Secure your WordPress websites with these 35+ Best Free and Premium Security Plugins. These wordpress security plugins will help you to scan your website for any infection or malware. These security plugins for wordpress give you suggestions to make corrections to any vulnerability.
Get a clear picture of your current state of WordPress’ installation and security.
Checkout other WordPress Plugin Collections:
- 80+ Best WordPress Image/Photo Gallery and Slider Plugins
- 35+ Best WordPress Gravity Forms Extension / Addons
- 20+ Best WooCommerce Payment Gateway Plugins
- 30+ Best WordPress Posts, Pages and Domain Redirection Plugins
- Best WordPress Web Hosting 2014
Wordfence starts by checking if your site is already infected. Real-time blocking of known attackers supported.
Website security protection against: XSS, RFI, CRLF, CSRF, Base64, Code Injection and SQL Injection hacking.
WP Security Audit Log
Identify WordPress issues before they become a security problem by keeping an audit log of users and all of the under the hood WordPress activity.
All in One WordPress Security
All in One WordPress Security helps you to protect your wordpress website from virus and malicious attack by folder backup, database backup, setting updates, change wp url, permission set, file scan, traffic check etc.
All In One WP Security & Firewall
A comprehensive, user-friendly, all in one WordPress security and firewall plugin for your site.
6Scan Security is the most comprehensive auto-fix protection your WordPress site can get against hackers.
Acunetix Secure WordPress
Acunetix Secure WordPress scans your WordPress installation for security vulnerabilities.
SECURE shows you exactly how to lock down your WordPress sites against hackers.
SmartFilter Security is simple to use but intelligent, giving users the freedom to enhance their blogs without ever having to worry about or even understand security.
Login Security Solution
A simple way to lock down login security for multisite and regular WordPress installations.
WP Secure Referer Plugin – Dereferer Service
WP Secure Referer Plugin – Dereferer Service automatically changes all external links on the blog to redirect through various anonymization services, used to hide the source (referer) of traffic.
Secure Image Protection
Insert encrypted images into posts or pages using a media button. Upload and embed encrypted images using WordPress native media tools.
Htaccess Secure Files
Htaccess Secure Files plugin allows securing files in WordPress’ media library to be only accessible to users with specific roles, capabilities, or IP addresses.
Siri WP Security
Siri WP Security helps you to avoid direct access to php files and hide wp-login.php and can provide own path for login.
LockerPress – WordPress Security Plugin
Custom Login URL
Change Admin User
Set Hack/Ban Settings
Email Notification of Failed Login Attempts
Receive an optional email alert after a failed login attempt
Receive an optional email alert when new IP addresses are added to Blacklist
Security Ninja Lite
Security Ninja Lite helps you to check your site for security vulnerabilities with one click and get info on many security aspects.
WP Security Login Notification
WP Security Login Notification sends an email with useful data to the administrator each time a user successfully logs in or fails to connect.
WordPress Data Guard [Website Security]
WordPress Data Guard [Website Security] helps you to disable Keyboard Shortcuts which are used for data stealing (like Cut, Copy and Paste), Blacklist IP Addresses and much more.
Protection from login, registration and reset-password brute-force attacks.
Look-See Security Scanner
Search wp-admin/, wp-content/uploads and wp-admin/ with Look-See Security Scanner.
Plugin Security Checker
Plugin Security Checker is a good plugin to check your other WordPress plugins for vulnerability.
WP Login Security and History
With WP Login Security and History, you can protect your login page from Brute-force attacks also you can track login history.
Records every login attempts (failed or successful). Can be used to tell you when a user login
With this plugin you’ll be able to protect your WordPress login page against theft of passwords.
Ultimate Security Checker
Calculation of a letter grade based on how protected your blog is.
SX User Name Security
The plugin changes “Display Name” and “Nickname” to a random value.
perform 31+ security tests including brute-force attacks
check your site for security vulnerabilities and holes
Core Scanner add-on for Security Ninja
scan WP core files with one click
quickly identify problematic files
restore modified files
WP Security Manager
WP Security Manager provides all in one security solutions to your WP site.
Smart Security Tools
Plugin contains collection of tweaks and tools for extra security protection along with Security Advisor that can help you determine what needs to be done.
Confodio Security Audit
WP-Lens – Security and Analysis
Check for account named admin.
Determines if the default table prefix is being used.
MySQL DB username and password strength.
WP Reserve Access – Security Plugin
WP Reserve Access – Security Plugin allows to have independent credentials to site. Also, this plugin can restore deleted admin profile.
Block Double Logins – Protect Your Membership Site
block users from simultaneously using the same WP account
block users from simultaneously logging in to multiple accounts from the same IP
block users who hide behind a proxy
BotPlug – Brute Force & Spam Bot Protection
BotPlug is designed to help you secure and protect your WordPress website from malicious bots & crawlers and brute-force attacks.
More secure wrapper for the WordPress XML-RPC interface.