Best WordPress security plugins for WordPress

MalCare WordPress Security Plugin

#288

by malcare9 days ago

Get Bulletproof Security for your WordPress site. WordPress security plugin packed with comprehensive Firewall, malware scanner, cleaner & more.

Quttera ThreatSign

Down in the last 7 days:8#2,042

by quttera3 days ago

WordPress multi-level security scanner detecting malware, 0-day threats, brute-force attacks, bot attacks, and unauthorized admin changes.

SP Move Login

Down in the last 7 days:3#2,886

by SecuPress11 months ago

Move your WordPress login page to protect it from bots. This plugin contains the Move Login module from SecuPress. Other security modules are availabl …

Protected Posts Logout Button

Down in the last 7 days:3#5,373

by Nate Reist3 years ago

Automatically adds a logout button to your password protected content.

HTTP Security Header

#5,422

by MOHIT GOYAL10 months ago

Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.

SiteLock Security

Up in the last 7 days:12#5,692

by SiteLock4 months ago

Free, lightweight WordPress security. Harden your site with login protection & 2FA, see Site Health clearly and run on-demand checks—setup in minutes.

NETSENSAI Shield

Up in the last 7 days:9#6,037

by Rafal Gierlicki2 months ago

Hardens and protects your site by locking down login, REST API, XML‑RPC, file editor, and applying HTTP security headers.

Simple Disable XML-RPC

Up in the last 7 days:108#6,090

by Delower Hossain11 days ago

Safely disable XML-RPC, block attacks with HTTP 403, stop pingback DDoS, and protect your WordPress site with a single click.

Injection Guard

Down in the last 7 days:4#6,329

by Fahad Mahmood8 days ago

Blocks malicious and unknown query-string requests, detects injection attempts, and audits user capabilities and sessions.

WebDefender Security

#6,544

by CobWeb Security Ltd.9 months ago

PRO Security – Antivirus Scanner, 2-Layer Protection Hide Security, Brute Force Security & Antispam, Security Website and Security Hardening.

Easy Basic Authentication

Up in the last 7 days:27#7,501

by Matteo Enna1 month ago

Secure your WordPress site with easy and effective basic authentication. Restrict access, monitor attempts, and enhance security.

Site Lockdown Security

Up in the last 7 days:115#7,547

by WP Fix It - WordPress Experts3 months ago

Audit, protect, monitor, firewall, and secure WordPress with premium tools at no cost.

SX User Name Security

Down in the last 7 days:76#7,675

by Daniel Roch1 year ago

SX User Name Security prevents WordPress from showing your real Login everywhere. It ovverides the body_class function, User Nicename, Nickname and Di …

Teydea Password Reset

Down in the last 7 days:52#8,970

by Teydea Studio9 days ago

Easily enforce password reset for WordPress users. Choose to force password changes site-wide, by user and/or by role, to boost your site's security.

WP safely disable directory browsing

Down in the last 7 days:38#11,329

by Maurisource14 years ago

This essential .htaccess rules plugin allow you to improve security of your wordpress blog.

wsecure lite

Down in the last 7 days:37#11,855

by Joomla Service Provider1 month ago

wSecure hides admin URL so that default URL will no longer bring up the admin page. if who enter the secret key will be able to access admin area.

Polar Mass Advanced IP Blocker

#15,390

by polarmass1 year ago

Automatically block threats at the network level by forwarding Wordfence-detected IPs to Cloudflare.

WPHH SECURE

Up in the last 7 days:85#15,939

by WPHackedHelp4 months ago

Secure your WordPress site with one-click file locking, login path hiding, role-based access, and smart dashboard visibility.

Beagle Security

Down in the last 7 days:49#15,961

by beaglesecurity2 years ago

SECURE YOUR WEBSITE FROM THE LATEST VULNERABILITIES WITH THE EASY TO USE WEBSITE PENETRATION TESTING TOOL

Virus Finder

Down in the last 7 days:168#16,856

by wphospital.hu7 months ago

Find viruses in your WordPress easily. Virus scan, malware finder.

Security and Vulnerability Shield

Down in the last 7 days:47#18,586

by SiteCops11 years ago

This plugin will scan your plugins (and WordPress) version for more then 3000+ known vulnerabilities and exploits.

Watchdog Security Lite

Up in the last 7 days:342#19,447

by Lumiverse Dynamic8 days ago

Smart WordPress security with hardening, malware scanning, login defense, Live Watch, persistence monitoring, WooCommerce protection and recovery.

Proactive Security Suite

#20,836

by ITCS1 year ago

Welcome to the ProActive Security Suite Plugin Wiki Enhance your WordPress website's security with the ProActive Security Suite.

WP Sanitize

Up in the last 7 days:294#22,284

by VibeThemes15 years ago

Keep your WordPress Optimized and Secure 24x7

Site Lockdown Security for MainWP

Down in the last 7 days:241#23,040

by WP Fix It - WordPress Experts4 months ago

Manage Site Lockdown Security across your MainWP child sites with fast lock-status visibility, bulk sync tools, and one-click lock actions.

WP Super Secure and Fast htaccess

Down in the last 7 days:6#23,288

by Andrea Pernici16 years ago

This essential .htaccess rules plugin allow you to improve security and speed of your wordpress blog.

BrandBees Malware Guardian

Down in the last 7 days:141#26,073

by BrandBees6 months ago

Scans WordPress files and database for malware indicators with practical cleanup workflows and backups.

CRA Vuln Notify

Down in the last 7 days:140#26,355

by macroncode2 months ago

Monitors plugin/theme vulnerabilities and manages Cyber Resilience Act (CRA) notification deadlines, with a dashboard and ready-to-use drafts.

WPTrigone Security

Up in the last 7 days:386#30,067

by Olivier / WP Trigone6 days ago

Professional security plugin focused on hardening, and essential security best practices for business websites and WooCommerce stores.

Abdal Security Headers

#31,430

by Ebrahim Shafiei (EbraSha)2 months ago

Enhance WordPress security with HTTP security headers and a Smart CSP Assistant that discovers real site resources for review.

TD Admin Lock & Load

Down in the last 7 days:323#31,647

by transcendev12 years ago

admin lock, admin locking, wordpress admin security, brute force Requires at least: 3.0 Tested up to: 3.8.1 Stable tag: 1.0.

File Inspection

#37,814

by hccoder14 years ago

The plugin creates MD5 hash from every file in your blog.

Bravo WP security Plugin

Down in the last 7 days:1,808#37,914

by Technoyer9 years ago

Bravo WP Security Plugin, Is a plugin helps you to hide wordpress side by side Bravo wordpress firewall, wordpress antivirus (wordpress malware scanne …

ZacSecurity

#38,896

by Saurabh Gusain1 year ago

zacsecurity is a lightweight plugin designed to help protect your WordPress website's content by disabling right-click functionality and blocking …

WP Security By Made I.T.

#38,946

by Made I.T.6 years ago

Secure your WordPress Website.

Guardify Firewall

Down in the last 7 days:2,704#39,176

by BitCleric1 year ago

Guardify is a powerful WordPress firewall plugin designed to protect your website from a wide range of threats, including brute force attacks, SQL inj …

Security Shield by XD

Up in the last 7 days:22,575#50,228

by 希扎尔 (Xī zhā ěr)1 year ago

Security Shield by XD is a security plugin that prevents unauthorized users from installing add-ons, injecting scripts, and modifying core files.

NDT Redirect

#50,422

by Tony Nguyen1 year ago

NDT Redirect helps manage external links by adding a no-referrer redirect page, enhancing security and user experience.

CRAGuard Compliance Portal for the EU Cyber Resilience Act

Up in the last 7 days:5,991#51,822

by ikhlaq0015 months ago

Automate EU Cyber Resilience Act compliance. Generate SBOMs, deploy a Vulnerability Disclosure Program, and track threats securely.

WebKernelAI Security

Up in the last 7 days:3,268#58,820

by Aamir Sahil20 days ago

A secure WordPress connector to remotely manage, audit, and harden your site from the WebKernelAI dashboard with cryptographic signature verification.

Avenixr

Up in the last 7 days:12,060#60,090

by avenixr4 months ago

Monitor installed plugins for known vulnerabilities, update gaps, compatibility signals, and security risk indicators.

BridgeHub Security Insight

Down in the last 7 days:505#63,941

by Md Jahid Shah4 months ago

Lightweight, read-only WordPress security audits with risk scoring, security checks, and actionable recommendations.

Secure Signups

#64,397

by daffodilweb2 years ago

Secure Signups helps to filter user registrations based on email domain, enabling a secure and controlled signup process.

Aegis Shield

Down in the last 7 days:18,003#69,067

by Aegis Shield1 year ago

A powerful WordPress security scanner that detects suspicious code, file integrity issues, and offers expert support.

Jeelsh HTTP Headers

#69,174

by jeelshy3 months ago

Configure advanced HTTP security headers for your WordPress site.

Facial Recognition Authentication

Down in the last 7 days:11,682#69,317

by newwaypmsco1 year ago

Facial Recognition Authentication plugin integrates facial recognition with WordPress login for enhanced security and user experience.

CMS Watchman

#71,008

by gits2291 year ago

CMS Watchman provides robust security monitoring for WordPress sites, detecting vulnerabilities and integrating seamlessly with Watchman.

Disable Lost Your Password

Down in the last 7 days:15,354#71,797

by Great Guide Info8 years ago

License URI: http://www.gnu.org/licenses/gpl-2.0.html Disable Wordpress Login Screen "Lost Yoyr Password?" Option Usign Disable Lost Your P …

Scinorx Malware Guard

#72,422

by Scinorx Technologies Inc3 months ago

Scan for common WordPress malware indicators, suspicious file changes, exposed backups, and core file integrity issues.

SecureAuth Authenticator 2FA

#73,182

by Helmi1 year ago

Adds TOTP-based two-factor authentication (2FA) via SecureAuth Authenticator to your WordPress login page.