WordPress security plugins
Browse 1333 security plugins and sort by installs, downloads, ratings, update activity, or maintenance score.
Showing 60 plugins
Active installs
Descending
Wordfence Security – Firewall, Malware Scan, and Login Security(4,863)•Updated 121d ago
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.
5,000,000 installs407,355,943 downloads71/100 • Maintained
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)(8,816)•Updated 20d ago
Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate.
3,000,000 installs207,334,473 downloads91/100 • Actively maintained
Jetpack – WP Security, Backup, Speed, & Growth(2,389)•Updated 4d ago
Improve your WP security with powerful one-click tools like backup, WAF, and malware scan. Includes free tools like stats, CDN and social sharing.
3,000,000 installs486,865,257 downloads96/100 • Actively maintained
Hostinger Tools(30)•Updated 12d ago
Simplified WordPress management. Manage site info, maintenance, security, & redirects.
3,000,000 installs17,161,243 downloads81/100 • Actively maintained
Limit Login Attempts Reloaded – Login Security, 2FA, Brute Force Protection & Firewall(1,446)•Updated 11d ago
Stop password guessing attacks, secure WooCommerce, block bad IPs, block by countries (Pro), and add email 2FA. Lightweight with better performance.
2,000,000 installs83,313,880 downloads76/100 • Actively maintained
All-In-One Security (AIOS) – Security and Firewall(1,699)•Updated 26d ago
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plugin designed especially for WordPress.
1,000,000 installs36,265,583 downloads84/100 • Actively maintained
Loginizer(1,023)•Updated 4d ago
Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
1,000,000 installs30,160,684 downloads78/100 • Actively maintained
1,000,000 installs27,399,643 downloads75/100 • Actively maintained
Security Optimizer – The All-In-One Protection Plugin(153)•Updated 20d ago
Secure your WordPress site from brute-force attacks, threats, malware, and bots. Free to use and easy to set up.
1,000,000 installs32,337,434 downloads75/100 • Actively maintained
Safe SVG(77)•Updated 6d ago
Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
1,000,000 installs12,854,757 downloads80/100 • Actively maintained
Solid Security – Password, Two Factor Authentication, and Brute Force Protection(3,982)•Updated 21d ago
Harden your site security with Login Security, Two-Factor Authentication (2FA), Vulnerability Scanner, Firewall, and more. Formerly iThemes Security.
700,000 installs37,693,056 downloads78/100 • Actively maintained
User Role Editor(287)•Updated 139d ago
User Role Editor WordPress plugin makes user roles and capabilities changing easy. Edit/add/delete WordPress user roles and capabilities.
700,000 installs21,418,494 downloads51/100 • Maintained
MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites(70)•Updated 6d ago
MainWP Child establishes a secure link between your WordPress sites and your self-hosted MainWP Dashboard, simplifying site management.
700,000 installs43,166,407 downloads90/100 • Actively maintained
Sucuri Security – Auditing, Malware Scanner and Security Hardening(383)•Updated 4d ago
The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.
600,000 installs34,000,515 downloads80/100 • Actively maintained
SiteGuard WP Plugin(15)•Updated 3d ago
SiteGurad WP Plugin is the plugin specialized for the protection against the attack to the management page and login.
600,000 installs5,198,528 downloads68/100 • Actively maintained
Admin Menu Editor(311)•Updated 59d ago
Lets you edit the WordPress admin menu. You can re-order, hide or rename menus, add custom menus and more.
400,000 installs7,833,794 downloads68/100 • Actively maintained
Limit Login Attempts(202)•Updated 1112d ago
Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.
300,000 installs2,284,168 downloads29/100 • Possibly abandoned
MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall(520)•Updated 28d ago
Get Bulletproof Security for your WordPress site. WordPress security plugin packed with comprehensive Firewall, malware scanner, cleaner & more.
200,000 installs17,564,527 downloads89/100 • Actively maintained
InfiniteWP Client(177)•Updated 53d ago
Install this plugin on unlimited sites and manage them all from a central dashboard. This plugin communicates with your InfiniteWP Admin Panel.
200,000 installs8,255,992 downloads68/100 • Actively maintained
Activity Log – Monitor & Record User Changes(74)•Updated 524d ago
This top rated Activity Log plugin helps you monitor & log all changes and actions on your WordPress site, so you can remain secure and organized.
200,000 installs4,007,792 downloads32/100 • Possibly abandoned
Anti-Malware Security and Brute-Force Firewall(781)•Updated 42d ago
This Anti-Malware scanner searches for Malware, Viruses, and other security threats and vulnerabilities on your server and it helps you fix them.
100,000 installs7,660,916 downloads80/100 • Actively maintained
Advanced Access Manager – Access Governance for WordPress(420)•Updated 43d ago
Access Governance for WordPress. Control roles, users, content, admin areas, and APIs to prevent broken access controls and excessive privileges.
100,000 installs7,412,915 downloads80/100 • Actively maintained
WP Ghost (Hide My WP Ghost) – Security & Firewall(371)•Updated 5d ago
Hide and Secure WP paths with the complete WP security suite for Site Hardening. Includes 8G Firewall, Brute Force protection, and Passkeys.
100,000 installs2,531,734 downloads89/100 • Actively maintained
NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall(219)•Updated 18d ago
A true Web Application Firewall to protect and secure WordPress.
100,000 installs3,183,388 downloads74/100 • Actively maintained
Two Factor(202)•Updated 24d ago
Enable Two-Factor Authentication (2FA) using time-based one-time passwords (TOTP), email, and backup verification codes.
100,000 installs1,608,228 downloads82/100 • Actively maintained
BBQ Firewall – Fast & Powerful Firewall Security(156)•Updated 24d ago
The fastest firewall plugin for WordPress. Protect against a wide range of threats with minimal performance impact.
100,000 installs3,272,626 downloads87/100 • Actively maintained
Jetpack Protect(120)•Updated 9d ago
Free daily vulnerability scans & WordPress security, powered by WPScan (an Automattic brand) and its 60,000+ vulnerability database. No setup needed!
100,000 installs2,390,674 downloads77/100 • Actively maintained
100,000 installs944,558 downloads44/100 • Stale
Login Lockdown & Protection(60)•Updated 6d ago
Protect, lockdown & secure login form by limiting login attempts from the same IP & banning IPs.
100,000 installs1,972,985 downloads90/100 • Actively maintained
CloudSecure WP Security(2)•Updated 7d ago
管理画面とログインURLをサイバー攻撃から守る、国産・日本語対応のセキュリティ対策プラグインです。 かんたんな設定を行うだけで、不正アクセスや不正ログインからあなたのWordPressを保護します。
100,000 installs698,583 downloads86/100 • Actively maintained
Defender Security – Malware Scanner, Login Security & Firewall(330)•Updated 13d ago
WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more.
90,000 installs4,088,473 downloads83/100 • Actively maintained
WP fail2ban – Advanced Security(71)•Updated 356d ago
WP fail2ban uses fail2ban to protect your WordPress site.
70,000 installs1,980,371 downloads44/100 • Stale
Wordfence Login Security(25)•Updated 460d ago
Secure your website with Wordfence Login Security, providing two-factor authentication, login and registration CAPTCHA, and XML-RPC protection.
70,000 installs1,246,561 downloads32/100 • Possibly abandoned
Titan Anti-spam & Security(369)•Updated 40d ago
Block spam comments, defend against login attempts, and strengthen site security with anti-spam, brute-force protection, and two-factor authentication …
60,000 installs3,443,031 downloads70/100 • Actively maintained
Login No Captcha reCAPTCHA(63)•Updated 783d ago
Adds a Google No Captcha ReCaptcha checkbox to your Wordpress and Woocommerce login, forgot password, and user registration pages.
60,000 installs1,371,676 downloads26/100 • Possibly abandoned
WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan(1,132)•Updated 16d ago
Lifetime SSL solution - Free SSL certificate & HTTPS redirect, resolve insecure site, fix SSL errors, SSL score, Easiest SSL & Security plugin.
50,000 installs3,123,961 downloads92/100 • Actively maintained
WP Hide & Security Enhancer(275)•Updated 45d ago
Protect your website by concealing vulnerable WordPress traces, plugins, themes, login/admin url. 2FA, Captcha, Firewall, Security Headers etc.
50,000 installs3,374,355 downloads60/100 • Actively maintained
Stop User Enumeration(130)•Updated 126d ago
Helps secure your site against hacking attacks through detecting User Enumeration
50,000 installs1,324,202 downloads59/100 • Maintained
Companion Auto Update(105)•Updated 30d ago
Manage all updates on your WordPress site. Stay in the know with several optional e-mail notifications and logs. For free.
50,000 installs4,176,995 downloads77/100 • Actively maintained
50,000 installs705,434 downloads22/100 • Possibly abandoned
Shield: Blocks Bots, Protects Users, and Prevents Security Breaches(1,032)•Updated 46d ago
Shield stops bot attacks before they hack your site. Bots CAN be stopped. Shield stops them.
40,000 installs12,651,935 downloads83/100 • Actively maintained
underConstruction(111)•Updated 773d ago
Creates a 'Coming Soon' page that will show for all users who are not logged in
40,000 installs1,746,837 downloads19/100 • Possibly abandoned
SecuPress with Simple SSL – Simple and Performant Security(108)•Updated 17d ago
Protect your WordPress with SecuPress, analyze and ensure the safety of your website daily.
40,000 installs1,217,812 downloads87/100 • Actively maintained
Modular DS: Monitor, update, and backup multiple websites(96)•Updated 40d ago
Manage all your WordPress sites from one place. Automate updates, backups, uptime monitoring, security, maintenance reports, and more.
40,000 installs1,043,215 downloads65/100 • Actively maintained
Patchstack – WordPress & Plugins Security(61)•Updated 104d ago
Patchstack automatically identifies and mitigates security vulnerabilities in WordPress plugins, themes, and core.
40,000 installs567,861 downloads46/100 • Maintained
Timthumb Vulnerability Scanner(13)•Updated 3667d ago
Scans your wp-content directory for vulnerable instances of timthumb.php, and optionally upgrades them to a safe version.
40,000 installs286,655 downloads24/100 • Possibly abandoned
Protect Uploads(12)•Updated 113d ago
Protect your uploads directory. Prevent browsing, add watermarks, disable right-click, and password-protect files. For more information, visit protect …
40,000 installs1,386,535 downloads54/100 • Maintained
FULL – Cliente(4)•Updated 297d ago
Este plugin adiciona novas extensões úteis e conecta-o ao painel da FULL. para ativações de outros plugins
40,000 installs888,619 downloads40/100 • Stale
BulletProof Security(674)•Updated 133d ago
WordPress Security Protection: Malware scanner, Firewall, Login Security, DB Backup, Anti-Spam...
30,000 installs4,517,029 downloads61/100 • Maintained
Login Security, FireWall, Malware removal by CleanTalk(379)•Updated 7d ago
Brute force, Login security & Two Factor Auth (2FA). Limit login. Malware & Vulnerabilities scan. FireWall. Enterprise ready security plugin.
30,000 installs2,653,075 downloads93/100 • Actively maintained
Stop Spammers Classic(243)•Updated 55d ago
A simplified, restored, and preserved version of the original Stop Spammers plugin.
30,000 installs2,591,447 downloads78/100 • Actively maintained
Simply Static – The Static Site Generator(192)•Updated 5d ago
Convert WordPress to static HTML. Boost performance 3-5x. Eliminate security vulnerabilities. Deploy anywhere.
30,000 installs1,720,507 downloads93/100 • Actively maintained
Blackhole for Bad Bots(148)•Updated 31d ago
Blackhole is a WordPress security plugin that detects and traps bad bots in a virtual black hole, where they are denied access to your entire site.
30,000 installs891,023 downloads78/100 • Actively maintained
Maspik – Ultimate Spam Protection(83)•Updated 5d ago
No more fake leads or unwanted submissions — Maspik blocks spam instantly across all forms without using CAPTCHA.
30,000 installs862,187 downloads80/100 • Actively maintained
WPFront User Role Editor(65)•Updated 139d ago
Easily allows you to manage WordPress user roles. You can create, edit, delete and manage capabilities, also copy existing roles.
30,000 installs965,615 downloads56/100 • Maintained
NinjaScanner – Virus & Malware scan(34)•Updated 4d ago
A lightweight, fast and powerful virus scanner for WordPress.
30,000 installs941,603 downloads70/100 • Actively maintained
30,000 installs369,601 downloads72/100 • Actively maintained
Solid Central – Site Management, Backups, Security, and Reporting(5)•Updated 61d ago
Manage multiple WordPress sites from one dashboard.
30,000 installs1,383,247 downloads61/100 • Actively maintained
MainWP Dashboard: Self-hosted WordPress Management for Agencies(2,341)•Updated 6d ago
Run updates, backups, security and reporting across all client sites from your own server. Keep data private and prove your value with branded reports …
20,000 installs1,709,812 downloads96/100 • Actively maintained
Login With Ajax – Fast Logins, 2FA, Redirects(166)•Updated 138d ago
Add beautiful login forms with smooth AJAX login/registration effects, 2FA support, custom redrection options and many more login-related features!
20,000 installs1,128,548 downloads49/100 • Maintained