Security
Hardening, firewalls, login protection, scanning, 2FA.
1,152 repositories, including 889 with fewer than two releases. Show released plugins only
A WordPress plugin that automatically adds cryptographic nonces to every script & stylesheet, lets you hash-lock inline code, and builds a bullet-proof Content Security Policy in one click. See readme.txt for full…
Advanced security auditing plugin for WordPress that detects indicators of compromise (IOCs), flags obfuscated backdoors, audits crons, users, drop-in files, database content, and maintains a tamper-evident audit log with quarantine vault.
Hotfix for file deletion to to code execution vulnerability in WordPress
Activity logging, diagnostics, threat review, and export tooling for WordPress administrators.
WordPress plugin for WAB scam protection, comment filtering, and affiliate link fairness — Powered by WAB (webagentbridge.com)
WordPress hardening plugin: hides fingerprints and blocks user enumeration without breaking the site
Spam and abuse protection for Contact Form 7: honeypot, fill-time analysis, rate limits, SQLi and XSS signatures, AbuseIPDB reputation and LLM classification across 11 providers.
Add-on for the Sigil passkeys and two-factor plugin for WordPress: method policy, branding, settings portability and more.
Cloudflare Access WP IAM is a WordPress IAM/SSO gateway for securing WordPress admin panels with Cloudflare Access and enterprise identity providers such as Okta, Google Workspace, and Microsoft Entra ID
Lightweight WordPress activity history and audit log with dashboard summary, filters, CSV export, retention controls and privacy-focused tracking.
Server-side anti-scraping and AI bot protection for WordPress. Free, no account, no tracking.
Safely change your WordPress username to harden security or update your login handle without database scripts.
Removes the WordPress version number from your website source code, feeds, and asset URLs for enhanced security.
WordPress proof-of-work protection for resource-intensive pages and forms
WordPress plugin that counts successful and failed login attempts to your site.
WordPress MU plugin for controlling ZIP uploads and plugin directory installations, with optional administrator email notifications.
Protects your site from automated brute-force attacks by limiting the number of failed login attempts from a single IP address.
Blocks the XML-RPC endpoint to protect your website against brute-force login attacks and pingback exploits.
Production-grade math CAPTCHA plugin for WordPress with OOP architecture. Adds math CAPTCHA to login, registration, password reset, WooCommerce, Contact Form 7, Elementor forms, and REST API protection.
A comprehensive WordPress security hardening plugin. Disables unnecessary features, hardens HTTP headers, protects login, and provides WP-CLI security audit commands.
IP-Based Login Restriction is a WordPress plugin designed to enhance security by restricting user login access to a specific set of authorized IP addresses. It integrates seamlessly with WooCommerce to manage IP…
A comprehensive security plugin that hardens WordPress installations, prevents malware, and detects threats.
Advanced form validation and spam protection for Elementor Pro forms with AI-powered spam detection, honeypot fields, and geographic blocking.
Basic JWT authentication for WordPress REST API. Upgrade to Pro for advanced features like refresh tokens, analytics, and IP management.