WordPress Security Plugins

Security Shield by XD is a security plugin that prevents unauthorized users from installing add-ons, injecting scripts, and modifying core files.

A lightweight and modular plugin to apply performance, security, and database micro-optimizations to your WordPress site.

Professional security plugin focused on hardening, and essential security best practices for business websites and WooCommerce stores.

Protect your brand with unique verification codes. Generate, assign to WooCommerce products, print QR tags, and enable frontend verification.

PF Secure Toolkit is a lightweight, modular plugin to harden WordPress by disabling unnecessary features.

A WordPress plugin that allows administrators to safely edit usernames of registered users with an activation checkbox to prevent accidental changes.

Surveillez automatiquement les mises à jour de WordPress Core, des plugins et des thèmes, et recevez des notifications par email.

A modern WordPress plugin to manage inactive users, monitor site activity, and keep your site optimized and secure.

SmartWeb Disable Click by SmartWeb Tech is a lightweight WordPress content protection plugin.

Control WordPress REST API access by requiring user authentication with API key system.

Short Description: Hide wp-login.php and wp-admin, replace with a custom login URL for stronger security.

Keep track the users login. The plugin allows to save the data of each user's login (IP, username, date, time).

All-in-one WordPress scanner for page speed, security vulnerabilities, and malware detection.

Advanced WordPress security plugin with AI bot detection, GeoIP access control, and Cloudflare Turnstile integration.

Protect your content by blocking or redirecting visitors from specific countries.

Transform author archives into elegant sector-based content organization with automatic SEO optimization. ---

Protect your site by hiding the login page with a secret slug and limiting failed login attempts.

Change your WordPress login URL, design the login page, and enhance your site's security with built-in protection tools.

Modern JWT authentication with refresh tokens - built for SPAs and mobile apps with enterprise-grade security.

Short Description: Protect your WordPress login from brute-force attacks with IP lock and login attempt limits.

Restrict WordPress admin access per role using one clean settings page.

Secure private file access with expiry, role-based permissions, token-based URLs, and detailed download logs.

Protect any page from logged-out users with a single click. Redirects logged-out visitors to a safe destination.

Serve WordPress cleanly over .onion with URL rewriting, Onion-Location, and privacy hardening.

Login Defender enhances your WordPress site's security by allowing you to change the default login URL.

With the help of WhatIsMyBrowser the plugin detects old and bad browsers and denies them access. A special robots.txt denies crawling by bad bots.

Security auditor for the WordPress Abilities API. Scans registered abilities for permission, schema, and exposure risks.

Smart and AI-powered anti-spam protection for WordPress comments. Blocks bots and spam automatically, with optional ChatGPT-based detection.

An email trap that sends emails to one address of your choice (the WP Admin Email by default).

Blocks spam submissions from overseas contact forms. Supports Contact Form 7 and Elementor Pro Forms.

WordPress security plugin, with WAF (interception rate of 73%+), login protection and other functions. After 822 penetration tests in combat testing.

Automatically exports and emails All in One Security & Firewall audit logs on a monthly basis in CSV format.

This plugin redirects all 404 not found page to homepage.

We are currently enhancing this plugin. Kindly await the upcoming release.

Sends an email notification if the SSL certificate expiration is within set days range.