WordPress Security Plugins

A reimagining of WordPress authentication using modern security practices.

This plugin is for logging users' activities. You can check anytime who and what has changed.

Create central "Enter your password" page and the password entered determine which page the user sees next.

Stop installing 7 plugins! WPOrLogin is the All-in-One Suite: Custom Login Design, Social Login (Google), Hide Login URL, Limit Attempts & reCAPTCHA.

Add a layer of security and prevent your login name from being shown in the author archive's URL.

Prevent bots from creating accounts by blacklisting domains and usernames and present people with a human friendly security question.

Plugin for configuring Content Security Policy headers for your site. Allows different CSP headers for admin, logged inn frontend and regular visitors

Staatic lets you create and deploy a streamlined static version of your WordPress site.

Malware scanning & removal, website hardening, patching vulnerabilities, real-time protection against online attacks, blacklist monitoring in a click!

Enabling this plugin allows you to set up Basic authentication on your admin page using your WordPress user name and password.

Block IPs in your gravity forms

Remove all WordPress methods from the XML-RPC API to increase security.

This plugin blocks all unauthorized and irrelevant requests through query strings and provides extended session tracking and capability audit.

All things Cloudflare (caching, flexible SSL, Turnstile, settings, rules, analytics, media in R2, image transforms [AVIF, WebP], secure admin area).

Hardens and protects your site by locking down login, REST API, XML‑RPC, file editor, and applying HTTP security headers.

REST XML-RPC Data Checker allow to check JSON REST and XML-RPC API requests and grant access permissions.

Use Cloudflare's free geolocation service to restrict access to your site's login page.

Manage all your WordPress sites in one place - updates, uptime, backups & security.

A complete WordPress security firewall: blocks IPs, bots & countries. Includes an intelligent WAF, Threat Scoring, Geo-Challenge, 2FA, and Anti-Sp …

Disable default WordPress registration page, remove register link and stop registration spam, without disabling user registration.

WebAuthn authentication provider for Two Factor plugin.

Restrict the usernames, email addresses, characters and symbols or email from specific domain names or language in registration ...

Monitor traffic and ban unwanted visitors. Block any user or IP address so they can't access your site.

Disables password strength enforcement in WooCommerce.

Comprehensive spam protection for WordPress registration, login, comments, and contact forms.

An authentication framework that handles authorization/communication with most popular web services.

License: GPLv2 or later Disables new Site Health screen from WP Dashboard

Configure various security-related HTTP headers, including CSP, XSS, Referrer Policy and more.

PRO Security – Antivirus Scanner, 2-Layer Protection Hide Security, Brute Force Security & Antispam, Security Website and Security Hardening.

SX User Name Security prevents WordPress from showing your real Login everywhere. It ovverides the body_class function, User Nicename, Nickname and Di …

Block VPNs, proxies, Tor, and spam on WordPress. Strengthen security and stop fake users with smart IP blocking via proxycheck.io.

Universal Honey Pot is a powerful and user-friendly WordPress plugin that provides a plug-and-play solution for protecting your forms against unwanted …

Adds Subresource Integrity (SRI) attributes to your page's elements for better protection against JavaScript DDoS attacks.

Prevents users from staying logged into the same account from multiple places.

WebTotem is a SaaS which provides powerful tools for securing and monitoring your website in one place in easy and flexible way.