WordPress Security Plugins

A simple, light-weight collection of tools to harden WordPress security and help mitigate common types of attacks.

Signs and encrypts emails using PGP/GPG keys or X.509 certificates. Provides OpenPGP and S/MIME functions via WordPress plugin API.

Fine tuning access to your posts.

Enhanced Login Security for Your Wordpress blog.

Protect your WooCommerce store from fake orders by blocking suspicious IPs, emails, and detecting bot checkout activity.

Powerful Plugin Management Solution for WordPress

It helps in preventing Cross Site Scripting (XSS) with just a few lines of code.

Real-time firewall that stops bots, malware, and hackers with real AI, file protection, and traffic analytics without slowing down your site

wp bcrypt switches WordPress's password hashes from MD5 to bcrypt, making it harder for them to be brute-forced if they are leaked.

With Rename Plugins Folder you can rename the plugins folder. This is an underestimated way to increase the security of your installation.

Combat spam registrations for a BuddyPress-powered site using Google's reCAPTCHA

This WordPress plugin randomizes the user_id for the user created on WordPress setup, removing one potential attack factor from the site.

Reduce donation spam with Cloudflare turnstile, a user-friendly, privacy-preserving alternative to CAPTCHA

Automatically adds Subresource Integrity (SRI) to external scripts/styles and safely excludes Google reCAPTCHA and Google Fonts.

Premium WordPress Security - 100% FREE: Firewall, 2FA, Security Headers, Login and Malware Protection, File Monitor, Security Audit & more

Adds some extra security to your WordPress with only one click.

Increase your WordPress security by deleting old core files that exist in the filesystem before hackers exploit them for attacks.

Several opinionated WordPress tweaks focused in security and performance.

Learn WP Best Practices Through Your Own Site! Get clear insights about Performance, Security, and Best Practices – explained in plain English.

🔐 All-in-one WordPress security: malware scanner (files+DB), force re-login, force logout, control logins, email-alerts. Cloud-based, light & fast.

BruteGuard is a cloud powered brute force login protection that shields your site against botnet attacks.

This plugin is designed to insert a piece of code into your WordPress website, which will automatically remove the WordPress version from your header.

Professional WordPress Activity Log. Track logins, user actions, content changes, and system events to see who did what, when, and where.

Logify WP - Activity Log & User Audit Log tracks critical changes, logins, and updates with searchable logs for site security.

No unsafe-inline helps you to build a Content Security Policy avoiding to use 'unsafe-inline' and 'unsafe-hashes'.

A very simple plugin that hides specific pages, posts and menu items from users based on their logged in staus.

Add Google’s simple checkbox reCAPTCHA to WordPress wp-admin login page.

Modern WordPress plugin for filtering categories from home page with performance optimization and security enhancements.

Protect your WP Admin access. The ultimate lightweight security suite. Block brute-force attacks, auto-repair infected core files, hide your login URL …

Description: This plugin will require visitors to type in the password each time they are visiting a password protected page.

Autopilot protection for your WordPress against malicious URL requests.

Stop use of a bad passwords, including those in the Have I Been Pwned? breached password database

Protect your entire WordPress site with a simple password. GDPR-compliant with modal links for legal pages.

The WordPress Integrity Checker checks your WordPress installation by detecting modified files, permissions issues and other common problems.

Protect your website from AI scraping by adding opt-out instructions to your robots.txt file and including meta tags in the HTML `` with this easy-to- …