Security
Hardening, firewalls, login protection, scanning, 2FA.
1,266 repositories, including 973 with fewer than two releases. Show released plugins only
Security and maintenance controls for WordPress: hide update noise, restrict risky tools, and safely switch users for testing.
Allow disabling of admin menu items, & plugin, theme chaning / installations / deleting / updating
A comprehensive security system designed to intercept attacks before they reach your site and camouflage your WordPress instance, making it invisible to automated scanners and hackers.
Продвинутая система безопасности: блокировка IP, защита wp-login.php и xmlrpc.php, блокировка опасных файлов и ботов с поддержкой ASN, автоматическая блокировка при брутфорс атаках
A multi-site aware, WordPress mu-plugin to enforce WordPress Two-Factor, a 2FA plugin, security for all user roles at the point of registration.
LocaSentinel provides geolocation-based access control, impossible travel detection with email OTP verification, proxy blocking, anti-spam path rate limiting, and comment spam filtering for WordPress using the IP2Location.io API with the help of…
Free WordPress 2FA plugin with 30-day trusted devices. TOTP RFC 6238 compatible with any authenticator app.
这个wordpress插件可以很好地管理访问站点的ip地址，可以知道IP地址用户代理（是不是正规浏览器代理头），访问哪些路径，对于恶意的IP你可以选择拉黑，可以有效防止dos攻击
The ultimate all-in-one toolkit to secure, optimize, and grow your WordPress website. A self-hosted alternative to Jetpack with no external service requirements.
SafeGrd Backup for WordPress: database and files, encrypted on your server, stored locked against deletion and test-restored on a schedule.
WordPress passkey 2FA for admins: sign in with Face ID, Touch ID or a security key, with optional passwordless login. Works with the Two Factor plugin and its WebAuthn provider. GPL-2.0.
WordPress login monitor: admin login alerts, failed-attempt bursts, new-admin detection. Telegram + email. No lockouts.
WordPress Plugin: Enhanced two-factor authentication with an authenticator app, email verification, backup codes, and a secure login process from sxtmedia.
WordPress plugin for securely sharing passwords and sensitive information via encrypted, time-limited links. Features AES-256-CBC encryption, automatic expiration, rate limiting, and a clean UI. Perfect for developers, sysadmins, and teams who need…
Stop bots on your WordPress forms — no CAPTCHA required.
Yandex SmartCaptcha для входа и регистрации WordPress
WordPress security plugin with WhatsApp Two-Factor Authentication (2FA) powered by WAMS API – enhance login security, prevent unauthorized access, and protect your website.
AI-powered spam filter add-on for Throws SPAM Away (WordPress plugin).
W3P Admin Login is an easy-to-use WordPress and ClassicPress plugin that allows you to safely change your website’s admin login URL to anything you want.