Security
Hardening, firewalls, login protection, scanning, 2FA.
1,152 repositories, including 889 with fewer than two releases. Show released plugins only
A small, honest WordPress firewall. No cloud, no telemetry, no upsells - just deterministic protections for shared-hosting sites.
Passwordless and second-factor login for WordPress with the Thessley Passkey app
This plugin for WordPress is swiss army knife for the most perfect PHP firewall for the paranoid people out there. Now nothing will call make a connection into the outher world, even…
All-in-One AI-powered spam protection, bot detection, and login security firewall for WordPress.
A WordPress plugin to easily add Google reCPATCHA v2 spam protection to following core WP forms: login, lostpassword, register and comments.
Disposable Email Checker for Wordpress using the api-aries email check endpoint
Stops WordPress being used as a spam relay. Intercepts every outbound email, enforces rate limits and a recipient allowlist, and names the exact file sending it. Comment and registration shields, one-click diagnostics…
Plugin for WordPress to Protection User Enumeration Protection
Lightweight WordPress plugin to manage WordPress authentication cookie lifetimes and optionally log users out after inactivity.
Scope WordPress Application Passwords to named abilities and post types, with expiry and revoke.
Log all WordPress user creation with origin tracking (IP, backtrace, source detection)
Change the default WordPress login URL to a custom one for better security.
WordPress plugin to protect the search endpoint from DDoS abuse. Born from a WCEU 2026 talk.
Disables various seldom used features of WordPress to improve security. Works for standard and bedrock WordPress installs. Each feature can be toggled under Settings > General > Hardening, or locked from config…
Adds Google reCAPTCHA v2, reCAPTCHA v3, or Cloudflare Turnstile protection to WordPress login, registration, lost-password, and comment forms.
WordPress plugin that logs failed login attempts for support diagnostics
Yablonsky Security — local-first WordPress security with firewall protection, threat intelligence, malware scanning, integrity monitoring, automated hardening, and optional AI assistance.
Log admin logins and plugin/theme installs, activations, deactivations, deletions to a plain text file
A free, open-source WordPress plugin for enabling two-factor authentication on your sites