Security
Hardening, firewalls, login protection, scanning, 2FA.
35 plugins with two or more releases. Show all 75
WordPress Simple SAML plugin
Disable direct access to your sites /wp-login.php script, plus user notifications based on actions.
Lightweight WordPress firewall — rate-limits endpoints, blocks bots, bans repeat offenders, and adds security headers
Gaitcha captcha integration for WordPress
Browser security utilities for WordPress/Altis
WordPress plugin to enable Yubico OTP authentication
Delegate OAuth 2 authorization to another WordPress site
A WordPress plugin that helps keeping WordPress websites secure.
Script that requires users to be logged in view site.
Password protects all pages and posts except the front page
Lightweight malware scanner for WordPress — files, database and vulnerable software. Reports only, never modifies your site.
WordPress plugin for 2 factor authentication (TOTP and SMS)
Keeps LLM API keys out of the WordPress database. Fetches keys from Pantheon Secrets or environment variables on-demand at the moment an LLM request fires — never stored in wp_options, never pre-loaded…
Facilitates SSO login to WordPress via Cloudflare Access.
Enable WordPress features: SVG uploads and more.
Environment-specific basic auth for the Bedrock WordPress framework.
Composer setup for 2FA Login Security tooling
Easily add exceptions to the Force Login plugin
Evaluates every request against a set of rules and allows, challenges or blocks it, as early in the request as WordPress can act.
Fixes GravityForms plugin so it is CSP compliant.
Protect sensitive data in your ACF fields using encryption 🔐
Tracks all WordPress activity such as posts, meta, options, users, taxonomy, comments, plugins, themes and more.
Crain core WordPress plugins and shared code.
Killer Pads is a plugin like security pads for "prevention is better than cure". It activates the default configuration of security and operational efficiency to WordPress websites.
Комплексный плагин безопасности WordPress: авто-блокировка IP при подборе паролей (Brute-Force) + встроенная легкая двухфакторная аутентификация (2FA по коду).
WordPress plugin: configurable password complexity and mandatory rotation for privileged accounts.
Extends content moderation functionality of a WordPress site.
Security & protection improvements: login event history, prevent login brute force, hide backend, update status API