Plugin Directory

Two Factor

WordPress.org

Enable Two-Factor Authentication (2FA) using time-based one-time passwords (TOTP), email, and backup verification codes.

Jetpack Protect

Automattic

Free daily vulnerability scans & WordPress security, powered by WPScan (an Automattic brand) and its 60,000+ vulnerability database. No setup needed!

Advanced Access Manager – Access Governance for WordPress

AAM Plugin

Access Governance for WordPress. Control roles, users, content, admin areas, and APIs to prevent broken access controls and excessive privileges.

Hide My WP Ghost – Security & Firewall

John Darrel

Hide My WP Ghost is a WordPress security plugin that hides WP paths and protects your site with Path Security, Firewall, Brute Force Protection, 2FA

Defender Security – Malware Scanner, Login Security & Firewall

WPMU DEV - Your All-in-One WordPress Platform

WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more.

Stream – Activity Log & Audit Trail

XWP

Real-time activity log and audit log for WordPress. Track every user action — logins, edits, plugin & settings changes — and get alerts.

WP fail2ban – Advanced Security

invisnet

WP fail2ban uses fail2ban to protect your WordPress site.

Patchstack – WordPress & Plugins Security

Patchstack

Patchstack automatically identifies and mitigates security vulnerabilities in WordPress plugins, themes, and core.

Login No Captcha reCAPTCHA

Robert Peake

Adds a Google No Captcha ReCaptcha checkbox to your Wordpress and Woocommerce login, forgot password, and user registration pages.

Stop User Enumeration

fullworks

Helps secure your site against hacking attacks through detecting User Enumeration

Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter

Themeisle

Block spam comments, defend against login attacks, strengthen site security. Anti-spam, brute-force protection & two-factor authentication built in.

WP Hide & Security Enhancer

nsp-code

Protect your website by concealing vulnerable WordPress traces, plugins, themes, login/admin url. 2FA, Captcha, Firewall, Security Headers etc.

Companion Auto Update

Papin Schipper

Manage all updates on your WordPress site. Stay in the know with several optional e-mail notifications and logs. For free.

Modular DS: Monitor, update, and backup multiple websites

Modular DS

Manage all your WordPress sites from one place. Automate updates, backups, uptime monitoring, security, reports, and more.

Security Plugin, Firewall & Malware Scanner with Auto Removal

CleanTalk Inc

Protect WordPress from malware, hackers, brute-force attacks & suspicious traffic. Includes firewall, login security, 2FA & vulnerability checks.

SecuPress with Simple SSL – Simple and Performant Security

SecuPress

Protect your WordPress with SecuPress, analyze and ensure the safety of your website daily.

underConstruction

Garrett Grimm

Creates a 'Coming Soon' page that will show for all users who are not logged in

NinjaScanner – Virus & Malware scan

nintechnet

A lightweight, fast and powerful virus scanner for WordPress.

Protect Uploads

Protect Uploads

Protect your uploads directory. Prevent browsing, add watermarks, disable right-click, and password-protect files. For more information, visit protect …

Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning

Paul

Smart WordPress security that blocks bots automatically, guides you to what matters, and repairs problems — without drowning you in noise.

Simply Static – The Static Site Generator

Simply Static

Convert WordPress to static HTML. Boost performance 3-5x. Eliminate security vulnerabilities. Deploy anywhere.

WPFront User Role Editor

Syam Mohan

Easily allows you to manage WordPress user roles. You can create, edit, delete and manage capabilities, also copy existing roles.

XO Security

ishitaka

XO Security is a plugin to enhance login related security.

Kadence Central – Site Management, Backups, Security, and Reporting

Nexcess

Manage multiple WordPress sites from one dashboard.