WordPress security plugins
Browse 1482 security plugins and sort by installs, downloads, ratings, update activity, or maintenance score.
Showing 60 plugins
Active installs
Descending
Wordfence Security – Firewall, Malware Scan, and Login Security(4,931)•Updated 140d ago
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.
5,000,000 installs418,135,546 downloads71/100 • Maintained
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)(8,848)•Updated 105d ago
Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate.
3,000,000 installs212,247,740 downloads76/100 • Maintained
Jetpack – WP Security, Backup, Speed, & Growth(2,402)•Updated 113d ago
Improve your WP security with powerful one-click tools like backup, WAF, and malware scan. Includes free tools like stats, CDN and social sharing.
3,000,000 installs493,632,670 downloads69/100 • Maintained
Hostinger Tools(40)•Updated 106d ago
Simplified WordPress management. Manage site info, maintenance, security, & redirects.
3,000,000 installs17,555,604 downloads50/100 • Maintained
All-In-One Security (AIOS) – Security and Firewall(1,708)•Updated 117d ago
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plugin designed especially for WordPress.
1,000,000 installs37,680,353 downloads63/100 • Maintained
Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention(1,459)•Updated 106d ago
WordPress login security with brute force protection, Two-factor authentication (2FA/MFA), firewall, IP/country blocking, and login monitoring
1,000,000 installs89,501,683 downloads74/100 • Maintained
Loginizer(1,028)•Updated 145d ago
Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
1,000,000 installs30,857,808 downloads64/100 • Maintained
1,000,000 installs27,888,243 downloads51/100 • Maintained
Security Optimizer – The All-In-One Protection Plugin(155)•Updated 138d ago
Secure your WordPress site from brute-force attacks, threats, malware, and bots. Free to use and easy to set up.
1,000,000 installs34,161,830 downloads69/100 • Maintained
Safe SVG(78)•Updated 169d ago
Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
1,000,000 installs13,077,055 downloads46/100 • Maintained
Kadence Security – Password, Two Factor Authentication, and Brute Force Protection(3,987)•Updated 124d ago
Harden your site security with Login Security, Two-Factor Authentication (2FA), Vulnerability Scanner, Firewall, and more. Formerly iThemes Security.
700,000 installs38,576,435 downloads61/100 • Maintained
User Role Editor(287)•Updated 132d ago
User Role Editor WordPress plugin makes user roles and capabilities changing easy. Edit/add/delete WordPress user roles and capabilities.
700,000 installs21,837,789 downloads51/100 • Maintained
MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites(70)•Updated 106d ago
MainWP Child establishes a secure link between your WordPress sites and your self-hosted MainWP Dashboard, simplifying site management.
700,000 installs45,755,687 downloads66/100 • Maintained
Sucuri Security – Auditing, Malware Scanner and Security Hardening(383)•Updated 119d ago
The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.
600,000 installs35,342,099 downloads64/100 • Maintained
SiteGuard WP Plugin(15)•Updated 161d ago
SiteGurad WP Plugin is the plugin specialized for the protection against the attack to the management page and login.
500,000 installs5,882,948 downloads49/100 • Maintained
Admin Menu Editor(311)•Updated 136d ago
Lets you edit the WordPress admin menu. You can re-order, hide or rename menus, add custom menus and more.
300,000 installs8,064,673 downloads51/100 • Maintained
Limit Login Attempts(202)•Updated 1274d ago
Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.
300,000 installs2,291,408 downloads29/100 • Possibly abandoned
MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall(530)•Updated 116d ago
Get Bulletproof Security for your WordPress site. WordPress security plugin packed with comprehensive Firewall, malware scanner, cleaner & more.
200,000 installs18,079,751 downloads71/100 • Maintained
InfiniteWP Client(177)•Updated 216d ago
Install this plugin on unlimited sites and manage them all from a central dashboard. This plugin communicates with your InfiniteWP Admin Panel.
200,000 installs8,321,399 downloads47/100 • Stale
Activity Log – Monitor & Record User Changes(74)•Updated 115d ago
This top rated Activity Log plugin helps you monitor & log all changes and actions on your WordPress site, so you can remain secure and organized.
200,000 installs4,030,095 downloads56/100 • Maintained
Anti-Malware Security and Brute-Force Firewall(783)•Updated 205d ago
This Anti-Malware scanner searches for Malware, Viruses, and other security threats and vulnerabilities on your server and it helps you fix them.
100,000 installs7,704,969 downloads54/100 • Stale
Advanced Access Manager – Access Governance for WordPress(420)•Updated 127d ago
Access Governance for WordPress. Control roles, users, content, admin areas, and APIs to prevent broken access controls and excessive privileges.
100,000 installs7,535,029 downloads51/100 • Maintained
WP Ghost (Hide My WP Ghost) – Security & Firewall(371)•Updated 120d ago
Hide and Secure WP paths with the complete WP security suite for Site Hardening. Includes 8G Firewall, Brute Force protection, and Passkeys.
100,000 installs2,617,344 downloads61/100 • Maintained
NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall(219)•Updated 115d ago
A true Web Application Firewall to protect and secure WordPress.
100,000 installs3,282,527 downloads61/100 • Maintained
Two Factor(209)•Updated 186d ago
Enable Two-Factor Authentication (2FA) using time-based one-time passwords (TOTP), email, and backup verification codes.
100,000 installs1,675,784 downloads57/100 • Stale
BBQ Firewall – Fast & Powerful Firewall Security(158)•Updated 163d ago
The fastest firewall plugin for WordPress. Protect against a wide range of threats with minimal performance impact.
100,000 installs3,374,832 downloads59/100 • Maintained
Jetpack Protect(120)•Updated 172d ago
Free daily vulnerability scans & WordPress security, powered by WPScan (an Automattic brand) and its 60,000+ vulnerability database. No setup needed!
100,000 installs2,436,089 downloads59/100 • Maintained
100,000 installs966,525 downloads22/100 • Possibly abandoned
Login Lockdown & Protection(60)•Updated 169d ago
Protect, lockdown & secure login form by limiting login attempts from the same IP & banning IPs.
100,000 installs2,001,139 downloads56/100 • Maintained
CloudSecure WP Security(2)•Updated 132d ago
管理画面とログインURLをサイバー攻撃から守る、国産・日本語対応のセキュリティ対策プラグインです。 かんたんな設定を行うだけで、不正アクセスや不正ログインからあなたのWordPressを保護します。
100,000 installs858,362 downloads62/100 • Maintained
Defender Security – Malware Scanner, Login Security & Firewall(333)•Updated 176d ago
WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more.
80,000 installs4,118,564 downloads71/100 • Maintained
Wordfence Login Security(26)•Updated 154d ago
Secure your website with Wordfence Login Security, providing two-factor authentication, login and registration CAPTCHA, and XML-RPC protection.
70,000 installs1,316,411 downloads66/100 • Maintained
Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter(369)•Updated 134d ago
Block spam comments, defend against login attacks, strengthen site security. Anti-spam, brute-force protection & two-factor authentication built in.
60,000 installs3,493,420 downloads61/100 • Maintained
WP fail2ban – Advanced Security(71)•Updated 519d ago
WP fail2ban uses fail2ban to protect your WordPress site.
60,000 installs1,992,646 downloads22/100 • Possibly abandoned
Login No Captcha reCAPTCHA(63)•Updated 127d ago
Adds a Google No Captcha ReCaptcha checkbox to your Wordpress and Woocommerce login, forgot password, and user registration pages.
60,000 installs1,408,629 downloads56/100 • Maintained
WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan(1,137)•Updated 111d ago
Lifetime SSL solution - Free SSL certificate & HTTPS redirect, resolve insecure site, fix SSL errors, HTTPS headers, Login Security & Passkey.
50,000 installs3,281,462 downloads74/100 • Maintained
WP Hide & Security Enhancer(275)•Updated 114d ago
Protect your website by concealing vulnerable WordPress traces, plugins, themes, login/admin url. 2FA, Captcha, Firewall, Security Headers etc.
50,000 installs3,464,070 downloads71/100 • Maintained
Stop User Enumeration(130)•Updated 289d ago
Helps secure your site against hacking attacks through detecting User Enumeration
50,000 installs1,352,659 downloads47/100 • Stale
Companion Auto Update(105)•Updated 193d ago
Manage all updates on your WordPress site. Stay in the know with several optional e-mail notifications and logs. For free.
50,000 installs4,199,309 downloads37/100 • Stale
50,000 installs765,477 downloads62/100 • Maintained
Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning(1,035)•Updated 113d ago
Smart WordPress security that blocks bots automatically, guides you to what matters, and repairs problems — without drowning you in noise.
40,000 installs12,765,357 downloads74/100 • Maintained
underConstruction(111)•Updated 936d ago
Creates a 'Coming Soon' page that will show for all users who are not logged in
40,000 installs1,749,841 downloads29/100 • Possibly abandoned
SecuPress with Simple SSL – Simple and Performant Security(108)•Updated 180d ago
Protect your WordPress with SecuPress, analyze and ensure the safety of your website daily.
40,000 installs1,231,904 downloads49/100 • Maintained
Modular DS: Monitor, update, and backup multiple websites(97)•Updated 130d ago
Manage all your WordPress sites from one place. Automate updates, backups, uptime monitoring, security, maintenance reports, and more.
40,000 installs1,146,534 downloads46/100 • Maintained
Patchstack – WordPress & Plugins Security(61)•Updated 161d ago
Patchstack automatically identifies and mitigates security vulnerabilities in WordPress plugins, themes, and core.
40,000 installs620,001 downloads46/100 • Maintained
Timthumb Vulnerability Scanner(13)•Updated 3829d ago
Scans your wp-content directory for vulnerable instances of timthumb.php, and optionally upgrades them to a safe version.
40,000 installs286,655 downloads24/100 • Possibly abandoned
Protect Uploads(12)•Updated 111d ago
Protect your uploads directory. Prevent browsing, add watermarks, disable right-click, and password-protect files. For more information, visit protect …
40,000 installs1,440,341 downloads54/100 • Maintained
FULL – Cliente(4)•Updated 460d ago
Este plugin adiciona novas extensões úteis e conecta-o ao painel da FULL. para ativações de outros plugins
40,000 installs888,619 downloads28/100 • Possibly abandoned
Security Plugin, Firewall & Malware Scanner with Auto Removal(383)•Updated 114d ago
Protect WordPress from malware, hackers, brute-force attacks and suspicious traffic. Includes firewall, login security, 2FA, and vulnerability checks.
30,000 installs2,769,723 downloads70/100 • Maintained
Stop Spammers Classic(243)•Updated 129d ago
A simplified, restored, and preserved version of the original Stop Spammers plugin.
30,000 installs2,629,481 downloads59/100 • Maintained
Simply Static – The Static Site Generator(192)•Updated 110d ago
Convert WordPress to static HTML. Boost performance 3-5x. Eliminate security vulnerabilities. Deploy anywhere.
30,000 installs1,837,675 downloads69/100 • Maintained
Blackhole for Bad Bots(148)•Updated 161d ago
Blackhole is a WordPress security plugin that detects and traps bad bots in a virtual black hole, where they are denied access to your entire site.
30,000 installs924,514 downloads69/100 • Maintained
Maspik – Ultimate Spam Protection(86)•Updated 128d ago
No more fake leads or unwanted submissions — Maspik blocks spam instantly across all forms without using CAPTCHA.
30,000 installs898,157 downloads46/100 • Maintained
WPFront User Role Editor(65)•Updated 133d ago
Easily allows you to manage WordPress user roles. You can create, edit, delete and manage capabilities, also copy existing roles.
30,000 installs970,971 downloads56/100 • Maintained
NinjaScanner – Virus & Malware scan(35)•Updated 113d ago
A lightweight, fast and powerful virus scanner for WordPress.
30,000 installs982,756 downloads56/100 • Maintained
30,000 installs378,977 downloads54/100 • Maintained
Kadence Central – Site Management, Backups, Security, and Reporting(5)•Updated 111d ago
Manage multiple WordPress sites from one dashboard.
30,000 installs1,419,813 downloads52/100 • Maintained
MainWP Dashboard: Self-hosted WordPress Management for Agencies(2,344)•Updated 120d ago
Run updates, backups, security and reporting across all client sites from your own server. Keep data private and prove your value with branded reports …
20,000 installs1,773,495 downloads69/100 • Maintained
BulletProof Security(674)•Updated 132d ago
WordPress Security Protection: Malware scanner, Firewall, Login Security, DB Backup, Anti-Spam...
20,000 installs4,544,184 downloads71/100 • Maintained
Zero Spam for WordPress(143)•Updated 197d ago
No spam, no scams, just seamless experiences with Zero Spam for WordPress - the shield your site deserves.
20,000 installs1,431,829 downloads37/100 • Stale