Plugin Directory

DFX Random User IDs

David Marín Carreño (DaveFX)

This WordPress plugin randomizes the user_id for the user created on WordPress setup, removing one potential attack factor from the site.

WP Tweaks

Luiz Bills

Several opinionated WordPress tweaks focused in security and performance.

Simple Access Control

Peter Wooster

A very simple plugin that hides specific pages, posts and menu items from users based on their logged in staus.

reCaptcha by WebDesignBy

webdesignby

Add Google’s simple checkbox reCAPTCHA to WordPress wp-admin login page.

Reset file and folder permissions

Prakhar Bhatia

A WordPress plugin to reset file permissions to 0644, directory permissions to 0755, and file/folder ownership for security and maintenance purposes.

QueryWall: Plug'n Play Firewall

4ley

Autopilot protection for your WordPress against malicious URL requests.

Admin Optimizer – Performance, Security & Site Cleanup

yipresser

Database cleaner, redirect manager, custom code snippets, SMTP email, 2FA, XML sitemap, duplicate post, custom post types, and more — all in one WordP …

Atlant Security

Alex

Enterprise-grade WordPress security: WAF, brute force protection, malware scanner, 2FA, honeypots, AI crawler control, and post-breach recovery.

Better Passwords

bettersecurity

Stop use of a bad passwords, including those in the Have I Been Pwned? breached password database

Honeypot Guard – Silent Anti-Spam

MDigital

Anti-spam protection for forms, signups, and comments using advanced honeypot techniques. No CAPTCHAs, no user friction.

Blizhost CloudCache Purge – Speed, Security, and Optimization

Blizhost

Automatic Cache Clearing and CloudCache Integration to Boost Speed and Protect Your Site with Enhanced Security.

No unsafe-inline

Giuseppe

No unsafe-inline helps you to build a Content Security Policy avoiding to use 'unsafe-inline' and 'unsafe-hashes'.

WP Media File Type Manager

Seerox

WP Media File Type Manager will allow you to manage different file types in Media Library.

Limit Login Attempts (Spam Protection)

wp-buy

Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.

DiveWP – Boost Site Performance with Clear, Actionable Steps

Oleg Petrov

Learn how your site performs: clear, plain-English insights on performance, security, and best practices.

Lockora Security Audit

Guido Schad

Lockora Security Audit checks WordPress security posture, hardening, core integrity, vulnerabilities, and optional AI reports.

Expire Password Protected Pages

TG

Description: This plugin will require visitors to type in the password each time they are visiting a password protected page.

PE Category Filter

Pavel Espinal

Modern WordPress plugin for filtering categories from home page with performance optimization and security enhancements.

SAR One Click Security

Samuel Aguilera

Adds some extra security to your WordPress with only one click.

Profound Agent Analytics

Profound

Profound Agent Analytics sends lightweight HTTP request logs to Profound's analytics platform for advanced bot detection and traffic analysis.

Specify a Vary: Accept-Encoding Header

lithiumsixteen

This plugin fixes a "Vary: Accept-Encoding Header" message and boosts website performance.

eDarpan: Website Protection

Chris Hudson

The most complete website protection plugin for WordPress. Block IPs, disable right-click, prevent copy-paste, block countries, stop spam comments, an …

HTTP Basic Auth

Grzegorz Rola

Basic Auth for Wordpress.

Old Core Files

Maor Chasen

Increase your WordPress security by deleting old core files that exist in the filesystem before hackers exploit them for attacks.