Tag: security

Improve your WP security with powerful one-click tools like backup and malware scan. Get essential free tools including stats, CDN and social sharing.

Firewall, Malware Scanner, Two Factor Auth and Comprehensive Security Features, powered by our 24 hour team. Make security a priority with Wordfence.

Block excessive login attempts and protect your site against brute force attacks. Simple, yet powerful tools to improve site performance.

Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plugin designed especially for WordPress.

The Best WordPress Security Plugin to Secure & Protect WordPress

Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.

A better way to manage dozens of WordPress websites.

The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.

Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website

SiteGround Security is the all-in-one security solution for your WordPress website.

User Role Editor WordPress plugin makes user roles and capabilities changing easy. Edit/add/delete WordPress user roles and capabilities.

Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.

SiteGurad WP Plugin is the plugin specialized for the protection against the attack to the management page and login.

Lets you edit the WordPress admin menu. You can re-order, hide or rename menus, add custom menus and more.

Get Bulletproof Security for your WordPress site. WordPress security plugin packed with comprehensive Firewall, malware scanner, cleaner & more.

The #1 Activity Log plugin helps you monitor & log all changes and activities on your WordPress site, so you can run more securely and organized.

This Anti-Malware scanner searches for Malware, Viruses, and other security threats and vulnerabilities on your server and it helps you fix them.

Hide WP paths, wp-admin, wp-login, wp-content, plugins, themes, authors, XML-RPC, API, etc. Add 7G Firewall Security, Brute Force protection & more.

Anti-spam, Site Security Check & Malware Scanner.

The fastest firewall plugin for WordPress.

Protect login form by limiting the number of login attempts from the same IP and banning IPs.

Adds a Google No Captcha ReCaptcha checkbox to your Wordpress and Woocommerce login, forgot password, and user registration pages.

A true Web Application Firewall to protect and secure WordPress.

WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, activity logs, firewall, 2FA, brute force login security &am …

Free daily malware scanning and WordPress site security. Jetpack Protect leverages the extensive database of WPScan, an Automattic brand, that has ove …

Hide WordPress, wp-content, wp-includes, wp-admin, login URL, plugins, themes etc. Block the default URLs. Security Headers etc.

Creates a 'Coming Soon' page that will show for all users who are not logged in

WP fail2ban uses fail2ban to protect your WordPress site.

Manage multiple WordPress sites from one dashboard.

Robust WordPress security & spam prevention. Leverage our pre-defined allow/block lists. Adjust configurable security settings on hyphens, periods …

Scans your wp-content directory for vulnerable instances of timthumb.php, and optionally upgrades them to a safe version.

WPS Limit login limit connection attempts by IP address

Secure your website with Wordfence Login Security, providing two-factor authentication, login and registration CAPTCHA, and XML-RPC protection.

WordPress Security Protection: Malware scanner, Firewall, Login Security, DB Backup, Anti-Spam...

Hide wp-login.php file and increase security of your website. No files are changed on your website.

HTTP Headers adds CORS & security HTTP headers to your website.

Protect your WordPress with SecuPress, analyze and ensure the safety of your website daily.

Helps secure your site against hacking attacks through detecting User Enumeration

Protection against spam, malicious users & common attacks using an advanced behavior detection engine. Integrates with other 3rd-party plugins.

Blackhole is a WordPress security plugin that detects and traps bad bots in a virtual black hole, where they are denied access to your entire site.

Google Authenticator for your WordPress blog.

(DEPRECATED: Please install "Jetpack VaultPress Backup" instead) Jetpack VaultPress offers real-time backups, one-click restores, and premiu …

Limit rate of login attempts and block IP temporarily. Brute force attack protection. GDPR compliant. Captcha enabled.

Creates unique passwords for applications to authenticate users without revealing their main passwords.

Easy to use tools to help make your website GDPR-compliant. Fully documented, extendable and developer-friendly. Extensions to enterprise GDPR compli …

It blocks spam posts, login attempts and malicious access to the back-end requested from the specific countries, and also prevents zero-day exploit.

Create a Private Site visible only to your registered users.

Lockdown WP Admin conceals the administration and login screen from intruders. It can hide WordPress Admin (/wp-admin/) and and login (/wp-login.

A lightweight, fast and powerful antivirus scanner for WordPress.

WP Protect Admin Plugin has Provide Extra Secutiry Layer to Protect Your WordPress Admin Area. Using this plugin you can safe your site using necessar …

Security, FireWall, Malware auto scan by CleanTalk, online security. Security plugin.

Helps you to know your website's visitors by tracking their login related information like login/logout time, country, browser and many more.

Help secure your WooCommerce site by enforcing stronger passwords and taking additional control of your strength requirements.

wp captcha prove that the visitor is a human being and not a spam robot. captcha plugin is the best security solution that protects your Wordpress web …

Scans your WordPress installation for security vulnerabilities.

WPS Cleaner cleans your WordPress site as well as your database.

1 super security anti-spam captcha plugin for WordPress forms.

Search the files and database of your WordPress install for signs that may indicate that it has fallen victim to malicious hackers.

Enable/Disable XML-RPC for all or based on IP list, also you can control pingback and Unset X-Pingback from HTTP headers.

This plugin will remove the version info appended to enqueued style and script urls along with Meta Generator in the head section and in RSS feeds.

Protect WordPress login, registration, comment and BuddyPress registration forms with Google's No CAPTCHA reCAPTCHA.

Obfuscate email addresses to deter email-harvesting spammers.

Patchstack identifies security vulnerabilities in WordPress plugins, themes, and core.

Salt Shaker enhances WordPress security by changing WordPress security keys and salts manually and automatically.

Scans your WordPress installation for security vulnerabilities.

Tests security issues, malware & warns of dangerous plugins. Detailed report on your site security & how to secure it.

Change your login URL for something like https://example.com/login and stop login brute-force attempts.

Adds a simple 3-digit number captcha on the login form.

reCaptcha for login, signup, comment forms, Ninja Forms and woocommerce.

The WP Hardening is a one-click tool to fix standard security recommendations on your WordPress website.

WPScan WordPress Security Scanner - Scans your system for security vulnerabilities listed in the WPScan Vulnerability Database.

XO Security is a plugin to enhance login related security.

Booter - Bots & Crawlers Manager is a preventative measure (treatment in advance) and treatment of damages caused by crawlers and bots.

Easily change your WordPress DB prefix, save time, increase security.

Restores the ability to manually delete iThemes Security logs from the database.

Why should I use WPFingerprint? WordPress is the most popular open source CMS on the planet. By most estimations a third of the entire web runs WordPr …

Protect WordPress website against brute force attacks. Limit rate of login attempts.

Secure your access to the admin page with this plugin !

Optimize and modify your website's parameters

Peace of mind that your site is secure and running smoothly. Performance monitoring, security checks, and instant alerts if your site goes down.

No. 1 Plugin for malware removal - Ultra-precision, comprehensive, detects viruses, infections & over 50,000+ security threats & vulnerabilities.

Simple Login Lockdown prevents brute force login attacks/attempts on your WordPress installation.

Records various WordPress events to your server's system log for integration with Fail2Ban.

Malware scanner provides Anti malware security, Scans & Detects malware like Trojans, Backdoors, Brute force & OWASP attacks.

This plugin provides the functionality for Reflected XSS and Self-XSS.

Login by Auth0 provides improved username/password login, Passwordless login, Social login and Single Sign On for all your sites.

Lock Down Admin plugin secure your WordPress admin panel. It locks the wp-admin url and if this plugin is activated then user can't login in the …

This plugin hooks in the authenticate filter. By default, the plugin is set to allow all access and you can configure the plugin to allow the login on …

Protects your login, xmlrpc and RSS feeds pages against DDoS attacks. Denies access to your site from certain countries via CloudFlare.

Trust badges to increase sales. Includes McAfee SECURE certification.

Math Captcha is a 100% effective CAPTCHA for WordPress that integrates into login, registration, comments, Contact Form 7 and bbPress.

A simple client that provides SSO or opt-in authentication against a generic OAuth2 Server implementation.

The ultimate solution to stop spam comments in the default commenting system of WordPress

Enable easily HSTS on your website.

Activate automatic updates or weekly notifications for the site.

Create central "Enter your password" page and the password entered determine which page the user sees next.

Deter members from sharing login credentials: restrict simultaneous logins for the same user.

Disable the REST API user endpoints due to obscure user slugs.

Verify TLS 1.2 support on your webserver for included API endpoints and diagnose a solution to enable compatibility.

User Role Setting for ACF

Add a layer of security and prevent your login name from being shown in the author archive's URL.

A trustworthy antispam plugin for Contact Form 7. Simple but effective.

Plugin for configuring Content Security Policy headers for your site. Allows different CSP headers for admin, logged inn frontend and regular visitors

PRO Security – Antivirus Scanner, 2-Layer Protection Hide Security, Brute Force Security & Antispam, Security Website and Security Hardening.

Monitor your website for added, changed and deleted files! Track changes in all website directories and get email alerts! Stay secure for free!

Astra is the complete security suite for your WordPress. Rock solid firewall with immediate malware cleanup & security audit for your WordPress.

This plugin will block all unauthorized and irrelevant requests through query strings by redirecting them to an appropriate error page instead of gene …

This plugin is for logging users' activities. You can check anytime who and what has changed.

Disables password strength enforcement in WooCommerce.

A reimagining of WordPress authentication using modern security practices.

Selectively protect passwords from being reset or modified.

This plugin alerts you if any of your plugins have security vulnerabilities. It does this by utilising the WPScan Vulnerability Database once a day.

Blocks Proxies, VPN's, select Countries, IP's, Ranges & ASN's accessing your site login or commenting on pages & posts using th …

Based on the success of the most popular firewall for Joomla!, RSFirewall! is now available to protect your WordPress website as well.

Block comment spam, malicious logins, and automated registrations by adding the powerful CAPTCHA protection of Securimage-WP to your WordPress site.

Secure Your Word™. SiteLock WordPress Plugin provides complete website security management without leaving WordPress. Users can access their SiteLock …

Adds an extra layer of security to your Wordpress Account. Same as Google 2-step verification.

The iControlWP WordPress Security Manager is the only solution you need to manage all your WordPress websites.

Adds an HTTP header and OWASP's legacy browser frame breaking script to prevent clickjacking.

WebTotem is a SaaS which provides powerful tools for securing and monitoring your website in one place in easy and flexible way.

Monitor traffic and ban unwanted visitors.

This plugin will warn you if you're using or installing a knew as vulnerable extension or removed from official repository, a security must have …

Use Cloudflare's free geolocation service to restrict access to your site's login page.

Control remote publishing with XML-RPC from the writing settings page.

Disable default WordPress registration page, remove register link and stop registration spam, without disabling user registration.

Several types of captcha to protect your site in one easy to use plugin.

Professional flat admin theme for Wordpress Admins. A modern taste to Wordpress. Your backend will look like 2017+.

Configure various security-related HTTP headers, including CSP, XSS, Referrer Policy and more.

Block IPs in your gravity forms

Using the password protection will give you extra security layer of protection from brute force hacking attacks. Additionally, it's also an easy …

Best Security plugin available without compromising the performance of your WordPress Website.

HSTS is HTTP Strict Transport Security, a means to enforce using SSL even if the user accesses the site through HTTP and not HTTPS.

Protect attachment files from direct access using powerful and flexible restrictions. Offer safe download links for any file in your uploads folder.

This Plugin provides functions for an automatic email encryption and protection against spam.

This plugin allows you to configure extra mime-types for support by the inline-uploader.

Prevents users from staying logged into the same account from multiple places.

Replace the WP-version with a random string < WP 2.4/5 and eliminate WP-version > WP 2.4/5, also on Feed and style- and script-urls

REST XML-RPC Data Checker allow to check JSON REST and XML-RPC API requests and grant access permissions.

CSRF-protection for authentication cookies. When enabled, this plugin makes sure the "SameSite" flag is set in authentication cookies.

Security plugin to protect website with firewall and antivirus scanner, brute force security monitor, life system security monitor

Plugin helps you identify security problems with your wordpress installation. It scans your blog and give a security grade based on passed tests.

Sends email notifications if a new version of WordPress available. Notifications about updates for plugins and themes can also be sent.

SX User Name Security prevents WordPress from showing your real Login everywhere. It ovverides the body_class function, User Nicename, Nickname and Di …

Malware scanning & removal, website hardening, patching vulnerabilities, real-time protection against online attacks, blacklist monitoring in a click!

This plugin allows you whitelist IP addresses so Limit Login Attempt plugin doesn't block them.

License: GPLv2 or later Disables new Site Health screen from WP Dashboard

Creates a Soon Online Page (cooning soon) that is visible by all not logged in wordpress users.

WP fail2ban Blocklist is a collaborative preemptive blocklist for WordPress.

Check the WordPress security with information from the WordPress Vulnerability Database API. Scans core, plugins, and theme vulnerabilities.

htaccess protect - Protect your wordpress login or admin pages with password.

This plugin blocks detected attackers or displays them a captcha to check they are not bots.

Sets custom headers for WP notification emails. Also fixes a security issue with WP versions < 5.5.

WordPress Limit Login Attempts Plus plugin for Login Protection by Felix Moira

Enforce a specific password strength. Uses the same strength calculations as the WordPress password strength meter

View and manage all active user sessions in a custom admin screen.

Adds Subresource Integrity (SRI) attributes to your page's elements for better protection against JavaScript DDoS attacks.

A simple, light-weight collection of tools to harden WordPress security and help mitigate common types of attacks.

Combat spam registrations for a BuddyPress-powered site using Google's reCAPTCHA

Creates a 'Coming Soon' page that will show for all users who are not logged in

The easiest way to make your Gravity Forms GDPR-compliant. Fully documented, extendable and developer-friendly.

Security with firewall, malware scanner, login and spam protection, and encrypted backup. WP Security Plugin includes Login Security, Limit login atte …

This plugin protects your Wordpress and Buddypress login, comments, and new user/new blog signup process against spambots with a simple math question.

This plugin completely blocks access to wp-login.php and creates a new secret login URL

Blue Captcha is a powerful and highly customized WordPress plugin that effectively protects your WP blogs from spammers and unwanted persons.

Removes your WordPress version from various places.

Clears all domain cookies on logout. Because leaving a trail of cookies is bad.

Give trusted web professionals admin access to your WordPress account. Revoke anytime.

Easily create a "Coming Soon" page for your WordPress site.

Temporarily fix the SSL Check to prevent "cURL error 60: certificate problem: certificate has expired"

Fine tuning access to your posts.

Add more than 1 password to your protected pages, also administrators and page's authors can view the protected pages without password.

Disable the default WordPress registration page without disabling user registration.

Send SMS'es and enable SMS-based two-factor security.

WordPress 2-Factor Authentication plugin that's high security and low hassle. Say goodbye to remembering usernames, passwords and tokens; say hel …

Autopilot protection for your WordPress against malicious URL requests.

Adds some extra security to your WordPress with only one click.

Enhanced Login Security for Your Wordpress blog.

Enabling this plugin allows you to set up Basic authentication on your admin page using your WordPress user name and password.

Signs and encrypts emails using PGP/GPG keys or X.509 certificates. Provides OpenPGP and S/MIME functions via WordPress plugin API.

Change your admin username to whatever you like. Improve your site security and make life difficult for the hackers.

You may need to reinstall any of your plugins, juste check the plugins' box, select "Update", and that's all!

This Content Security Policy plugin will help the setup the Content-Security-Policy HTTP response header and block the XSS vulnerabilities.

This plugin sends an email to the administrator for each login.

Stop user enumeration for security.

We have got a great solution for you, that will force spammers to leave your website. Introducing one and only Security Force plugin!

ServerBuddy by PluginBuddy.com tests server configuration to look for problems with hosting configuration and determine hosting quality.

A very simple plugin that hides specific pages, posts and menu items from users based on their logged in staus.

This plugin fixes a "Vary: Accept-Encoding Header" message and boosts website performance.

Secure Your Site

WP fail2ban Integration with Contact Form 7 to log spam form submissions.

Logs failed login attempts to your WordPress site and helps you monitor hacking attempts. Includes search, graphs and more.

yaCAPTCHA is a CAPTCHA plugin for WordPress that helps you block comment spam from automated bots.

BruteGuard is a cloud powered brute force login protection that shields your site against botnet attacks.

This plugin inserts in your website the CloudFilt codes for the security tracking available on https://cloudfilt.com/.

Prevent Cross-Site Request Forgery attacks on your comments form.

Disable page editing on selected pages, to protect the pages from accidental or unwanted changes that might break your site.

Fixes insecure content messages that appear when loading images on an SSL secured website.

The WordPress Integrity Checker checks your WordPress installation by detecting modified files, permissions issues and other common problems.

This Plugin allows developers to integrate Latch on his/her WordPress service.

Increase your WordPress security by deleting old core files that exist in the filesystem before hackers exploit them for attacks.

This WordPress plugin randomizes the user_id for the user created on WordPress setup, removing one potential attack factor from the site.

This plugin is designed to insert a piece of code into your WordPress website, which will automatically remove the WordPress version from your header.

Add Google’s simple checkbox reCAPTCHA to WordPress wp-admin login page.

WordPress Data Guard protects your wordpress website from the unauthorized content copying. You can block the desired IP Addresses, right click usage, …

wp bcrypt switches WordPress's password hashes from MD5 to bcrypt, making it harder for them to be brute-forced if they are leaked.

Did you ever feel like your website or blog login page is ridiculously fragile and reachable, and could be easily broken in by an intruder?

Admin SSL secures login page, admin area, posts, pages - whatever you want - using Private SSL.

This plugin will disable file editing tool in your WordPress admin panel.

Protect your wordpress site with spam registration. DM Confirm Email requires new users to confirm their email addresses.

Description: This plugin will require visitors to type in the password each time they are visiting a password protected page.

An addon to Gravity Forms to add an option to force your forms to be loaded SSL only.

Basic Auth for Wordpress.

Easy way to require user login to view specific pages / posts.

Lumturio offers users and agencies powerful and reliable tools to monitor CMS security.

Simple, fast and no-config plugin to protect your email address. No need for shortcodes or blocks. EmailProtect encrypts all your email addresses in y …

With Rename Plugins Folder you can rename the plugins folder. This is an underestimated way to increase the security of your installation.

Control which status tests and what debug information appear in your Site Health screen.

Real-Time Firewall and anti-spam, anti-bot, anti-crawler, anti-flood protection from millions of known spam threats, emails, domains, ips and words by …

Staatic allows you to generate and deploy an optimized static version of your WordPress site.

WebAuthn authentication provider for Two Factor plugin.

メールやSMSを利用した２段階認証や、IP制限等によるアクセス制御を導入するためのプラグインです。

Protect against user enumeration attacks on author pages and other places where valid user names can be obtained.

WP fail2ban integration with Gravity Forms to log spam form submissions.

Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.

Fixes the target="_blank" vulnerability by adding rel="noopener noreferrer" to the 'a' tag.

Post comments quickly without leaving or refreshing the page.

Avoid to be easily the target of the HTTPS BREACH vulnerability.

SECURE YOUR WEBSITE FROM THE LATEST VULNERABILITIES WITH THE EASY TO USE WEBSITE PENETRATION TESTING TOOL

Stop use of a bad passwords, including those in the Have I Been Pwned? breached password database

Verifies MD5 checksums of WordPress core files, sends e-mail to the mail address of your admin user warning in case of threat.

Prevent virtual directory listing services from listing the contents of directories, and/or show a page in place of a directory's listing.

A simple plugin to disable loading of jquery-migrate on the frontend due to a XSS vulerability of jQuery Migrate 1.2.1.

This plugin disables the Pingback functionality in your blog.

Hide WP

Receiving ip addresses and browser identifiers of visitors on the login page and on any page of the site.

简洁的中文验证码插件。在 WordPress 登陆、注册或评论表单中加入验证码，支持字母、数字、中文和算术形式。 Adds Captcha Code anti-spam methods to WordPress forms. Supports numbers, alphabets and Chine …

Powerful Plugin Management Solution for WordPress

This is simple plugin to protect your wp-content/uploads folder from being browse & copy

This plugin generates the proper security HTTP response headers to keep your site secured.

See vulnerabilites and security test results in the MainWP dashboard.

NURCaptcha inserts a reCAPTCHA on the Register Form of your site to protect it against spambots.

Simple and Amazing wordpress copy protect plugin. This plugin will be able to block the mouse right button, Ctrl + C key, Ctrl + U key , and F12 key.

Add SMS support to "Two Factor" feature as a plugin

This plugin allows you to effectively hide your wp-login.php and wp-admin by requiring that you access it via a custom URL.

Unsafe Mimetypes allows a WordPress admin to decide which file formats can be uploaded to the media library

Website Security Check detects if your WordPress website has vulnerabilities and security flaws. You get a full report with the list of security issue …

WP login attempts is a security plugin which can add Google reCAPTCHA to the WordPress login page, and protect the site from brute force attacks.

Understand precisely the robot traffic on your website and take actions to improve performance and security.

Log of failed access, pingbacks, user enumeration, disable xmlrpc authenticated methods, kill xmlrpc request on authentication error.

It helps in preventing Cross Site Scripting (XSS) with just a few lines of code.

The CSRF vulnerability is the most famous web vulnerability, since ... i do not remember, too long !

Improve the security of your website by easily setting HTTP response headers to enable browser protection

Improve the loading speed of your website by removing bloat and unused features (formerly named Better Speed)

A security plugin to block the creation of new administrators

A tiny WordPress plugin to clear all browser data related to the site upon logout (With Clear-Site-Data header).

The ultimate tool for publishing your private thoughts in public

This plugin adds a lot of improvements and enhancements for WordPress and WP Rocket to your installation.

Report failed logins to centralized database and block IPs on firewall level!

Encode emails to avoid spams. Template to use [@encode@ email="[email protected]" display="Gmail Lover"]

Performs a detailed security analysis of your WordPress installation. Provides specific instructions on how to make your site more secure.

Secures your wp site from hackers by hiding username of members from front side.

HTML Purified replaces the default comments filters with the more secure HTML Purifier.

An extensible tool for recording WordPress events to a system log.

Security plugin to protect website with login captcha, hide version number and security monitor

Easy to use tools to help you meet LGPD compliance requirements. Fully documented, extendable and developer-friendly. Free, friendly support! Include …

Secure your Wordpress of WPScan Prevent hackers using WPScan to find vulnerabilities in your site, disable this plugin when you are security testing o …

Easy-to-use tool to get rid of spam attacking your website AntiSpamLight is developed to help you to forget about annoying spam bots! No more spam and …

Protect pages and their subpages with user name/password, and keep protected pages from showing up in menus, search results and page lists.

Use your glance or fingerprint using Touch ID or Face ID for easy and secure access. Improve your authentication security, you do not need a password.

Permissions & Security Audit is a plugin that runs a series of tests to check common security issues with the following areas:

Profiless is a plugin that removes access to the profile page based on user role.

This plugin from WPZA provides your website randomised file names when you upload files into WordPress.

This plugin will remove the generator meta tag from the head of your page.

A s2member add-on that allows you to upload a file to the s2member-files/ secure directory and automatically insert a link into your post.

Secure HTTP headers - Essential, and easy.

More secure wrapper for the WordPress XML-RPC interface.

"Re-imagined" version of Semisecure Login that uses public and secret-key encryption to encrypt passwords when logging in.

Access Log to track Logins and Failed Login Attempts

Ensure your SSL certificate is valid and your server is configured for best security practices.

Sur.ly alters the outbound links on your site so that visitors can view external target pages without leaving your domain.

This plugin enables two factor authentication with Telegram by increasing your website security and sends an alert every time a wrong login occurs.

This plugin helps you setup under construction content for each page so that your user can't see original content until you finish working on it.

Simply by enabling the plugin can set up a basic auth to dashboard and login page.

Find viruses in your WordPress easily. Virus scan, malware finder.

Wordpress Remove Version securely removes the version

Source Code Protection is a simple and effective plugin that uses to prevent common techniques in protecting your code from being stolen.

Prevents forms data against sniffing network traffic through encryption provided by jCryption javascript library.

WP Login Delay is a plugin that adds a one second delay when logging into the system in order to slow down any brute-force attack on your website.

WP Media File Type Manager will allow you to manage different file types in Media Library.

Add membership management and secure authentication by SPIRAL® into your WordPress site.

WP Plugin Security Check checks if your WordPress plugins are 'safe'.

Wordpress Security Plugin - Perform over 23 Basic Security Activities for your blog and get a free malware scan at the same time! See more details at …

A plugin for serving 'security.txt' in WordPress 4.9+, based on configuration settings.

A wordpress security system plugin which will check every HTTP request against a given set of rules to filter out malicious requests.

Several opinionated WordPress tweaks focused in security and performance.

Do It Yourself: Speed up, SEO optimization, and WordPress security. Put the site in order!

The easiest way to improve your website's security, performance, and user experience.

WPuppy is software for automatically updating Wordpress Plugins, Themes and Core.

Limit the maximum number of IPs a user can log in. Also includes a user login log on the plugin settings page.

WordPress Security Plugin to protect you from Hackers. Easily create Custom Login URL, Change Admin User, Custom Hack/Ban Settings, & much more.

This plugin will put blank index.php in every sub-directory of your wp-content/uploads folder to prevent people from browsing the directories and stea …

Scan your WordPress site and receive recommendations on how to improve load time, performance and security.

Stop bots from brute force hacking your wp-login.php

Scans automatically, twice a day, all your installed plugins against the WordPress Plugin Directory for outdated plugins and email alert for update.

Este plugin permite vincular las cuentas de usuario de WordPress con Llavero.io para tener un segundo factor de authenticación (2FA) en el login de lo …

MTCaptcha is an efficient security solution to protect your WordPress website against spam comments and brute-force attacks.

This plugin keeps records of your users hashed passwords in order to prevent them from reusing their current or a previous password

Returns a blank white page if people try to load the wp-config file (or backups of it) in a web browser.

A tool to monitor security issues, performance issues, and Wordpress settings that should be reviewed for potential changes.

Secure WordPress login with Two Factor Auth. Users will have to enter an One Time Password when they log in.

WP Health Check scans your WordPress installation and reports any security issues with your site.

WP Shieldon is a WordPress security plugin based on Shieldon library, a Web Application Firewall (WAF) for PHP.

By this smart plugin you can protect your login page from Brute-force attacks also you can track login history

This plugin allows you to restrict not logged-in users from accessing BuddyPress pages

Dessky Security is the ultralight plugin for basic Security Hardening. It is specially designed not to drain any resources from your website.

Security plugin for WordPress with support for fail2ban. Tested with WordPress 5.5+ and PHP 7.4.

Tools to help with making Formidable Forms GDPR-compliant. Fully documented, extendable and developer-friendly.

FIDO-certified strong authentication in 5 clicks. Go passwordless and eliminate account takeovers and fraud.

Change default login to a custom branded URL you define to prevent spam login, bot registration, and brute-force with protection of Google reCAPTCHA.

Shieldfy is a cloud-based security shield for your website to protect it from web attacks and malwares.

Changes wordpress user slug for security, it prevents access to the usernames of registered users on your site.

Protect your Google Ads budget with TrafficGuard's PPC protection.

All-in-one bundle of essential plugins and functions for all WordPress websites.

This plugin disable Wordpress Theme/Plugin Editor.

Provides settings to activate three HTTP header settings for X-Frame-Options, X-XSS Protection & X-Content-Type-Options.

gap-hub-user-role WordPress plugin makes the role capabilities changing easy. You can change any standard WordPress user role (except administrator).

Blacklist IP addresses that attempt to login with a banned username through Cloudflare.

This plugin gives you the ability to limit WordPress admin logins based on the country the visitor's IP address is located in.

Modify WordPress admin login technique. This plugin will modify your login url so that your website will be more secure.

Removes the meta generator tag, with WordPress version from HTML.

Test if the server is affected by the Shellshock vulnerability.

Wordpress SuperSonic with CloudFlare

Whitelist User IP addresses. If a user logs in from an unknown IP the plugin sends an email to the user and optionally the admin with a one-time key.

License: GPLv2 or later WordPress plugin to add secure headers to your website.