Security

WordPress plugin: find abandoned, closed and outdated plugins on your site.

A comprehensive security plugin for managing .htaccess file protection and monitoring with real-time change detection and automatic backup functionality.

Stardust Security Wordpress Plugin

WordPress Must-Use plugin to add HSTS header with preload and include Sub-domains

A utility WordPress plugin for site security, email deliverability, and other advanced features.

Automatically protect visible email addresses and mailto links on WordPress frontends without an external service.

A lightweight WordPress security audit toolkit for reviewing common configuration and security posture checks.

GhostAdmin — Hide your WordPress admin presence. Custom login URL, stealth 404 blocks, folder access protection.

Encrypted File Sharing is a WordPress plugin that allows site administrators to securely send files to specific users via the WordPress admin panel. The plugin ensures that files are encrypted and only…

Thessley Security Hardening — modular WordPress security plugin

Find out which of your WordPress plugins have been closed on WordPress.org (and why), which haven't been updated in years, and which can't be checked.

Adds frontend password strength validation to the WordPress Reset Password page with customizable minimum requirements. Includes admin settings panel and server-side validation.

IPS Security Guard is a lightweight, zero-bloat, high-performance WordPress security hardening, web application firewall (WAF), and brute-force mitigation plugin built specifically for the Indian Public School website.

A very simple Wordpress plugin for disabling admin access to particular user roles.

2factor auth for wordpress

Lightweight WordPress hardening: security headers, login attempt limiting, username-discovery blocking and version hiding. Every option can be switched off.

A secure WordPress plugin to view Gmail inbox from the admin dashboard.

Improves Wordpress speed and security, removes unnecessary features, adds multiple layers of protection against common attack vectors

Anti-spam protection for WordPress comments. Honeypot, time-based verification, JavaScript tokenization, and content analysis. No external API required.

This WordPress plugin allows you to assign plugin install capabilities on a user-by-user basis.

WordPress plugin: sync Wordfence blocked IPs to Cloudflare WAF rules

Pre-checkout risk checks, structured logging, presets, and admin tools (modern tabbed UI).

Provides IP blocking for sites

Enables NinjaScanner integrity checks for plugins and themes distributed outside WordPress.org.

A rate limiting plugin. Adapted from: https://github.com/cedaro/wprestcop

A single-file WordPress plugin for fine-grained control over XML-RPC and REST API endpoints. Toggle XML-RPC globally or per-user role, disable specific REST routes, and log blocked requests for security monitoring.

Must-Use (MU) plugin that hardens and locks down the WordPress admin dashboard for demo and client sandbox accounts. Removes sensitive menus, widgets, admin bar nodes, and blocks direct URL access without the…

Add a message above the password form created by the "Password Protected" WordPress plugin.