Security
Hardening, firewalls, login protection, scanning, 2FA.
1,148 repositories, including 885 with fewer than two releases. Show released plugins only
Runtime security monitor for WordPress: traces outbound requests, faked HTTP responses, new admins and file changes to the plugin file and line. Daily e-mail report, instant alerts.
Security enforcement module: ban repeat offenders, bad actors, malicious IPs, and compromised credentials.
Continuous vulnerability monitoring for WordPress plugins, themes, and core — with plain-language results and severity grading designed for real-world site owners.
Tracks plugin, theme, and core changes in WordPress — including filesystem-level changes made outside WordPress via FTP, SSH, or deployment pipelines.
Super simple way to allow a single sign on to your Wordpress site when using Cloudflare Access.
WordPress Plugin, to extend the Stream Plugin to save entries to file log
Security and maintenance controls for WordPress: hide update noise, restrict risky tools, and safely switch users for testing.
Spam protection for WordPress that runs on your own site. No API keys, no accounts, nothing lost.
Version-controlled 'Jarvis' admin-minus WordPress role for the AI agent user. Distributed via Git Updater.
Allow disabling of admin menu items, & plugin, theme chaning / installations / deleting / updating
A comprehensive security system designed to intercept attacks before they reach your site and camouflage your WordPress instance, making it invisible to automated scanners and hackers.
An improved version of WordPress Site Health, with more checks and hardening options.
LocaSentinel provides geolocation-based access control, impossible travel detection with email OTP verification, proxy blocking, anti-spam path rate limiting, and comment spam filtering for WordPress using the IP2Location.io API with the help of…
Free WordPress 2FA plugin with 30-day trusted devices. TOTP RFC 6238 compatible with any authenticator app.
Link Secure Pro is a high-performance WordPress plugin designed for download and streaming websites. It encrypts external links, protects them with a captcha/timer, and helps you monetize traffic via URL Shorteners.
A multi-site aware, WordPress mu-plugin to enforce WordPress Two-Factor, a 2FA plugin, security for all user roles at the point of registration.
The ultimate all-in-one toolkit to secure, optimize, and grow your WordPress website. A self-hosted alternative to Jetpack with no external service requirements.
SafeGrd Backup for WordPress: database and files, encrypted on your server, stored locked against deletion and test-restored on a schedule.
WordPress passkey 2FA for admins: sign in with Face ID, Touch ID or a security key, with optional passwordless login. Works with the Two Factor plugin and its WebAuthn provider. GPL-2.0.
WordPress login through Cloudflare Zero Trust (Access) over OIDC. One-click provisioning of the Access app, Cloudflare-only or side-by-side login, group-to-role mapping, backup codes.