Security
Hardening, firewalls, login protection, scanning, 2FA.
75 repositories, including 40 with fewer than two releases. Show released plugins only
WordPress Simple SAML plugin
Disable direct access to your sites /wp-login.php script, plus user notifications based on actions.
Lightweight WordPress firewall — rate-limits endpoints, blocks bots, bans repeat offenders, and adds security headers
Gaitcha captcha integration for WordPress
Browser security utilities for WordPress/Altis
WordPress plugin to enable Yubico OTP authentication
Delegate OAuth 2 authorization to another WordPress site
A WordPress plugin that helps keeping WordPress websites secure.
Script that requires users to be logged in view site.
Password protects all pages and posts except the front page
Lightweight malware scanner for WordPress — files, database and vulnerable software. Reports only, never modifies your site.
WordPress plugin for 2 factor authentication (TOTP and SMS)
Adds audit functionality for S3 Uploads actions. Add-on for the S3 Uploads plugin.
Keeps LLM API keys out of the WordPress database. Fetches keys from Pantheon Secrets or environment variables on-demand at the moment an LLM request fires — never stored in wp_options, never pre-loaded…
WordPress plugin to limit the Access-Control-Allow-Origin header to only allowed origins.
Facilitates SSO login to WordPress via Cloudflare Access.
Enable WordPress features: SVG uploads and more.
Environment-specific basic auth for the Bedrock WordPress framework.
A WordPress plugin to hide wp-login.php and use a custom URL for logging in.
Composer setup for 2FA Login Security tooling
Easily add exceptions to the Force Login plugin
A WordPress plugin which allows you to customize the nonce generation and validation.
Evaluates every request against a set of rules and allows, challenges or blocks it, as early in the request as WordPress can act.