WordPress Security Plugins

Helps prevent fake/spam WooCommerce orders using a decoy product approach plus basic product/cart protections. Simple admin screen under WooCommerce.

Human-verification math quiz for login and forms. No Google reCAPTCHA.

Automatically enforces essential HTTP security headers to protect your site from XSS, clickjacking, and protocol downgrade attacks.

Add more security with the two factor authorisation.

Database-first WordPress malware scanner and security plugin. Detect hidden SEO spam, pharma hacks, malicious scripts and links in posts & comments.

Protect pages and posts with email-delivered verification codes. Secure, passwordless access control with user management and customization.

No More Bots is a WordPress plugin that allows users to select specific pages where they have submission forms (login, register, contact, etc.).

This plugin hides your WordPress administration side of the public internet but makes it accessible from any location with GoodAccess App.

Backup your code and analyze security vulnerabilities, third-party component usage, licensing issues, code quality and more with The Code Registry.

This plugin adds auditing functionality to Wordpress.

Create a private login URL and hide /wp-login.php with stealth 404s. Logged-out /wp-admin/ visits redirect to your homepage.

Secure your WordPress site with a core malware scanner, verify server infrastructure, and display a verified trust badge to boost visitor confidence.

A powerful WordPress security scanner that detects suspicious code, file integrity issues, and offers expert support.

Notify the main admin when any user logs in to the dashboard. Track logins, and securely manage users with logout/delete options.

Change your WordPress login URL and protect your site from brute-force attacks. Blocks default login paths with 404 errors.

Plugin that establishes an IP Address reputation score from getipintel.net. IP Reputation data is encrypted using OpenSSL and stored in a _SESSION var …

WordPress Assistant plugin is a plugin to increase speed and security

Blocks unauthenticated access to vulnerable REST paths. Add paths in Settings → Balada Fix. Only admins can use them.

Looking for a budget-friendly alternative to expensive SSO solutions? Our OAuth extension provides the same robust security and provider support as Mi …

Integrates WooCommerce with BadActors.io fraud detection API to help merchants identify, prevent and report fraudulent orders.

Add an extra level of security to the wp-admin section of your WordPress by allowing access only via a secure dedicated tunnel provided by zenVPN.

Trust WP is a very light plugin that lets you easily and safely change wp-login.php to anything you want. It doesn’t literally rename or change files …

WordPress security plugin detects new devices, blocks them with a password, triggers siren alerts, and lets master admin control user access.

One place for site security and site performance. Secure and optimize your site to perform better. WM Secure and Optimize

Rename WordPress media uploads on the fly with customizable naming patterns. Secure and lightweight.

WP Smart Analytics provides insights into visitor analytics provides security to your WordPress installation. This mobile friendly plugin uses only en …

Protect your store from Magecart-style web skimming attacks. CartShark tracks and alerts on malicious JavaScript that could steal customer card data.

Advanced spam protection for Contact Form 7, Gravity Forms, Forminator, Ninja Forms, WPForms, Fluent Forms and custom forms.

Firewall protection for comments. Blocks spam before it reaches your database with automatic link filtering and zero manual moderation.

Monitors and controls failed login attempts

A secure, animal-based CAPTCHA for WordPress forms featuring intelligent bot detection and multi-form integrations.

IronPhantom Antifraud brings real-time fraud intelligence to WooCommerce.

A simple and secure Two-Factor Authentication plugin that sends a verification code to your email.

Prevent users (like e.g. ex-employees, rule breakers or spamers) from logging into your WordPress installation for a certain timeframe or permanently …

Advanced, lightweight, GDPR-compliant anti-spam protection for WordPress comments. No setup required.