Change your login URL for something like https://example.com/login and stop login brute-force attempts.
Plugin directory
security plugins
WordPress plugins for security. Launch any one in a live sandbox in seconds.
Optimize your site instantly with one-click activation. WP Extra offers easy fixes and features for WordPress.
This plugin provides the functionality for Reflected XSS and Self-XSS.
Get alerted via email of file changes on your WordPress sites. No false positives!
Duplicate post, post order, email via SMTP, code snippets, disable gutenberg, child theme generator, svg support, disable XMLRPC,…
Enable/Disable XML-RPC for all or based on IP list, also you can control pingback and Unset X-Pingback from…
Protect Your WordPress Site From Clickjacking Attacks by Adding the X-Frame-Options Header and Owasp's Legacy Browser Frame Breaking…
Protect WordPress website against brute force attacks. Limit rate of login attempts.
Peace of mind that your site is secure and running smoothly. Performance monitoring, security checks, and instant alerts…
Based on the success of the most popular firewall for Joomla!, RSFirewall! is now available to protect your…
Simple Login Lockdown prevents brute force login attacks/attempts on your WordPress installation.
Protect WordPress login, registration, comment and BuddyPress registration forms with Google's No CAPTCHA reCAPTCHA.
Deter members from sharing login credentials: restrict simultaneous logins for the same user.
Protects your login, xmlrpc and RSS feeds pages against DDoS attacks. Denies access to your site from certain…
WP fail2ban Blocklist is a collaborative preemptive blocklist for WordPress.
Enable easily HSTS on your website.
Secure Your WordPress Site with Cutting-Edge Protection
An advanced security plugin that blocks website visitors by country, with additional features like blacklisting, logging blocked attempts,…
Plugin for configuring Content Security Policy headers for your site. Allows different CSP headers for admin, logged inn…
Staatic lets you create and deploy a streamlined static version of your WordPress site.
Lock Down Admin plugin secure your WordPress admin panel. It locks the wp-admin url and if this plugin…
Use Cloudflare's free geolocation service to restrict access to your site's login page.
All things Cloudflare (caching, flexible SSL, Turnstile, settings, rules, analytics, media in R2, image transforms [AVIF, WebP], secure…
Manage all your WordPress sites in one place - updates, uptime, backups & security.