Security
Hardening, firewalls, login protection, scanning, 2FA.
1,152 repositories, including 889 with fewer than two releases. Show released plugins only
You can remove the XML-RPC pingback headers on your site with this WordPress Plugin.
A WordPress plugin that analyzes post comments and marks malicious comments as spam.
Official WordPress plugin for MailProbe: refuses sign-ups with an email address that cannot receive emails or is disposable, and flags WooCommerce orders with the same problem. Hosted in the EU (France).
RBL Checker allows anyone to check if an IP address or domain is listed in RBLs. Checks are logged and Admin user can select which RBLs to check.
WordPress Plugin: Two-Factor Authentication using the Google Authenticator Android/iPhone/Blackberry app.
A lightweight WordPress plugin that lets you block or allow visitors based on IP addresses. Manage IP lists securely from the dashboard with sanitized inputs, nonce verification, and fast performance. Ideal for…
Custom WordPress plugin for collecting, approving, and displaying customer testimonials with a carousel display
WordPress plugin to inject a useragent into incoming webmention requests, so as not to trip WordFence's IP block against POST requests without a useragent or referrer
Filters out SPAM comments and prevents them from being posted on the site.
Adds an entry into the iThemes Security (free) logs (notices), for each successful user login.
A WordPress plugin for mandatory content risk control, pre-blocking automation pipelines, with system logging and enforcement.
On Password reset sends the new password to PasswordPusher API and emails the URL token to the WordPress user.
A lightweight WordPress security monitoring plugin that tracks authentication events, administrative actions, and site changes directly from the WordPress dashboard.
Advanced security monitoring plugin that tracks login attempts, detects suspicious behavior, and provides real-time alerts to protect small businesses from cyber threats.
Brute-force protection for WordPress login with per-user and per-IP lockout, exponential backoff and Telegram alerts.
Enables SVG uploads in WordPress for trusted roles and strips scripting from the file before it is stored
Unlock a password-protected post using the main WP password or multiple secondary passwords, rely on WordPress's default 'wp-postpass_' cookie, and log each access attempt with date/time/IP/geolocation.