Security

aGo Harden: WordPress security hardening dashboard (custom login URL, brute-force, headers)

Comprehensive security plugin with URL exclusion, blocking, SEO features, anti-spam protection, bot protection, and ModSecurity integration

Official vCaptcha WordPress plugin - passive bot detection for WordPress forms

Only user ID 1 can manage plugins (incl. MU-plugins), install/update/delete/switch themes, use the customiser, access tools or edit files, or modify via REST API. Everyone else is redirected and stripped of the…

Comprehensive security plugin with URL exclusion, blocking, SEO features, anti-spam protection, and bot protection

Free WordPress security headers: nosniff, frame, referrer, optional HSTS. EMPIREX Tech.

Comprehensive security plugin with URL exclusion, blocking, SEO features, anti-spam protection, and bot protection

Adds one-time passcode authentication to LoginPress.

Comprehensive security plugin with URL exclusion, blocking, SEO features, anti-spam protection, and bot protection

Adds a remote logout endpoint to WP OAuth Server with zero configuration

Comprehensive security plugin with URL exclusion, blocking, SEO features, anti-spam protection, and bot blocking

IntegriCMS is a WordPress plugin that protects file integrity by generating and comparing SHA-256 hashes. Detects unauthorized modifications, logs events, and sends automatic email alerts to ensure your CMS remains clean and…

Lightweight WordPress protection. No bloat, no cloud, no monthly fee.

Access-control layer for sensitive uploaded files.

for logging changes on WordPress sites with multiple admins

Wordpress Plugin to allow access to private pages via a special link with a token.

Professional WordPress security scanner for malware, web shells, suspicious files, integrity drift, persistence and security logs. Scans keep running in the background while you navigate. Remediation is always user-confirmed.

A WordPress plugin that alerts you when another plugin is attempting to hide itself from you.

Lightweight TextBee SMS gateway for WordPress and WooCommerce: order SMS, message log, phone OTP login, password reset, phone checkout.

Hide my wp login

WordPress security plugin that watches for compromise signals and alerts the owner when something needs them.

Forces all front-end visitors to log in before viewing the site.

ShieldPressWP Anti-Spam WordPress plugin, created to help WordPress websites deal with unwanted spam and protect their forms and user interactions. Working on a WordPress plugin has given me an opportunity to look…

WordPress plugin that audits your install for common security misconfigurations — debug display, file editor, XML-RPC, exposed files, pending updates

A minimalistic security plugin for WordPress that validates the checksums of WordPress Core files and emails a site admin if issues are detected.

Create and manage LayerV qURL secure access links from the WordPress admin.

MaxtDesign MFA: zero-footprint multi-factor authentication and login-location protection for WordPress and WooCommerce (TOTP, passkeys, recovery codes).