WP Manifestindependent plugin directory
manifest / category

Security 240

Hardening, firewalls, login protection, scanning, 2FA.

1
Login Locker thefrosty/wp-login-locker
Disable direct access to your sites /wp-login.php script, plus user notifications based on actions.
by Austin Passy v2.10.0 · 25d ago pushed 1d ago
6stars
82kdownloads
≈10active
263composer
2
WP Simple SAML humanmade/wp-simple-saml
WordPress Simple SAML plugin
by Human Made 0.5.5 · 7mo ago pushed 13d ago GPL-3.0
125stars
322kcomposer
3
829 Studios - WordPress Tools 829-studios/wordpress-tools
A plugin to enhance 829 Studios WordPress websites.
by 829-studios 1.8.2 · 25d ago pushed 5d ago
0stars
3kdownloads
≈230active
4
Gaitcha for WordPress willybahuaud/gaitcha-for-wp
Self-hosted behavioral captcha for WordPress — fine-grained interaction analysis, no external service, no tracking.
by willybahuaud v1.3.1 · 1mo ago pushed 1mo ago GPL-2.0-or-later
7stars
42downloads
≈10active
4composer
5
Altis Browser Security humanmade/altis-browser-security
Browser security utilities for WordPress/Altis
by Human Made 2.2.1 · 2mo ago pushed 2mo ago
10stars
238kcomposer
6
WW Yubico OTP Authentication sjinks/ww-yubico-otp
WordPress plugin to provide support for the Yubico OTP authentication
by sjinks 3.0.1 · 1 year ago pushed 1d ago MIT
3stars
44downloads
≈10active
25composer
7
LW Firewall lwplugins/lw-firewall
Lightweight firewall — rate-limits endpoints, blocks bots, bans repeat offenders, and adds security headers.
by lwplugins v1.5.7 · 1d ago pushed 1d ago
1stars
102downloads
≈10active
188composer
8
Require Email 2FA dknauss/require-email-2fa
Make two-factor mandatory for all WordPress users (emailed-code floor, per-role exclusions) and lock the XML-RPC/REST API-login path to an allowlist. Optional must-use mode.
by dknauss v1.11.0 · 1mo ago pushed 6d ago GPL-2.0
1stars
153downloads
≈30active
9
Sweet Addons websweet-studio/sweetaddons
Addon plugin for sweetweb theme
by websweet-studio v3.0.30 · 1mo ago pushed 17d ago GPL-2.0
0stars
368downloads
≈30active
10
BC Security chesio/bc-security
Helps keeping WordPress websites secure.
by Česlav Przywara 0.27.3 · 4mo ago pushed 26d ago Unlicense
16stars
61composer
11
Silver Assist Security Essentials silverassist/silver-assist-security
Resolves critical security vulnerabilities: WordPress login protection, HTTPOnly cookie implementation, and comprehensive GraphQL security. Addresses security audit findings automatically.
by silverassist v1.5.1 · 15d ago pushed 7d ago
1stars
117downloads
≈10active
12
WP Registry wpregistry/wp-registry-cli
Check your WordPress site against the WP Registry — a public database of hashed plugins, themes, and files. Hash-based vulnerability and malware detection.
by Austin Ginder v1.2.0 · 2mo ago pushed 1mo ago MIT
2stars
33downloads
≈10active
13
Restrict Media File Access a8cteam51/restrict-media-file-access
A WordPress plugin that provides secure, granular access control for media files. Protect your uploads by moving them to a secure location and controlling access through custom control.
by a8cteam51 v1.4.2 · 26d ago pushed 26d ago GPL-3.0
6stars
172downloads
14
WP Multiple Passwords solepixel/wp-multiple-passwords
Allow multiple passwords for password protected pages and posts.
by solepixel 1.1.0 · 9 years ago pushed 7 years ago GPL-3.0
13stars
41downloads
≈10active
15
WordPress.org Two-Factor wordpress/wporg-two-factor
2FA for WordPress.org accounts
by wordpress no releases pushed 16h ago GPL-2.0-or-later
37stars
16
Delegated Authentication humanmade/delegated-oauth2
Delegate OAuth 2 authorization to another WordPress site
by Joe Hoyle 1.0.6 · 1 year ago pushed 1 year ago
10stars
116kcomposer
17
WP REST Cop cedaro/wprestcop
Manage access to the WP REST API with rate limits and IP-based rules.
by cedaro no releases pushed 3 years ago GPL-2.0-or-later
74stars
169composer
18
Turnstile for HivePress irapidchris-del/turnstile-for-hivepress
Acts as a bridge between HivePress and the free Cloudflare Turnstile plugin
by irapidchris-del v2.4.1 · 4d ago pushed 4d ago GPL-2.0
0stars
48downloads
≈20active
19
WP Maintenance Audit Reporter lunaluna/wp-maintenance-audit-reporter
Monthly maintenance reports for WordPress: core, themes, plugins, deltas, checksums, security ops, mail, CLI.
by lunaluna 1.6.0 · 5d ago pushed 5d ago GPL-2.0-or-later
0stars
159downloads
≈10active
20
HM Require Login humanmade/hm-require-login
redirect if not logged in
by Human Made Limited 1.0.5 · 4 years ago pushed 4 years ago
9stars
235kcomposer
21
OpenID Connect for WP forumone/openid-connect-wp-dist
Artifact repo for the OpenID Connect plugin
by forumone no releases pushed 1 year ago GPL-2.0-or-later
19stars
14kcomposer
22
KW Security kilowott-hq/kw-security-plugin
KW Security Plugin
by kilowott-hq 26.09.07 · 4d ago pushed 4d ago
0stars
78downloads
≈10active
23
WDG Support Monitor wdgdc/wdg-support-monitor-wordpress
A core and plugin monitor for WordPress
by wdgdc v1.1.2 · 21d ago pushed 3d ago MIT
0stars
58downloads
≈10active
24
PassWP Posts soderlind/passwp-posts
A simple password protection plugin for WordPress—no usernames, no accounts, just one shared password. Share the password with those who need access and they're in. Perfect for situations where you need quick,…
by Per Soderlind 1.4.3 · 7mo ago pushed 7mo ago GPL-2.0-or-later
1stars
58downloads
676composer
25
TN Tame Session Defaults timnashcouk/tn-tame-session-defaults
Taming your WordPress user sessions, to help reduce the chance of session hijacking
by timnashcouk v1.2.1 · 2mo ago pushed 2mo ago MIT
11stars
2downloads
26
2FA dxw/2fa
WordPress plugin for 2 factor authentication (TOTP and SMS)
by dxw v2.0.4 · 3mo ago pushed 3d ago MIT
6stars
19composer
27
Cloudflare Access SSO jamesmorrison/cloudflare-access-sso
Cloudflare Access SSO (Single Sign On) for WordPress
by jamesmorrison 1.0.6 · 2 years ago pushed 6mo ago GPL-2.0
8stars
56composer
28
Plugin Blacklist littlebizzy/plugin-blacklist
Disallows bad WordPress plugins
by littlebizzy 2.2.1 · 7mo ago pushed 1mo ago GPL-3.0
11stars
29
WW Login Logger sjinks/wp-login-logger
WordPress plugin to log login attempts
by sjinks no releases pushed 23h ago MIT
6stars
61composer
30
SavedPixel Hidden Access savedpixel/savedpixel-hidden-access
Hide default WordPress login routes behind a private URL and reduce public access to login entry points.
by savedpixel v1.0 · 5mo ago pushed 5mo ago GPL-2.0
7stars
7downloads
Page 1 of 8Next →