Security

Server-side bot protection that doesn't interfere with Google AdSense. Blocks malicious bots while allowing legitimate traffic.

A lightweight Wordpress maintenance mode plugin that hides the site behind a logo and password form. Access lasts 7 days.

A plugin that filters the rel values that are automatically added on links set to open in a new tab. Removes `noreferrer` and adds `noopener`.

WordPress plugin to identify the file changes. This will help admin to see if any new files added or edited any files. This helps in preventing hacking attempts.

JWT REST Auth Restrict is a WordPress plugin that enhances REST API security by requiring authentication for all endpoints. You can whitelist specific routes (like JWT login or WooCommerce product endpoints) from…

Minimalist, secure, and zero-config JWT Authentication for Headless WordPress & React. The modern alternative.

Security Patch to enforce the Twenty20 Image Before-After plugin to solve an XSS vulnerability

Automatically rotates your WordPress secret keys and salts in wp-config.php (default 30 days) to strengthen security and invalidate old sessions.

WP Biometric Auth plugin to register biometric credentials (WebAuthn) and login using navigator.credentials.

A plugin that monitors REST API endpoints (e.g. your site’s JSON endpoints) and limits abuse (rate limiting), logs requests, or blacklists IPs after threshold.

Two-Factor Authentication addon for multisite authentication plugin with Google Authenticator WordPress plugin

Secure OAuth2 authentication for headless WordPress, SPAs, and mobile apps. No bloat, no upselling.

Use Google's Invisible reCAPTCHA to thwart bad BuddyPress signups. No admin page, view source for instructions.

Limits login attempts with IP and username management

Lightweight protections for WordPress + optional Cloudflare edge blocking.

Block Domains from HTTP Requests in WordPress

Multi-layered anti-spam solution with honeypot traps, time-based checks, and deep integration with popular form builders and Houzez theme.

AI-based spam registration protection for WordPress.

A WordPress MU (Must Use) plugin that monitors plugin activations/deactivations during WordPress updates and sends email alerts.

SSL Certificate Monitor plugin for WordPress that will warn you before your SSL certificates expire

Login Sentinel Wordpress Plugin

Prevents user profile changes

Tracks and displays IP addresses of user logins in BuddyPress and BuddyBoss

wordpress plugin for two-factor authentication via email or sms (using twilio)

Recaptcha v3 support for Community Events

Helps to protect website with Google reCAPTCHA v3 or Cloudflare Turnstile.

WP CybeX Security: A powerful WordPress plugin for enhanced site protection. Custom login URLs, login attempt limiting, and 2FA using Google Authenticator. Secure your site from cyber threats.

WordPress plugin to provide integration with Sucuri web application firewall

Some source codes for a simple honeypot functionality for comment forms in WordPress

Sets a cookie that must exist in order to login to WordPress or to register in BuddyPress. Requires the Cookies for Comments plugin.