WordPress Security Plugins

htaccess protect - Protect your wordpress login or admin pages with password.

CSRF-protection for authentication cookies. When enabled, this plugin makes sure the "SameSite" flag is set in authentication cookies.

This plugin alerts you if any of your plugins have security vulnerabilities. It does this by utilising the WPScan Vulnerability Database once a day.

Protect attachment files from direct access using powerful and flexible restrictions. Offer safe download links for any file in your uploads folder.

Using the password protection will give you extra security layer of protection from brute force hacking attacks. Additionally, it's also an easy …

WP fail2ban Integration with Contact Form 7 to log spam form submissions.

Secure your WordPress site with easy and effective basic authentication. Restrict access, monitor attempts, and enhance security.

View and manage all active user sessions in a custom admin screen.

WP fail2ban integration with Gravity Forms to log spam form submissions.

Sends email notifications if a new version of WordPress available. Notifications about updates for plugins and themes can also be sent.

Add an additional layer of protection to your WordPress login and make sure bad actors have a hard time guessing your user's login credentials.

JetHost Total Care simplifies WordPress management by consolidating features like security, site enhancements and performance into a single plugin.

This plugin completely blocks access to wp-login.php and creates a new secret login URL

HSTS is HTTP Strict Transport Security, a means to enforce using SSL even if the user accesses the site through HTTP and not HTTPS.

This plugin allows you whitelist IP addresses so Limit Login Attempt plugin doesn't block them.

Secure Your WordPress Site with Cutting-Edge Protection

Disable page editing on selected pages, to protect the pages from accidental or unwanted changes that might break your site.

See Security Ninja vulnerabilities and security test results in your MainWP dashboard.

Create and manage your security.txt from within WordPress. The easiest way to manage security policy.

Prevent Cross-Site Request Forgery attacks on your comments form.

This plugin will disable file editing tool in your WordPress admin panel.

Protect against user enumeration attacks on author pages and other places where valid user names can be obtained.

Clears all domain cookies on logout. Because leaving a trail of cookies is bad.

Sets custom headers for WP notification emails. Also fixes a security issue with WP versions < 5.5.

Control remote publishing with XML-RPC from the writing settings page.

This plugin generates the proper security HTTP response headers to keep your site secured.

Blue Captcha is a powerful and highly customized WordPress plugin that effectively protects your WP blogs from spammers and unwanted persons.

Instant account security with effortless multi-factor authentication via Mobile Push, Mobile Passcode (TOTP), WebAuthn/U2F Security Keys, and more.

Give trusted web professionals admin access to your WordPress account. Revoke anytime.

A simple yet powerful plugin that redirects users to a custom URL after logout. Featuring a modern, accessible admin panel with dark mode support.

Disable the default WordPress registration page without disabling user registration.

A simple, light-weight collection of tools to harden WordPress security and help mitigate common types of attacks.

Removes your WordPress version from various places.

The easiest way to make your Gravity Forms GDPR-compliant. Fully documented, extendable and developer-friendly.

With a security.txt file, ethical hackers can easily send you a notification when they have found a vulnerability on your website.