WordPress Security Plugins

Trust WP is a very light plugin that lets you easily and safely change wp-login.php to anything you want. It doesn’t literally rename or change files …

Protect your store from Magecart-style web skimming attacks. CartShark tracks and alerts on malicious JavaScript that could steal customer card data.

A simple plugin to disable text selection and prevent image dragging on your WordPress site.

Track unauthorized access to your WP website.

A passwordless solution that allows users and admins to log into a WordPress website using passkeys with Beyond Identity.

Encrypted Post Type provides a custom post type where the content of each post is encrypted.

Security auditor for the WordPress Abilities API. Scans registered abilities for permission, schema, and exposure risks.

We are currently enhancing this plugin. Kindly await the upcoming release.

A client plugin that provides SSO (Single-Sign-on) or opt-in authentication against Greenhouse Portal Auth0 implementation.

Simple and effective security measures for your WordPress site. Many security features you can activate with a single click.

Add a secure, passwordless login option to the default WordPress login form.

A lightweight WordPress security plugin to protect your admin area with a custom login URL, hide debug logs, limit login attempts, and add 2FA.

Integrate Authyo OTP verification seamlessly with Ninja Forms.

Comprehensive activity monitoring, undo system, and AI-powered anomaly detection for WordPress.

Comprehensive site health monitoring for WordPress. Get a complete health report covering security, performance, server configuration, SEO, and plugin …

Scans your WordPress installation for hardcoded login credentials (usernames/passwords) and allows safe removal from PHP files.

License: GPLv2 or later WordPress plugin to remove the version number from the WordPress front end.

A collection of performance, privacy, security, and other tweaks. Minimalistic lightweight plugin.

Protect your WordPress site from brute force attacks, API abuse, and DDoS attacks with customizable rate limiting rules.

Plugin that extracts data on WP installation, installed themes, installed plugins and server info for diagnostic purposes. Export data in csv and json

Matoma Two-Factor Authentication extends the login process by a 2nd factor to achieve increased security. After the user name and password are request …

Force all non-admin, non-AJAX, and non-REST API requests to return a 404 for headless or API-only sites.

Change your WordPress login URL, design the login page, and enhance your site's security with built-in protection tools.

CMS Watchman provides robust security monitoring for WordPress sites, detecting vulnerabilities and integrating seamlessly with Watchman.

AI-powered chatbot, semantic search, and machine learning for WordPress with enterprise-grade security.

Suspend WordPress user accounts with timed or permanent bans, reasons, email notifications, and a full audit log.

A lightweight captcha that protects your WordPress login page from automated bot attacks using a simple math challenge.

Protect your content from being copied or stolen.

WordPress firewall plugin with IP blocking, country rules, brute-force protection and proxy support to secure your site.

A lightweight anti-spam plugin using honeypot, timing, keyword, and reCAPTCHA v2 Checkbox protection. Blocks bots silently while keeping UX clean.

Passwordless login via secure magic links on the WordPress login form.

The ultimate all-in-one agency toolkit for WordPress.

Simple one-click WordPress security. Protect your site in 30 seconds.

Expose support for WordPress

Complete WordPress monitoring with real-time alerts, error tracking, and uptime monitoring. Know about issues before your users do.