WordPress Security Plugins

Easily and safely change the WordPress login URL to anything you want. Makes wp-admin and wp-login.php inaccessible for enhanced security.

Enhance your site’s security with dynamic CAPTCHA, blocking spam and bot access on forms. GDPR-compliant.

Advanced VPN & proxy blocker for WordPress. 99.9% accuracy, multi-API rotation, real-time monitoring. Protect against fraud & spam.

Profiless is a plugin that removes access to the profile page based on user role.

Permissions & Security Audit is a plugin that runs a series of tests to check common security issues with the following areas:

This plugin will put blank index.php in every sub-directory of your wp-content/uploads folder to prevent people from browsing the directories and stea …

Detect if a wordpress core files are changed and if a unwanted file(s) are uploaded or created in wordpress folders different to wp-content

HTML Purified replaces the default comments filters with the more secure HTML Purifier.

Protect your WordPress website from spam and abuse with R2K Security Captcha. This plugin offers powerful security by integrating with two of the most …

Logs and displays visitor IP addresses for website security and monitoring.

This plugin fixes Contact Form 7's Recaptcha v3 so it only appears on pages with contact forms.

Did someone clone me protects your website and visitors against phishing attacks. It will send you a notification when someone clones your website.

Hardening tool that blocks hackers and protect against: Brute Force Attacks, Exploits, Injections, Clickjacking and other important functionalities.

This plugin provides settings to modify WordPress and improve performance and security.

Enhanced login security for WordPress by requiring the presentation of a One Time Password (OTP) from a registered Yubikey

Shieldfy is a cloud-based security shield for your website to protect it from web attacks and malwares.

Safeguard your site from malicious activity and unwanted visitors by effortlessly managing IP blocks through the dashboard or command line ingerface.

Speed up and harden your site with a single click: cleans up unused features, protects security gaps, and configures cache integrations automatically.

Boosts your WordPress admin with tools for updates, security, performance, and user management - no coding required.

Scan your WordPress site and receive recommendations on how to improve load time, performance and security.

Changes wordpress user slug for security, it prevents access to the usernames of registered users on your site.

Static site generator using Git for storage. Comes with free integrated Git + Pages solution including Live WebStats.

This plugin keeps records of your users hashed passwords in order to prevent them from reusing their current or a previous password

Block website access based on visitor's geographical location. Simple and effective geo-blocking for WordPress.

The KillBot plugin for WordPress uses the external KillBot service to protect websites from bots and automated traffic.

Adds email OTP (One-Time Password) verification after valid login credentials on the default wp-login.php form for added security.

Secure your Wordpress of WPScan Prevent hackers using WPScan to find vulnerabilities in your site, disable this plugin when you are security testing o …

This plugin gives you the ability to limit WordPress admin logins based on the country the visitor's IP address is located in.

Secure WordPress & WooCommerce forms with Google reCAPTCHA. Stop spam, bots, and brute-force attacks effectively.

Block user access without deleting accounts. Prevent specific users from logging in while preserving their data and content.

The eID-Login plugin offers an alternative login to WordPress, using an electronic identity (eID) like e.g. the German eID ("Personalausweis").

Anti-Brute Force, Login Fraud Detector Wordpress plugin is a security plugin that detects and blocks malicious IP addresses attempting to log into Wor …

Record who, when and what post or page is deleted in your wordpress site.

ページ単位でアクセスIPアドレスを記録する軽量プラグイン。アクセス傾向の監視、不要なIPのフィルタリング、広告トラフィックの検証に役立ちます。

Tools to help with making Formidable Forms GDPR-compliant. Fully documented, extendable and developer-friendly.