WordPress Brute Force plugins

WordPress login security with brute force protection, Two-factor authentication (2FA/MFA), firewall, IP/country blocking, and login monitoring

SiteGurad WP Plugin is the plugin specialized for the protection against the attack to the management page and login.

This Anti-Malware scanner searches for Malware, Viruses, and other security threats and vulnerabilities on your server and it helps you fix them.

Hide and Secure WP paths with the complete WP security suite for Site Hardening. Includes 8G Firewall, Brute Force protection, and Passkeys.

管理画面とログインURLをサイバー攻撃から守る、国産・日本語対応のセキュリティ対策プラグインです。 かんたんな設定を行うだけで、不正アクセスや不正ログインからあなたのWordPressを保護します。

WP fail2ban uses fail2ban to protect your WordPress site.

Protect WordPress from malware, hackers, brute-force attacks and suspicious traffic. Includes firewall, login security, 2FA, and vulnerability checks.

XO Security is a plugin to enhance login related security.

Helps you to know your website's visitors by tracking their login related information like login/logout time, country, browser and many more.

It blocks spam posts, login attempts and malicious access to the back-end requested from the specific countries, and also prevents zero-day exploit.

Provides comprehensive security during development by protecting your entire site and your admin pages from brute-force attacks.

Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.

Protect your WordPress site or multisite network: firewall, bot & brute-force protection, anti-spam, multi-layer CAPTCHA, optional cloud threat intel.

Protects your login, xmlrpc and RSS feeds pages against DDoS attacks. Denies access to your site from certain countries via CloudFlare.

Enforce WordPress login and password security policies to protect user accounts and prevent unauthorized logins.

The only plugin with 100% brute force protection that doesn't lock out genuine users.

A complete WordPress security firewall: blocks IPs, bots, countries & ASN. Includes an intelligent WAF, Threat Scoring, Geo-Challenge, and 2FA.

PRO Security – Antivirus Scanner, 2-Layer Protection Hide Security, Brute Force Security & Antispam, Security Website and Security Hardening.

Security with firewall, malware scanner, login and spam protection, and encrypted backup. WP Security Plugin includes Login Security, Limit login atte …

Fast, effective, realtime, and crowd sourced protection for WordPress. Easily block bots, brute force attempts, exploits and more without bloat.

This plugin blocks distributed botnet brute-force attacks on your Wordpress installation.

Protection from login, registration and reset-password brute-force attacks. No captcha.

A simple, light-weight collection of tools to harden WordPress security and help mitigate common types of attacks.

Adds an image captcha and honeypot to the WordPress login page

Real-time firewall and anti-spam for WordPress. Block spam bots, comments, logins & registrations. No CAPTCHA, no slowdown.

Protect your WordPress. The ultimate lightweight security suite. Block brute-force attacks, auto-repair infected core files, hide your login URL, set …

BruteGuard is a cloud powered brute force login protection that shields your site against botnet attacks.

Basic hardening: secure headers, login honeypot, user enumeration blocking, generic login errors, rate limiting, and more.

Login Delay Shield slows down brute-force attacks by adding a configurable delay to failed login attempts while keeping successful logins instant.

WP Shieldon is a WordPress security plugin based on Shieldon library, a Web Application Firewall (WAF) for PHP.

Protect WordPress logins and Elementor Login/Forms using Google reCAPTCHA v2 and optional IP-based lockouts.

This plugin enhances the WordPress security.

Enterprise-grade WordPress security: WAF, brute force protection, malware scanner, 2FA, honeypots, AI crawler control, and post-breach recovery.

Log of failed access, pingbacks, user enumeration, disable xmlrpc authenticated methods, kill xmlrpc request on authentication error.

Eight security modules in one lightweight plugin: hide login, brute force lockout, 2FA, audit log, hardening. No bloat, no upsells, GPL.

Proteção avançada WordPress: blacklists automáticas, bloqueio por país (MaxMind), anti força bruta, reCAPTCHA e proteção XML-RPC.

Auditez et sécurisez votre WordPress en 1 clic : 50+ vérifications, protection brute force, masquage login, blocage IP automatique.

This plugin safeguards your website from Layer 7 DDoS attacks and IP stressors by utilizing a rate limiting feature.

login attempts, Firewall, reCAPTCHA, country restriction, Login History, change wp-login.php to anything make sure your site security.

Report login brute force attacks and improve login protection.

Anti-Brute Force, Login Fraud Detector Wordpress plugin is a security plugin that detects and blocks malicious IP addresses attempting to log into Wor …

Save your WordPress sites and servers from certain death during brute force attacks with Project Force Field by Orion Group!

Secure your website with the most comprehensive XML-RPC Settings plugin.

Protect your website against Brute Force Attacks and other malicious requests that have potential to jeopardise the website’s safety or hijacking your …

Get strong protection against brute force attacks with unique two-factor authentication.

This plugin will send an email whenever a someone tries to login via the WordPress login page.

Try it out on your free dummy site:

MAT Firewall is a powerful WordPress security plugin that helps protect your website from malicious attacks, brute force attempts, and unauthorized ac …

User Security Tools provides some improvements to security in wordpress.

Block hackers, bots and brute-force attacks with 2FA, CAPTCHA, login protection, session controls, security tools and more.

HTTP Flood prevents your system against attacks like HTTP Flood, Land Flood, Form Spoofing, Brute Force, Remote Site Scanners and many more on similar …

This plugin modifies your .htaccess file to provide protection from brute force attack bots.

Limit the number of login attempts by ip address.

Simple Login Limit & Protect is designed to protect your WordPress from hackers, with easy configuration, automatically learns from user behaviour …

Login Security with Telegram Alerts protects WordPress logins, stops brute force, logs activity, and sends real-time Telegram alerts.

BruteFort - Rate Limit, Custom Login URL, Geo Blocking & IP Restriction for complete WordPress login security.

Enhance your site's security with Login Obfuscator.

MyFast Login Guard renames your login page, blocks brute-force attempts, and lets you inspect your full server environment — all from one lightweight …

Secure WordPress login with Turnstile, 2FA, hide login, WAF, brute force protection, passkeys, social login, activity logs and branding.

A lightweight WordPress security plugin to prevent brute force attacks and disable XML-RPC.