WpIron

<p><strong>Iron Security</strong> is your WordPress security bodyguard.</p>
<p>It shields your site from brute force attacks, unauthorized admin access, file injections, and common exploits like XML-RPC and REST API abuse. Whether you’re a solo creator or managing client sites, Iron Security delivers essential protection without the performance hit.</p>
<p>🔒 <strong>Don’t wait until your site is compromised. Secure it now — effortlessly.</strong></p>
<p>Iron Security includes real-time brute-force protection, custom login URLs, HTTP headers, session control, malware upload prevention, and much more. All from a single, easy-to-use plugin dashboard.</p>
<p><strong>Protects Against:</strong><br />
– 🔐 Brute Force Attacks (Limit login attempts, 2FA)<br />
– 👮 Unauthorized Admin Access (Custom login URL, admin limit)<br />
– 👤 User Enumeration<br />
– 🎯 Admin Account Targeting (Admin ID & username protection)<br />
– 💣 XML-RPC & REST API Exploits<br />
– 🛡️ Code Injection & PHP Malware Uploads<br />
– 📂 Direct Access to Sensitive Files<br />
– 📛 MIME Sniffing & Content-Type Exploits<br />
– 🖼️ Clickjacking<br />
– 🧬 Cross-Site Scripting (XSS)<br />
– 🌐 Referrer Leakage</p>
<h3>🔐 Key Features</h3>
<h3>🛠 General Hardening</h3>
<ul>
<li>Disable XML-RPC & REST API</li>
<li>Hide WordPress & WooCommerce versions</li>
<li>Block AI & scraping bots</li>
<li>Disable file editor</li>
<li>Enable plugin & core auto-updates</li>
</ul>
<h3>🔍 Security Logs</h3>
<ul>
<li>View detailed logs of login attempts and alerts</li>
<li>Filter logs by IP, message, or date</li>
<li>Audit suspicious activity easily</li>
</ul>
<h3>🔑 Login & Authentication</h3>
<ul>
<li>Custom login/admin URL</li>
<li>Limit login attempts with lockouts</li>
<li>Session timeout for idle users</li>
<li>Limit number of administrators</li>
<li>Block user enumeration</li>
<li>Change default Admin ID and Username</li>
<li>Enable 2FA (Google Authenticator)</li>
</ul>
<h3>🗂 Files & Directory Protection</h3>
<ul>
<li>Block PHP file uploads</li>
<li>Prevent direct access to core/system files</li>
</ul>
<h3>📦 HTTP Security Headers</h3>
<ul>
<li>X-Content-Type-Options</li>
<li>X-Frame-Options</li>
<li>X-XSS-Protection</li>
<li>Strict-Transport-Security</li>
<li>Referrer-Policy</li>
<li>Content-Security-Policy</li>
<li>Permissions-Policy</li>
</ul>
<blockquote>
<p>Iron Security is built for creators who care about speed, simplicity, and security. If you’re not securing your site, you’re risking everything.</p>
</blockquote>
<h3>Credits</h3>
<p>Developed and maintained by <a href="https://wpiron.com" rel="nofollow ugc">WPIron</a></p>
<h3>License</h3>
<p>This plugin is licensed under the GPLv2 or later.</p>


Iron Security – WordPress Security Plugin

Hardening tool that blocks hackers and protect against: Brute Force Attacks, Exploits, Injections, Clickjacking and other important functionalities.

pluginkollektiv

<p><em>AntiVirus</em> is an easy-to-use, safe tool to harden your WordPress site against exploits, malware and spam injections.<br />
You can configure <em>AntiVirus</em> to perform an automated daily scan of your theme files. If the plugin detects any suspicious code injections, it will send out a notification to a previously configured e-mail address.</p>
<p>In case your WordPress site has been hacked, <em>AntiVirus</em> will help you to become aware of the problem very quickly in order for you to take immediate action.</p>
<h3>Features</h3>
<ul>
<li>Scan for suspicious code in the theme files (daily scan with email notifications and manual scan) with an option to mark detected cases as false positive</li>
<li>Checksum verification for WordPress Core files</li>
<li>Optional: Google Safe Browsing for malware and phishing monitoring.</li>
</ul>
<p>A complete documentation is available on the <a href="https://antivirus.pluginkollektiv.org/documentation/" rel="nofollow ugc">AntiVirus website</a>.</p>
<h3>Support</h3>
<ul>
<li>Community support via the <a href="https://wordpress.org/support/plugin/antivirus" rel="ugc">support forums on wordpress.org</a></li>
<li>We don’t handle support via e-mail, Twitter, GitHub issues etc.</li>
</ul>
<h3>Contribute</h3>
<ul>
<li>Active development of this plugin is handled <a href="https://github.com/pluginkollektiv/antivirus" rel="nofollow ugc">on GitHub</a>.</li>
<li>Pull requests for documented bugs are highly appreciated.</li>
<li>If you think you’ve found a bug (e.g. you’re experiencing unexpected behavior), please post at the <a href="https://wordpress.org/support/plugin/antivirus" rel="ugc">support forums</a> first.</li>
<li>If you want to help us translate this plugin you can do so <a href="https://translate.wordpress.org/projects/wp-plugins/antivirus" rel="nofollow ugc">on WordPress Translate</a>.</li>
</ul>
<h3>Credits</h3>
<ul>
<li>Author: <a href="https://sergejmueller.github.io/" rel="nofollow ugc">Sergej Müller</a></li>
<li>Maintainers: <a href="https://pluginkollektiv.org" rel="nofollow ugc">pluginkollektiv</a></li>
</ul>


AntiVirus

Security plugin to protect your blog or website against exploits and spam injections.

Iron Security – WordPress Security Plugin vs AntiVirus