Security Plugins
Firewalls, malware scanning, login protection, and site hardening.
Showing 137 of 164 plugins
Stop installing 7 plugins! WPOrLogin is the All-in-One Suite: Custom Login Design, Social Login (Google), Hide Login URL, Limit Attempts & reCAPTCHA.
A complete WordPress security firewall: blocks IPs, bots, countries & ASN. Includes an intelligent WAF, Threat Scoring, Geo-Challenge, and 2FA.
Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.
Easily change your WordPress DB prefix, save time, increase security.
ALTCHA for WordPress offers invisible, GDPR-compliant spam protection with firewall and rate limiting for fast, secure sites.
This plugin expands file-related security and sanity around the upload process.
Hardens and protects your site by locking down login, REST API, XML‑RPC, file editor, and applying HTTP security headers.
This plugin blocks all unauthorized and irrelevant requests through query strings and provides extended session tracking and capability audit.
Block IPs in your gravity forms
CloudSecure WP Securityは、管理画面とログインURLをサイバー攻撃から守る、国産・日本語対応のセキュリティ対策プラグインです。 簡単な設定だけで、不正アクセスや不正ログインからWordPressを保護し、サイトのセキュリティを高めます。
WP-WebAuthn enables passwordless login through FIDO2 and U2F devices like Passkey, FaceID or Windows Hello for your site.
Use Cloudflare's free geolocation service to restrict access to your site's login page.
Use WordPress as your CMS, then publish a fast, lower-exposure static version of your site.
Essential security: password protection, AI crawler blocking, login limits, country restrictions, CPU monitoring & live-preview login customizer.
Manage all your WordPress sites in one place - updates, uptime, backups & security.
Enable easily HSTS on your website.
All things Cloudflare (caching, flexible SSL, Turnstile, settings, rules, analytics, media in R2, image transforms [AVIF, WebP], secure admin area).
An advanced security plugin that blocks website visitors by country, with additional features like blacklisting, logging blocked attempts, admin bypas …
Restrict the usernames, email addresses, characters and symbols or email from specific domain names or language in registration ...
Malware scanning & removal, website hardening, patching vulnerabilities, real-time protection against online attacks, blacklist monitoring in a click!