Security
Hardening, firewalls, login protection, scanning, 2FA.
35 plugins with two or more releases. Show all 75
WordPress Simple SAML plugin
Disable direct access to your sites /wp-login.php script, plus user notifications based on actions.
Lightweight WordPress firewall — rate-limits endpoints, blocks bots, bans repeat offenders, and adds security headers
Self-hosted behavioral captcha for WordPress — fine-grained interaction analysis, no external service, no tracking.
Browser security utilities for WordPress/Altis
Lightweight malware scanner for WordPress — files, database and vulnerable software. Reports only, never modifies your site.
WordPress plugin to enable Yubico OTP authentication
Delegate OAuth 2 authorization to another WordPress site
Helps keeping WordPress websites secure.
redirect if not logged in
A simple password protection plugin for WordPress—no usernames, no accounts, just one shared password. Share the password with those who need access and they're in. Perfect for situations where you need quick,…
WordPress plugin for 2 factor authentication (TOTP and SMS)
Keeps LLM API keys out of the WordPress database. Fetches keys from Pantheon Secrets or environment variables on-demand at the moment an LLM request fires — never stored in wp_options, never pre-loaded…
Cloudflare Access SSO (Single Sign On) for WordPress
Enable WordPress features: SVG uploads and more
Environment-specific basic auth for the Bedrock WordPress framework
Composer setup for 2FA Login Security tooling
Lightweight WordPress activity log.
Easily add exceptions to WordPress Force Login plugin
WordPress-plugin ID-Kollen
Low Level Firewall Plugin for WordPress
WordPress plugin to prevent brute force attacks
Fixes GravityForms plugin so it is CSP compliant.
Protect sensitive data in your ACF fields using encryption 🔐
Tracks all WordPress activity such as posts, meta, options, users, taxonomy, comments, plugins, themes and more.
Block all known AI Data Scrapers.
[WordPress Plug-in] Killer Pads is a plugin like security pads for "prevention is better than cure". It activates the default configuration of security and operational efficiency to WordPress websites.
Protects WordPress against brute-force attacks by automatically blocking malicious IPs and adding lightweight 2FA.
WordPress plugin: configurable password complexity and mandatory rotation for privileged accounts.
Extends content moderation functionality of a WordPress site.