Security
Hardening, firewalls, login protection, scanning, 2FA.
293 plugins with two or more releases. Show all 1,266
Comment Validator plugin for ClassicPress
Adds logic which parses a honeypot field, called `come_and_get_it` before submission of Brevo's WordPress plugin submission forms.
Adds two-factor authentication to the WordPress login flow.
Rename the WordPress login URL to a custom slug for enhanced security. Includes brute force protection and IP whitelist management.
Security Tools is a comprehensive Must-Use (MU) WordPress plugin designed to provide advanced security management, administrative control, and interface customization capabilities. The plugin operates invisibly, hidden from other administrators while maintaining full…
A simple password protection plugin for WordPress—no usernames, no accounts, just one shared password. Share the password with those who need access and they're in. Perfect for situations where you need quick,…
Display various indicators to let admins know whether the DB connection is encrypted
Taming your WordPress user sessions, to help reduce the chance of session hijacking
Admin toolkit: DB migrate/export, DB cleanup, and security modules (hide login, captcha, antispam contact, rate limit, login log, hardening).
Protects Contact Form 7 forms and WordPress comments from spam submissions with intelligent analysis. Works with or without OpenAI - includes local heuristic detection for cost-effective spam filtering.
Resolves critical security vulnerabilities: WordPress login protection, HTTPOnly cookie implementation, and comprehensive GraphQL security. Addresses security audit findings automatically.
Your friendly WordPress security inspector. Keeps a history of every report, so you can see what is new, what is fixed, and what is next.
Site hardening, admin and media tools, cache refresh, and profile enhancements.
This plugin allows management of a site's Content Security Policy
A core and plugin monitor for WordPress
Security-Hardening für WordPress: User-Enumeration blocken, Feeds aus, Security-Header, WP-Schmodder und XML-RPC raus.
Right Click Blocker PRO – Protection de contenu WordPress : clic droit, copie, DevTools, impression, filigrane, stats temps réel, licences ECDSA, boutique — double canal de mise à jour wp.org/GitHub
Login-Schutz: Versuch-Limit mit IP-Sperre und optionales Verstecken der Login-URL.
WordPress plugin that detects bot swarms as swarms: request classes, swarm metrics, storm score, learned baseline, storm states and alerts. Radar-only in 0.1.
Create a temporary WordPress admin user to provide access on support issues, etc.
Advanced view of activity log and writing activity to file or Elasticsearch for use in security auditing. Especially useful if monitoring multiple instances.
Wordfence security abilities for MCP. Monitor security status, manage blocked IPs, view scan issues, and control lockouts.
WordPress plugin for 2 factor authentication (TOTP and SMS)
Extension for MainWP Dashboard. Checks the child websites plugins for vulnerability using the WordFence intelligence api.