Plugin Directory

BuddyPress Security Check

Shea Bunge

Combat spam registrations for a BuddyPress-powered site using Google's reCAPTCHA

Reset file and folder permissions

Prakhar Bhatia

A WordPress plugin to reset file permissions to 0644, directory permissions to 0755, and file/folder ownership for security and maintenance purposes.

WPControl – The Easiest Optimization Plugin for WordPress

Syed Balkhi

The easiest way to improve your website's security, performance, and user experience.

Image Protection

TWK Media

Protects images on your WordPress site from being copied or captured, with optional EXIF privacy tools for uploaded media.

Profound Agent Analytics

Profound

Profound Agent Analytics sends lightweight HTTP request logs to Profound's analytics platform for advanced bot detection and traffic analysis.

Malcure Security Suite

Malware Intercept

🔐 All-in-one WordPress security: malware scanner (files+DB), force re-login, force logout, control logins, email-alerts. Cloud-based, light & fast.

reCaptcha by WebDesignBy

webdesignby

Add Google’s simple checkbox reCAPTCHA to WordPress wp-admin login page.

Gravity Forms: GDPR Framework Add-On

Data443 Risk Mitigation, Inc.

The easiest way to make your Gravity Forms GDPR-compliant. Fully documented, extendable and developer-friendly.

DFX Random User IDs

David Marín Carreño (DaveFX)

This WordPress plugin randomizes the user_id for the user created on WordPress setup, removing one potential attack factor from the site.

Simple Access Control

Peter Wooster

A very simple plugin that hides specific pages, posts and menu items from users based on their logged in staus.

Password for WP

get3code

Protect your whole WordPress site with one password. Custom background image, message and colors, cache friendly. Compatible with WordPress 7.

Basic Security: Prevent Cross Site Scripting

Jose Mortellaro

It helps in preventing Cross Site Scripting (XSS) with just a few lines of code.

WP Media File Type Manager

Seerox

WP Media File Type Manager will allow you to manage different file types in Media Library.

wp-bcrypt

harrym

wp bcrypt switches WordPress's password hashes from MD5 to bcrypt, making it harder for them to be brute-forced if they are leaked.

WP Tweaks

Luiz Bills

Several opinionated WordPress tweaks focused in security and performance.

Security Hardener

Marc Armengou

Hardens WordPress with secure headers, login protection, user enumeration blocking, rate limiting, and a built-in security checklist.

QueryWall: Plug'n Play Firewall

4ley

Autopilot protection for your WordPress against malicious URL requests.

DiveWP – Boost Site Performance with Clear, Actionable Steps

Oleg Petrov

AI-assisted WordPress diagnostics, performance checks, security insights, logs, cron monitoring, database health, and more.

Better Passwords

bettersecurity

Stop use of a bad passwords, including those in the Have I Been Pwned? breached password database

PE Category Filter

Pavel Espinal

Modern WordPress plugin for filtering categories from home page with performance optimization and security enhancements.

No unsafe-inline

Giuseppe

No unsafe-inline helps you to build a Content Security Policy avoiding to use 'unsafe-inline' and 'unsafe-hashes'.

eDarpan: Website Protection

Chris Hudson

The most complete website protection plugin for WordPress. Block IPs, disable right-click, prevent copy-paste, block countries, stop spam comments, an …

Expire Password Protected Pages

TG

Description: This plugin will require visitors to type in the password each time they are visiting a password protected page.

REST API Guard

Sean Fisher

Restrict and control anonymous access to the WordPress REST API, with optional JSON Web Token (JWT) authentication.