Security
Hardening, firewalls, login protection, scanning, 2FA.
1,152 repositories, including 889 with fewer than two releases. Show released plugins only
A plugin designed to automatically maintain certain IP ranges in the whitelist of the WordPress security plugin WordFence.
A Wordpress plugin that generates an login URL that automatically logs you in.
Authenticate support team members to securely log them in to client sites via TrustedLogin
Password-protects WooCommerce checkout on non-production environments. Fails open — production domains are never protected. Admins bypass automatically.
An easy-to-use plugin designed to restrict, block, or whitelist IP addresses, providing effective protection against unwanted DDOS attacks. This tool helps enhance your website's security by preventing unauthorized access and guarding against…
Strips sensitive product data (stock quantities, sales counts, cost-of-goods) from unauthenticated WooCommerce REST API responses. Authenticated API key holders see the full response.
See every device signed in to WordPress, revoke one, and limit sessions per role.
A modern, accessible custom login for WordPress: own login URL, beautiful templates, secure by default.
Zero-admin-UI bot and brute-force protection for WordPress and WooCommerce. Honeypot, timing trap, and login lockout that covers every auth vector: wp-login, WooCommerce, XML-RPC, REST.
Security, firewall, access control and data protection for WordPress and its REST API. Authentication, JWT support, route policies, rate limiting, response hardening and WordPress security tools in a single plugin.
Lightweight anti-bot/spam protection for WordPress (honeypot + nonce + timestamp), built for BCM Network.
Stops update_options calls from wp-gdpr-compliance version 1.4.2 and lower. Install as mu-plugin if you are managing MANY sites or if you are an ISP/webhost. Best is to upgrade to 1.4.3 immediately.
Security, access control and data protection for headless WordPress. Authentication, JWT support, route policies, rate limiting, response hardening and WordPress security tools in a single plugin.
Control and audit WordPress application passwords: see every one, decide who can use them, limit what they reach, and make them expire.
Encode strings or words that are sensitive, vulgar, or violate guidelines within the comments.
BlockForce WP: A simple WordPress security plugin that blocks attacker IPs and automatically hides your login URL
Adds a lightweight math CAPTCHA to WordPress login, Contact Form 7, and WooCommerce forms.
Disable all logins on a site, in WordPress (allows Rest API)
WordPress plugin to add privacy-focused HTTP security headers with sensible defaults that won't break your site.
Excludes Affiliates Registration Form from reCAPTCHA validation provided by Wordfence
Japanese Spam & Malware Cleaner is a lightweight security scanner for WordPress. It helps you spot and quarantine common database and file‑based infections used in “Japanese keyword hacks” and similar compromises.
WordPress security hardening checklist, configuration examples, and incident-response notes.