WordPress Security Plugins

Easy to use tools to help you meet LGPD compliance requirements. Fully documented, extendable and developer-friendly. Free, friendly support! Include …

This plugin will Prevent and CopyProtect Your Wordpress Blog from fraudulent copies .

Stronger WP. Limit access to critical WordPress areas, even for other admins.

Basic hardening: secure headers, login honeypot, user enumeration blocking, generic login errors, rate limiting, and more.

This plugin from WPZA provides your website randomised file names when you upload files into WordPress.

Short Description: A plugin to customise password strength requirements in WooCommerce.

This plugin redirects WordPress Sign-up to homepage if is activated "Hide Backend" module in iThemes Security settings.

WP Media File Type Manager will allow you to manage different file types in Media Library.

A comprehensive WordPress plugin that monitors security issues, performance issues, and WordPress settings that should be reviewed for potential impro …

This plugin will allow you to secure your development, staging and UAT environments with an http authentication block that can be controlled in admin …

Fixes insecure content messages that appear when loading images on an SSL secured website.

Find viruses in your WordPress easily. Virus scan, malware finder.

Access Log to track Logins and Failed Login Attempts

Protect your WordPress content from AI scraping bots with advanced detection, rate limiting, and security measures.

Ensure your SSL certificate is valid and your server is configured for best security practices.

Automatically block threats at the network level by forwarding Wordfence-detected IPs to Cloudflare.

Receiving ip addresses and browser identifiers of visitors on the login page and on any page of the site.

A s2member add-on that allows you to upload a file to the s2member-files/ secure directory and automatically insert a link into your post.

Source Code Protection is a simple and effective plugin that uses to prevent common techniques in protecting your code from being stolen.

A tiny WordPress plugin to clear all browser data related to the site upon logout (With Clear-Site-Data header).

"Re-imagined" version of Semisecure Login that uses public and secret-key encryption to encrypt passwords when logging in.

XMLRPC Lockdown by AO Digital is an advanced security plugin for WordPress. It blocks access to xmlrpc.php for all requests except those explicitly al …

Protects WordPress from DDoS with rate limiting, bot detection, blocking, Cloudflare support, logs, charts, and bot list export/import.

ShieldUp helps you to tackle bad bots, scrapers, hackers, enhancing website security and optimizing performance for a seamless user experience.

Stops fake checkout orders, card testing attacks, and spam bots that bypass CAPTCHA. Works instantly with all checkout types.

Login Delay Shield slows down brute-force attacks by adding a configurable delay to failed login attempts while keeping successful logins instant.

Easy-to-use tool to get rid of spam attacking your website AntiSpamLight is developed to help you to forget about annoying spam bots! No more spam and …

Protect pages and their subpages with user name/password, and keep protected pages from showing up in menus, search results and page lists.

Block visitors by country in one click. Geo blocker with VPN detection, IP blocking & country restrictions. GDPR & CCPA compliance made easy.

By far the simplest country allowlist plugin available. Locks admin panel and XMLRPC access to a given list of allowed countries.

Protect sensitive information like emails and phone numbers from bots with advanced obfuscation techniques.

A lightweight plugin that protects core WordPress forms and selected third‑party plugins from spam and bot attacks using Cloudflare Turnstile CAPTCHA.

The complete WordPress user roles plugin for everyone

Protect your images from unauthorized downloads and scraping.

Log of failed access, pingbacks, user enumeration, disable xmlrpc authenticated methods, kill xmlrpc request on authentication error.