Security
Hardening, firewalls, login protection, scanning, 2FA.
1,152 repositories, including 889 with fewer than two releases. Show released plugins only
Enhanced WordPress login security with custom login page, rate limiting, XMLRPC blocking, and advanced protection against automated attacks
Behavioral WAF plugin for WordPress — 44 attack patterns, per-IP scoring with decay, 6 threat levels with auto-response
Automatically logs out users after a configurable period of inactivity with a countdown warning. Enhances security by preventing unauthorized access to idle sessions.
WP ShieldX is a lightweight, zero-bloat WordPress cybersecurity suite providing real-time file integrity tracking, multi-vector WAF attack defense (SQLi, XSS, RFI), deep heuristic malware & webshell scanning via the official WordPress.org Checksums…
Lightweight Cloudflare Turnstile CAPTCHA protection for WordPress — login, registration, comments, and Gravity Forms
Hide the WordPress login URL behind a custom slug. In-house plugin for Clear pH Design sites on Flywheel.
Site-wide Cloudflare Turnstile protection for Jetpack forms.
Uses AJAX to check if user is still logged in and kicks them out via a dialog with a countdown that sends them to the WP login page.
A powerful WordPress security plugin featuring a modern, intuitive interface and advanced protection tools to safeguard your website from threats.
Hide and protect your WordPress login page with custom URL, signed access tokens, and IP controls. Lightweight security plugin.
A simple plugin that removes all urls from Wordpress comments after 30 days.
Harden your WordPress site in minutes - no code, no config files, no subscription.
Surgical-grade, zero-bloat WordPress security and utility modules. Built on the core pillars of Sekure, Privacy, and Speed.
wordpress lite security plugin
Harden WordPress login security with custom slugs, rate limiting, recovery tokens, and Site Health integration.
This plugin automatically enables Jetpack's "WordPress.com Secure Sign On" module in production sites.
A lightweight WordPress security plugin that allows admins to easily whitelist or blacklist IP addresses directly from the dashboard. Enhance website security, block unwanted access, and manage trusted IPs with a simple…
Disable right click, text selection, copy, and image dragging on WordPress to deter casual content copying, without breaking forms or keyboard navigation.
Two-factor enrollment onboarding for the WordPress Two Factor plugin. Enrolls covered users during login, before an auth cookie exists. Owns no policy.
A wordpress plugin for checking TCPA litigate Number
Disable REST API endpoints and apply additional callbacks to restrict them
A mandatory strong password policy plugin for WordPress (MU-Plugin).
Free, privacy-first security, health and diagnostics toolkit for WordPress. No telemetry or external account required.