WordPress Security Plugins

Automatically enforces essential HTTP security headers to protect your site from XSS, clickjacking, and protocol downgrade attacks.

Secure your WordPress site with a core malware scanner, verify server infrastructure, and display a verified trust badge to boost visitor confidence.

WordPress Assistant plugin is a plugin to increase speed and security

A simple and secure Two-Factor Authentication plugin that sends a verification code to your email.

This plugin hides your WordPress administration side of the public internet but makes it accessible from any location with GoodAccess App.

Tests performance metrics (security and performance) on- a periodic schedule

Advanced, lightweight, GDPR-compliant anti-spam protection for WordPress comments. No setup required.

One place for site security and site performance. Secure and optimize your site to perform better. WM Secure and Optimize

Protect your store from Magecart-style web skimming attacks. CartShark tracks and alerts on malicious JavaScript that could steal customer card data.

Human-verification math quiz for login and forms. No Google reCAPTCHA.

Protect pages and posts with email-delivered verification codes. Secure, passwordless access control with user management and customization.

Security plugin blocking spam bots from harvesting email addresses, phone numbers & addresses. Dual-layer anti-spam protection with auto-detection.

Monitors and controls failed login attempts

Audit and monitor key WordPress activities across users, content, login activity, and system events in one admin log.

Advanced spam protection for Contact Form 7, Gravity Forms, Forminator, Ninja Forms, WPForms, Fluent Forms and custom forms.

Helps prevent fake/spam WooCommerce orders using a decoy product approach plus basic product/cart protections. Simple admin screen under WooCommerce.

Authica™ gives your WordPress site a fully branded and secure login experience.

Rename WordPress media uploads on the fly with customizable naming patterns. Secure and lightweight.

WP Smart Analytics provides insights into visitor analytics provides security to your WordPress installation. This mobile friendly plugin uses only en …

Notify the main admin when any user logs in to the dashboard. Track logins, and securely manage users with logout/delete options.

Trust WP is a very light plugin that lets you easily and safely change wp-login.php to anything you want. It doesn’t literally rename or change files …

Firewall protection for comments. Blocks spam before it reaches your database with automatic link filtering and zero manual moderation.

Change your WordPress login URL and protect your site from brute-force attacks. Blocks default login paths with 404 errors.

Securing site by disable XML-RPC by removing some methods.

Create a private login URL and hide /wp-login.php with stealth 404s. Logged-out /wp-admin/ visits redirect to your homepage.

WordPress security plugin detects new devices, blocks them with a password, triggers siren alerts, and lets master admin control user access.

Backup your code and analyze security vulnerabilities, third-party component usage, licensing issues, code quality and more with The Code Registry.

A simple plugin to disable text selection and prevent image dragging on your WordPress site.

Track unauthorized access to your WP website.

A passwordless solution that allows users and admins to log into a WordPress website using passkeys with Beyond Identity.

Encrypted Post Type provides a custom post type where the content of each post is encrypted.

Permite login seguro sem senha com tecnologia passwordless e autenticação de dois fatores (2FA) via TOTP.

Lightweight protection to and cleaning of your Wordpress website.

Restrict WordPress admin access per role using one clean settings page.

The WPS Protect: Login URL & Security Headers plugin enhances your WordPress site security with multiple layers of protection.