WordPress Security Plugins

Protect your WordPress site from spam and abuse by adding Google reCAPTCHA to login, registration, password reset, and comment forms.

Easily block visitors from selected countries with geo-based restrictions and an admin settings page.

A simple plugin that hardens some common Wordpress vulnerabilities

IP reputation firewall (WAF) for WordPress using AI-powered threat analysis and automatic request verification.

Protect your login page by requiring a secret key and value in the login URL.

A comprehensive WordPress plugin for performance optimization and security enhancement. Features asset optimization, database cleanup, and security.

This plugin implements challenge response authentication. In addition, the WordPress hasher is replaced by native PHP libraries.

Effortless WordPress backups with automatic daily backups, one-click restore, and 7-day retention. Both database AND files backed up!

Protect your WordPress site with 2FA, brute force protection, CAPTCHA, custom login URL, and security hardening.

Simple granular access controls for WordPress sites. Keep content private for members while selectively making pages and categories public.

Track and review important user and admin activity in WordPress.

Univerwp is a plugin, as a framework, that aims to extend WordPress in various area: security, performance and additional features.

Complete WordPress security — Firewall, 2FA, Malware Scanner, Vulnerability Scanner, Login Protection, Security Headers. 100% free.

A free and lightweight two-factor authentication (2FA) plugin for WordPress using TOTP and authenticator apps.

Keep your WordPress site secure by monitoring plugin releases and spotting closed plugins.

Protect any page from logged-out users with a single click. Redirects logged-out visitors to a safe destination.

Security auditor for the WordPress Abilities API. Scans registered abilities for permission, schema, and exposure risks.

Track all hookable actions in the WP-Admin area and log them to PermaLogger's external service for comprehensive activity monitoring.

We are currently enhancing this plugin. Kindly await the upcoming release.

Generate static site.

A lightweight WordPress plugin that protects your site from AI scrapers and bad bots using cryptographic JavaScript challenges.

Securely connect WordPress with JumpCloud for Enterprise SSO via SAML 2.0 and automated user provisioning via SCIM.

A simple and lightweight yet rock-solid plugin that blocks comment spam using multiple automatic detection methods.

A client plugin that provides SSO (Single-Sign-on) or opt-in authentication against Greenhouse Portal Auth0 implementation.

Advanced security module for the DB Solution suite. Adds email-based 2FA, Strict Mode protection, and hides the standard login URL.

A lightweight WordPress security plugin to protect your admin area with a custom login URL, hide debug logs, limit login attempts, and add 2FA.

AI-powered WordPress plugin that scans for vulnerabilities and outdated components in plugins, core, and PHP. Stay secure with proactive alerts.

Protect your WordPress site from brute force attacks, API abuse, and DDoS attacks with customizable rate limiting rules.

Basic content protection for your WordPress site. Disable right-click, left-click, print, default browser shortcuts, and more.

A basic security plugin for WordPress 4.x, 5.0 or higher. You can selectively disable unused features in WordPress core...

Agent AI Bot Protect protects your WordPress content from AI scraping bots, preventing unauthorized data harvesting for AI training.

Matoma Two-Factor Authentication extends the login process by a 2nd factor to achieve increased security. After the user name and password are request …

Force all non-admin, non-AJAX, and non-REST API requests to return a 404 for headless or API-only sites.

This plugin redirects all 404 not found page to homepage.

Add an additional layer of security with this super light plugin that adds a basic authentication HTTP to the wp-admin and wp-login pages.