Security Plugins
Firewalls, malware scanning, login protection, and site hardening.
Showing 153 of 164 plugins
Monitor traffic and ban unwanted visitors. Block any user or IP address so they can't access your site.
WebAuthn authentication provider for Two Factor plugin.
Require certain users to change their passwords on a regular basis.
This plugin blocks detected attackers or displays them a captcha to check they are not bots.
Salt Shaker enhances WordPress security by changing WordPress security keys and salts manually and automatically.
Configure various security-related HTTP headers, including CSP, XSS, Referrer Policy and more.
WPScan WordPress Security Scanner - Scans your system for security vulnerabilities listed in the WPScan Vulnerability Database.
Block VPNs, proxies, Tor, and spam on WordPress. Strengthen security and stop fake users with smart IP blocking via proxycheck.io.
WP Admin Audit monitors the security-relevant activities on your site, keeps an event log and tells you when something out of the ordinary happens.
Move your WordPress login page to protect it from bots. This plugin contains the Move Login module from SecuPress. Other security modules are availabl …
All-in-one WordPress toolkit: contact channels, SMTP, maintenance, AI, spam filter, WooCommerce — one plugin.
Spam Protect for Contact-Form7 protects from spam and bots. Customize defense strategies and monitor blocked attempts. Protect your time effectively!
Prevent bots from creating accounts by blacklisting domains and usernames and present people with a human friendly security question.
Free, lightweight WordPress security. Harden your site with login protection & 2FA, see Site Health clearly and run on-demand checks—setup in minutes.
Hides the list of user accounts that the WordPress REST API shows to visitors who are not logged in, which helps prevent user enumeration.
Protect your WordPress website from brute force attacks by limiting the number of failed login attempts. Improve security and stop bots.
PRO Security – Antivirus Scanner, 2-Layer Protection Hide Security, Brute Force Security & Antispam, Security Website and Security Hardening.
Protect Your WordPress Site From Clickjacking Attacks by Adding the X-Frame-Options Header and Owasp's Legacy Browser Frame Breaking Script.
Read-only forensic scanner for the WordPress core exploit chain CVE-2026-63030 / CVE-2026-60137 (wp2shell). Reports a scored verdict; changes nothing.