WordPress Security Plugins

FIDO-certified strong authentication in 5 clicks. Go passwordless and eliminate account takeovers and fraud.

JPEGcrypto safeguards JPEG images on your web site from 'copyright violation'. This plugin is discontinued.

Token2 Hardware Tokens for your WordPress blog.

BotFirewall is a powerful and modern plugin designed to protect your WordPress site from malicious bots, spam, and DDoS attacks.

Lockr is the first API & Encryption key management service for WordPress, providing an affordable solution to secure secrets used by plugins.

This plugin clears all other logged in sessions and allow only one login by one user

Securely upload SVG files in WordPress with built-in sanitization and admin settings.

Replace 50+ single-purpose plugins with one modular toolkit. Admin tools, security hardening, performance optimization, duplicate post, code snippets …

SeaSP Community Edition is an automated Content Security Policy Manager. SeaSP allows you to create, configure, manage, and deploy a Content Security …

Whitelist User IP addresses. If a user logs in from an unknown IP the plugin sends an email to the user and optionally the admin with a one-time key.

Have you ever had that situation where you have a bunch of plugins installed and you can't remember why half of them are there?

Connecting WordPress with Cloudflare firewall, protect your WordPress site at DNS level. Automatically create firewall rules to block dangerous IPs.

This plugin will delete readme.html and license.txt from WordPress and increase security level of website.

Adds OTP (One-Time Password) verification after login for enhanced security in WordPress. OTP is sent to the user's email.

Frumentarii is a fast and smart malware scanner. Can detect Web Malwares. With smart code highlighting you can identify the infection.

Invisible, intelligent protection for WordPress. GhostGate hides your login page, blocks bots, and turns your site into a ghost fortress.

Reports if your WordPress site has any known vulnerabilities.

Plugins synthesize the functions useful needed on a website to help you optimize your website and support you manager, security defence, seo website b …

Enforces a Strict Content Security Policy on the frontend and login screen to help mitigate any XSS vulnerabilities.

This plugin enables Globaliser Cloud's services for Globaliser clients' WordPress sites.

Automatically update Wordfence's list of proxy IP addresses with Cloudfront IP addresses

Disable Comments, Gutenberg, Emojis, and other features you don't need in WordPress

If active, this plugin removes the WordPress version from your website header.

A simple plugin to add API key-based authentication to the WordPress REST API. Manage multiple API keys and secure your REST API endpoints.

Monitor installed plugins for security notices, outdated releases, and WPScan disclosures without leaking your site's plugin inventory.

The plugin contains the leaks test package:

This plugin will disable the functionalities of add new plugins and file editing in your WordPress admin panel. It will also give security to file bei …

Content protection plugin that disables right-click, prevents copying, and blocks image dragging with customizable settings and notifications.

Protect your website against Brute Force Attacks and other malicious requests that have potential to jeopardise the website’s safety or hijacking your …

Free, lightweight WordPress plugin that blocks bots by country and prevents abuse via repeated 404 errors. Perfect for small organizations.

Connect your site to Webfiable (webfiable.com) to track config health and get security recommendations. Public early access (white march). Free.

Enable passwordless authentication for WordPress using WebAuthn/Passkeys. More secure, more convenient.

This plugin enables HSTS header on WordPress

This plugin will help you to upload svg format image in WordPress media library regardless of the theme. That is, it works with every theme.

Easy to use text to image shortcode