Security

Tamper-evident, MySQL-backed governance audit log for WordPress. SHA-256 hash chain (audit-stream-py compatible), one-click verify, optional forwarding to the Kinetic Gain audit-stream spine. GPL-2.0.

Adds Wordfence → Access Manager: see who is temporarily locked out by Wordfence's failed-login protection, unblock them, or unblock + allowlist their IP for a limited time. Uses Wordfence's own lockouts, settings…

Manage WordPress login customization and role-based access control.

Send event data from your WordPress to tirreno for audit log, detect threats and record filed edit history.

"Block Login: Restrict user access by blocking selected roles from logging in & redirecting to another page. Easy to install & customize.

A next-generation WordPress security framework providing deep hardening, malware detection, integrity monitoring, and guided server-level remediation.

UnveilPass plugin for WordPress — SSO, Agent Gateway, 2FA enforcement

WPMU reCaptcha (A WordPress Multisite Plugin)

An addon for MainWP to configure the Google Security For WordPress plugin from the MainWP Dashboard for each child site.

TrustedWeb Security Agent — Open source WordPress plugin for deep security scanning, malware detection, auto-fix and trust badge verification.

Used to mask our reverse proxy IPs

Generates and manages one-click links that auto-set hashed WP password cookies, logs usage, and includes token names, copy-to-clipboard, and revoked tokens table. Now includes unified, filterable usage logs below the main table.…

Minimal WordPress request firewall. XML-RPC blocking, bad-UA filters, basic injection signatures, login/XML-RPC rate limits, optional HTTPS enforcement, optional security headers, REST/user-enum hardening, HTTP method gate, lightweight file logging. Settings: Settings → GV…

MRN reCAPTCHA Enterprise Manager WordPress plugin

A simple mu-plugins for Wordpress to disable xmlrpc

Comprehensive WordPress REST API security, monitoring, and access control with JWT authentication, rate limiting, and detailed logging.

WordPress plugin to block user login attempts based on email, IP address, or username patterns

WordPress connector for Volance - observe-only form scoring. GPL-2.0-or-later.

This plugin disables XML-RPC API in WordPress 3.5+, which is enabled by default.

Hardened TOTP 2FA for WordPress. TOTP, backup codes, remember device.

Wordpress plugin for security

A structured audit logging plugin for WordPress, designed to track user actions, content changes, and system events.

FlexPress additional security plugin

Rate limit endpoints in the WP-Rest API.

You can remove the XML-RPC pingback headers on your site with this WordPress Plugin.

A WordPress plugin that analyzes post comments and marks malicious comments as spam.

Official WordPress plugin for MailProbe: refuses sign-ups with an email address that cannot receive emails or is disposable, and flags WooCommerce orders with the same problem. Hosted in the EU (France).

Bảo mật cho wordpress

RBL Checker allows anyone to check if an IP address or domain is listed in RBLs. Checks are logged and Admin user can select which RBLs to check.