“hardening”

A plugin for WordPress to restrict information passed via the WordPress HTTP API. Not affiliated in any way, shape, or form with WordPress.org or Automattic.

Browser security utilities for WordPress/Altis

Helps keeping WordPress websites secure.

A WordPress plugin for managing access to the WP REST API.

Disable WordPress XML-RPC via actions and filters.

WordPress plugin to limit the Access-Control-Allow-Origin header to only allowed origins.

Enable WordPress features: SVG uploads and more

Composer setup for 2FA Login Security tooling

A WordPress plugin which allows you to customize the nonce generation and validation.

Low Level Firewall Plugin for WordPress

Enable CRON behind basic auth.

A WordPress plugin that lightens the WP AJAX routine and directs the requests to front-end rather than admin back-end.

[WordPress Plug-in] Killer Pads is a plugin like security pads for "prevention is better than cure". It activates the default configuration of security and operational efficiency to WordPress websites.

WordPress plugin: configurable password complexity and mandatory rotation for privileged accounts.

Security Suite for WordPress REST API (Anti-Reconnaissance & Hardening).

This plugin disables password login for all users, allowing only authentication via other methods (e.g. SSO).

Security & protection improvements: login event history, prevent login brute force, hide backend, update status API

This plugin hides the WordPress version number by removing the generator meta tag and replacing ver query parameter from enqueued scripts and styles with the file modification time.

Disable all WordPress core REST endpoints: posts, pages, and attachments