“hardening”

VGT Security Lockdown is not a conventional security plugin. It is a modular interceptor—an autonomous security core that embeds itself deep within the WordPress runtime environment upon first launch and enforces a…

Check your WordPress website for headers that are common for security purposes.

use custom login slug for wordpress

Refuerzo de seguridad en un solo archivo: límite de intentos de acceso, error genérico en el acceso, sesiones más cortas, XML-RPC y pings cerrados, usuarios menos visibles, cabeceras de seguridad, escaneo diario…

Wordpress security plug-in

RoniPass turns a practical WordPress security checklist into enforceable controls, visibility, and clear remediation guidance. It is intentionally conservative: the plugin applies safe application-level protections and reports infrastructure changes that should remain…

A next-generation WordPress security framework providing deep hardening, malware detection, integrity monitoring, and guided server-level remediation.

Minimal WordPress request firewall. XML-RPC blocking, bad-UA filters, basic injection signatures, login/XML-RPC rate limits, optional HTTPS enforcement, optional security headers, REST/user-enum hardening, HTTP method gate, lightweight file logging. Settings: Settings → GV…

A secure, modernized fork of the Advanced Tabs Block plugin. Features PHP 8.2+ strict typing, security hardening, and a clean OOP architecture.

A simple mu-plugins for Wordpress to disable xmlrpc

Wordpress plugin for security

Advanced WordPress Technical SEO Engine for Indexing, Security, and Core Web Vitals Optimization. Built for high-performance and automated indexing.

FlexPress additional security plugin

Rate limit endpoints in the WP-Rest API.

Bảo mật cho wordpress

Must-use WordPress plugins installed on all Maple Creative sites via Pressable account mu-plugins. Public on purpose: Pressable fetches files by URL.

Disables the WP JSON REST API 'users' endpoint.

Lightweight WordPress anti-spam plugin using invisible honeypot and time-trap validation for WPForms and Contact Form 7. Designed for cybersecurity and secure web form hardening.

Simple Wordpress plugin to disable the "Forgot password" feature

Agency-ready WordPress toolkit with maintenance mode, custom login hardening, SMTP, redirects, branding, and built-in TOTP 2FA.

Configure the Simple Performance for WordPress plugin on each connected child site directly from the MainWP Dashboard. Manage core optimizations, REST API restrictions, hardening, fonts, and WooCommerce tweaks per site.

Plugin de segurança para WordPress com diversas medidas de proteção.

A lightweight WordPress plugin that improves basic site security using hooks and filters.

Lightweight WordPress must-use plugin for agency-standard hardening. Disables comments, restricts REST API with plugin namespace whitelist, blocks XML-RPC abuse, removes emoji scripts, disables author archives and application passwords, strips version info, and…

Atlasbaz Security Auditor helps WordPress site owners understand, measure, and improve their security posture through auditing, scoring, monitoring, and actionable recommendations.

Provides security updates and additional features for WordPress CMS websites. Learn more ›

Disables autocomplete on the WordPress login form

Lightweight WordPress security plugin that blocks self-healing drop-in/MU-plugin malware, rogue admin creation, theme functions.php injection, and XML-RPC attacks.

Lightweight WordPress security plugin — login page rename, math CAPTCHA, IP whitelist, brute-force lockout, force logout, security headers, disable XML-RPC & user enumeration, and activity log. Zero external dependencies. All features individually…

Security focused WordPress plugin