Security
Hardening, firewalls, login protection, scanning, 2FA.
1,266 repositories, including 973 with fewer than two releases. Show released plugins only
AI Agent Activity Lens is a WordPress security and observability plugin for monitoring REST API activity authenticated through Application Passwords.
Logs suspicious requests: Cloudflare bypasses, probing for secret files, direct PHP access, XML-RPC calls and scanner user agents.
Logs administrative actions (logins, content saves, plugin/form/snippet changes) to a plain-text log file.
Blocks requests that bypass Cloudflare by requiring a secret token header. For hosts that offer no stronger origin protection.
High-performance, zero-bloat security and anti-malware hardening engine for the Gary Wallage ecosystem. Provides request firewalling, uploads protection, user enumeration shielding, lightweight malware scanning, and security headers without database bloat.
Professional drag-and-drop password protection for WordPress pages with multiple password groups and stunning gradient themes.
Restricts site access to Cloudflare IP ranges, refreshes those ranges daily via cron, and provides an admin Tools page to view ranges and forbidden-request logs.
WordPress must-use plugin: closes the default anonymous surface (XML-RPC, user enumeration, fingerprints, comments, login errors, application passwords). Same file on every site nitida runs.
Plugin Guard is a powerful security plugin designed to protect your WordPress site from unauthorized plugin
Advanced WordPress security plugin with unified protection engine for Indonesian market
WordPress plugin that prohibits non-admin logins. Useful for dev sites that have a full database copy of production (including user logins) so that standards users don't login to dev.
Sistem login halaman custom untuk WordPress dengan user mandiri, session khusus, dan redirect berbeda untuk setiap user. Dibuat oleh Hipnolink Team.
Audit log plugin for WordPress — tracks user activity, logins, post/page deletions and provides a WP-CLI command for security auditing.
Plugin de WordPress que añade un endpoint REST de login que devuelve un token JWT.
Force user login to view pages, unless within a whitelisted ip range.
Wordpress plugin that uses Bitcoin Lightning or Nostr to Eliminate Comment Spam
WordPress REST API lockdown, forensic tracing, and automated spam containment.
Hyperfocused login security. CAPTCHA, brute-force lockout, geo-blocking, 2FA, honeypot, and edge WAF - all from one screen. 100% free.
WP-Login Guardian is an advanced WordPress security plugin that protects your website from brute-force attacks, unauthorized login attempts, username enumeration, and malicious IPs. It combines login protection, two-factor authentication (2FA), activity monitoring,…