist IP addresses updated with DMN services on your WordPress site.

Source Code Protection

Down in the last 7 days:121#18,278

by ViitorCloud Technologies Pvt Ltd2 years ago

Source Code Protection is a simple and effective plugin that uses to prevent common techniques in protecting your code from being stolen.

Weglob Auto Repair for Wordfence Security

Down in the last 7 days:16#18,287

by Weglob20 days ago

Automatically repairs or deletes files flagged by Wordfence Security on a configurable schedule.

Secure Login URL Hide

Up in the last 7 days:218#18,338

by wpwellconcept1 year ago

Easily and safely change the WordPress login URL to anything you want. Makes wp-admin and wp-login.php inaccessible for enhanced security.

Login Delay Shield

Up in the last 7 days:199#18,345

by michael.damoiseau1 month ago

Login Delay Shield slows down brute-force attacks by adding a configurable delay to failed login attempts while keeping successful logins instant.

SSL Quality Checker

Down in the last 7 days:321#18,463

by Createful9 years ago

Ensure your SSL certificate is valid and your server is configured for best security practices.

alx ip statistic

Down in the last 7 days:61#18,483

by alxinthome7 months ago

Receiving ip addresses and browser identifiers of visitors on the login page and on any page of the site.

Private Captcha

Up in the last 7 days:559#18,560

by Taras Kushnir1 month ago

Private Captcha protects your WordPress website from spam and abuse with a privacy-first, independent CAPTCHA solution made in EU.

Remove WP Generator Meta Tag

Down in the last 7 days:10#18,636

by ruudkok4 years ago

This plugin will remove the generator meta tag from the head of your page.

Securicheck

Down in the last 7 days:54#18,646

by Mickael Hauwy2 days ago

Auditez et sécurisez votre WordPress en 1 clic : 50+ vérifications, protection brute force, masquage login, blocage IP automatique.

Who Delete My Posts

Down in the last 7 days:161#18,751

by aixeiger3 years ago

Record who, when and what post or page is deleted in your wordpress site.

Why So Slow?

Down in the last 7 days:1,011#18,776

by bettersecurity2 years ago

Improve the loading speed of your website by removing bloat and unused features (formerly named Better Speed)

Diamond Sierra Site Defense

Up in the last 7 days:52,217#18,788

by teoleonard1 day ago

Daily malware scan, firewall, login protection and two-factor login. Checks files against WordPress.org and catches ClickFix fake-CAPTCHA injections.

User Access Blocker

#18,871

by Eliyahna1 month ago

Block user access without deleting accounts. Prevent specific users from logging in while preserving their data and content.

Frontend Dashboard Captcha

Up in the last 7 days:63#18,878

by M A Vinoth Kumar12 days ago

Protect login and registration forms from spam bots using Google reCAPTCHA, Cloudflare Turnstile, and Math Captcha.

SecurynAI

Up in the last 7 days:9,366#18,994

by WisdmLabs3 days ago

Firewall, malware scanning, and vulnerability alerts — with every finding explained in plain English and the exact fix to apply.

ETBS Account Guard

Up in the last 7 days:287#19,015

by ETBS (DAI)1 day ago

Protects the accounts that manage your site. Hides the login names of your users from visitors who are not logged in.

WP-Sentinel

Up in the last 7 days:58#19,028

by evilsocket14 years ago

A wordpress security system plugin which will check every HTTP request against a given set of rules to filter out malicious requests.

R2K Security Captcha (for reCAPTCHA Enterprise & Cloudflare Turnstile)

Down in the last 7 days:172#19,031

by systemsrtk2 months ago

Protect your WordPress website from spam and abuse with R2K Security Captcha. This plugin offers powerful security by integrating with two of the most …

ZenPress

Up in the last 7 days:153#19,057

by Quentin Le Duff (--Q--)1 month ago

Clean up unused WordPress features, close security gaps, and configure cache integrations from a single settings page.

Dessky Security

Down in the last 7 days:91#19,108

by dessky13 days ago

Dessky Security is the ultralight plugin for basic Security Hardening. It is specially designed not to drain any resources from your website.

k-OutDated Checker (k-OC)

Down in the last 7 days:88#19,124

by kanenas9 months ago

Scans automatically, twice a day, all your installed plugins against the WordPress Plugin Directory for outdated plugins and email alert for update.

AdminEase

Up in the last 7 days:303#19,193

by PrecisionWP5 days ago

Fix a slow WordPress admin, harden security, and control 60+ settings from one dashboard - no code required.

CenterShield

#19,286

by WPセンター12 days ago

WordPress security for Japanese sites: login protection, 2FA, file protection and malware scanning, each explained in clear Japanese.

Smart Copy Protect

Down in the last 7 days:54#19,308

by Sumon Hasan7 years ago

Simple and Amazing wordpress copy protect plugin. This plugin will be able to block the mouse right button, Ctrl + C key, Ctrl + U key , and F12 key.

VA Simple Basic Auth

Down in the last 7 days:35#19,309

by kuck1u10 years ago

Simply by enabling the plugin can set up a basic auth to dashboard and login page.

Watchdog Security Lite

Up in the last 7 days:517#19,385

by Lumiverse Dynamic9 days ago

Smart WordPress security with hardening, malware scanning, login defense, Live Watch, persistence monitoring, WooCommerce protection and recovery.

GranTech IP Firewall for AbuseIPDB

Up in the last 7 days:423#19,394

by Marc Gran10 days ago

Protect your WordPress site by detecting, blocking and reporting malicious IPs using the AbuseIPDB API. Includes brute-force protection.

Authentication and xmlrpc log writer

Up in the last 7 days:94#19,438

by Federico Rota10 years ago

Log of failed access, pingbacks, user enumeration, disable xmlrpc authenticated methods, kill xmlrpc request on authentication error.

wp-security-txt

Down in the last 7 days:24#19,508

by securitytext.org9 years ago

A plugin for serving 'security.txt' in WordPress 4.9+, based on configuration settings.

Admintosh

Down in the last 7 days:76#19,527

by wpmobo9 months ago

login attempts, Firewall, reCAPTCHA, country restriction, Login History, change wp-login.php to anything make sure your site security.

Turbo Rate Limiter

Up in the last 7 days:162#19,548

by ahriad7 months ago

Protect your WordPress site from brute force attacks, API abuse, and DDoS attacks with customizable rate limiting rules.

EssentialHeaders

Up in the last 7 days:742#19,655

by Alex Hedström2 months ago

Adds the essential HTTP security headers WordPress leaves out—on every public site response.

Escape Button

Down in the last 7 days:98#19,751

by ourwave2 years ago

We developed the Our Wave Escape Button (available in the bottom right of our website) to help protect our users in unsafe situations.

EDZNET Security Guard

Down in the last 7 days:75#19,774

by EDZNET1 day ago

Requires 2FA for administrators, blocks new admin creation, refuses URL-credential logins, and emails you on admin logins. Locked to first admin.

Email OTP Login with default login form

Down in the last 7 days:88#19,847

by Lalit Yadav1 year ago

Adds email OTP (One-Time Password) verification after valid login credentials on the default wp-login.php form for added security.

HSArticle Login Math Verification

Up in the last 7 days:448#19,903

by hsarticle1 month ago

Adds a beautiful math CAPTCHA to the WordPress login page. No API keys, no paid services — 100% free.

CodeWP Shield Monitor

Up in the last 7 days:102#19,929

by CodeWP21 days ago

Privacy-first WordPress security hardening, login protection, and local audit logging.