Security
Hardening, firewalls, login protection, scanning, 2FA.
1,152 repositories, including 889 with fewer than two releases. Show released plugins only
A WordPress plugin implementing direct-mode PPF authorization for pingbacks and trackbacks. This is the reference implementation of the PPF specification.
WordPress plugin for managing security headers, CSP nonce support, scanning, and browser reporting.
Comprehensive security plugin to prevent backdoor exploits, ALFA shell attacks, and unauthorized admin password changes
Biggidroid Advance Security for WordPress Directories and Files against hackers
This plugin hides the WordPress version number by removing the generator meta tag and replacing ver query parameter from enqueued scripts and styles with the file modification time.
A one-off, read-only review of the files of a WordPress site. It compares the core files with the official checksums of your version, lists what sits in the root and is not…
Complete, free & open-source WordPress security — WAF firewall, 2FA & login protection, hardening, malware & core-integrity scanning, and security auditing. Nothing less than the paid plugins.
Security for WordPress: brute-force lockouts on every way in, account names kept private, breached passwords refused, with a journal and statistics. Runs on your server.
Professional site-stability utility for agencies. Prevent accidental site breakage by locking mission-critical plugins and themes. Includes secure Developer-Key overrides and site-hardening features.
Free WordPress plugin: read-only checks for HTTPS/SSL expiry, mixed content, core file integrity, PHP in uploads, spam/cloaking signs and WooCommerce checkout.
Multi-factor authentication for WordPress: authenticator apps, SMS/WhatsApp/voice via Twilio Verify or Plivo Verify, email codes, backup codes. Developed by Potomac Technologies, LLC.
Netdesign Session Guard: see who is signed in, detect shared accounts, limit devices (WordPress plugin, free on wordpress.org)
Marginal's agency baseline plugin for client WordPress sites: hardening, MainWP connection fixes, and white-labelling.
SM Fix – Security Incident Response for WordPress
Silence the noise in WordPress. Remove unnecessary features, disable legacy endpoints, and enforce clean, secure defaults for production environments.
Yet Another OAuth2 Server for WordPress (YAOS4WP)
A WordPress plugin to lock out logins after x number of attempts. Users can be unlocked by using the built-in password reset features.
A WordPress plugin that collects the Top Spam IP addresses and lists them on a new admin tools page. Allows to export them and to block via your .htaccess file.
A simple, but complete (down to vector graphics) captcha implementation class. Wordpress plugin. In the beginning of development. September 2013.
A very simple Google reCAPTCHA 2.0 WordPress Plugin with no nags for premium features