WordPress Security Plugins

WPScan WordPress Security Scanner - Scans your system for security vulnerabilities listed in the WPScan Vulnerability Database.

Search the files and database of your WordPress install for signs that may indicate that it has fallen victim to malicious hackers.

WP Fingerprint adds an additional layer of security to your WordPress website, working to check your plugins for signs of hack or exploit.

Records various WordPress events to your server's system log for integration with Fail2Ban.

Booter - Bots & Crawlers Manager is a preventative measure (treatment in advance) and treatment of damages caused by crawlers and bots.

Plugin Check is a WordPress.org tool which provides checks to help plugins meet the directory requirements and follow various best practices.

Scan and check your plugins for PHP and WordPress compatibility. Requires a $1/month Portal subscription to obtain a license key.

MilesWeb Tools is a powerful WordPress plugin designed to enhance your site's functionality and security. It helps you manage security settings, …

Optimize your site instantly with one-click activation. WP Extra offers easy fixes and features for WordPress.

Protect your WordPress site with a powerful and user-friendly Math Captcha. Now with seamless WooCommerce, WPForms, and Formidable Forms integration!

WordPress security plugin with free basic firewall/WAF, vulnerability and core scanning, and 50+ core integrity checks.

Move your WordPress login page to protect it from bots. This plugin contains the Move Login module from SecuPress. Other security modules are availabl …

This WP plugin blocks XSS by encoding harmful URL characters & safely handling HTML in $_GET. Customizable settings for enhanced website security.

Disable the REST API user endpoints due to obscure user slugs.

Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.

Protect your forms from spam with 99.9% accuracy - no CAPTCHA, no JavaScript, no tracking. Trusted by 3.5M+ websites.

Salt Shaker enhances WordPress security by changing WordPress security keys and salts manually and automatically.

Enable/Disable XML-RPC for all or based on IP list, also you can control pingback and Unset X-Pingback from HTTP headers.

Protect WordPress login, registration, comment and BuddyPress registration forms with Google's No CAPTCHA reCAPTCHA.

Get email alerts for file and permission changes on your WordPress sites. No false positives!

Protect Your WordPress Site From Clickjacking Attacks by Adding the X-Frame-Options Header and Owasp's Legacy Browser Frame Breaking Script.

Duplicate post, post order, email via SMTP, code snippets, disable gutenberg, child theme generator, svg support, disable XMLRPC, and more...

Based on the success of the most popular firewall for Joomla!, RSFirewall! is now available to protect your WordPress website as well.

WP fail2ban Blocklist is a collaborative preemptive blocklist for WordPress.

Protect your WordPress website from brute force attacks by limiting the number of failed login attempts. Improve security and stop bots.

Simple Login Lockdown prevents brute force login attacks/attempts on your WordPress installation.

Enable easily HSTS on your website.

Protects your login, xmlrpc and RSS feeds pages against DDoS attacks. Denies access to your site from certain countries via CloudFlare.

WP-WebAuthn enables passwordless login through FIDO2 and U2F devices like Passkey, FaceID or Windows Hello for your site.

Require certain users to change their passwords on a regular basis.

Lock Down Admin plugin secure your WordPress admin panel. It locks the wp-admin url and if this plugin is activated then user can't login in the …

Get instant protection against vulnerabilities disclosed by security companies.

Protect your WordPress site: firewall, bot & brute-force protection, anti-spam, multi-layer CAPTCHA, optional cloud threat intel.

This plugin is for logging users' activities. You can check anytime who and what has changed.

A reimagining of WordPress authentication using modern security practices.