Security
Hardening, firewalls, login protection, scanning, 2FA.
1,152 repositories, including 889 with fewer than two releases. Show released plugins only
AI Agent Activity Lens is a WordPress security and observability plugin for monitoring REST API activity authenticated through Application Passwords.
Logs suspicious requests: Cloudflare bypasses, probing for secret files, direct PHP access, XML-RPC calls and scanner user agents.
Logs administrative actions (logins, content saves, plugin/form/snippet changes) to a plain-text log file.
Blocks requests that bypass Cloudflare by requiring a secret token header. For hosts that offer no stronger origin protection.
Professional drag-and-drop password protection for WordPress pages with multiple password groups and stunning gradient themes.
Restricts site access to Cloudflare IP ranges, refreshes those ranges daily via cron, and provides an admin Tools page to view ranges and forbidden-request logs.
WordPress must-use plugin: closes the default anonymous surface (XML-RPC, user enumeration, fingerprints, comments, login errors, application passwords). Same file on every site nitida runs.
Plugin Guard is a powerful security plugin designed to protect your WordPress site from unauthorized plugin
Advanced WordPress security plugin with unified protection engine for Indonesian market
WordPress plugin that prohibits non-admin logins. Useful for dev sites that have a full database copy of production (including user logins) so that standards users don't login to dev.
Audit log plugin for WordPress — tracks user activity, logins, post/page deletions and provides a WP-CLI command for security auditing.
Wordpress mu-plugin that stops Wordpress from announcing its version number to the world.
Force user login to view pages, unless within a whitelisted ip range.
Wordpress plugin that uses Bitcoin Lightning or Nostr to Eliminate Comment Spam
A plugin to enhance the security of your WordPress site by setting various security and optimizations settings.
WordPress REST API lockdown, forensic tracing, and automated spam containment.
Hyperfocused login security. CAPTCHA, brute-force lockout, geo-blocking, 2FA, honeypot, and edge WAF - all from one screen. 100% free.
WP-Login Guardian is an advanced WordPress security plugin that protects your website from brute-force attacks, unauthorized login attempts, username enumeration, and malicious IPs. It combines login protection, two-factor authentication (2FA), activity monitoring,…
WordPress plugin: logs admin actions to a filterable Tools viewer with retention cleanup