30 Best Free Security WordPress Plugins

Wordfence

Wordfence includes an endpoint firewall and malware scanner that was built from the ground up to protect WordPress.

 

Sucuri

Sucuri Inc. is a globally recognized authority on website security, with a specialization in WordPress Security.

 

All In One WP Security And Firewall

WordPress itself is a very secure platform. However, a security plugin that enforces many good security practices can help add some extra security and firewall to your site.

 

Cerber Security And Antispam

Defends WordPress against brute force attacks by limiting the number of login attempts through the login form, XML-RPC / REST API requests, or using auth cookies.

 

iThemes Security

IThemes Security (formerly Better WP Security) offers over 30 ways to secure and protect your WordPress site.

 

WP Security Audit Log

With the WP Security Audit Log plugin, you can keep an audit log of everything that happens on your WordPress and WordPress multisite to ensure user productivity, easily spot suspicious behavior before it becomes a WordPress security problem, and have an organized website.

 

WP Hide And Security Enhancer

This is the easy way to completely hide your WordPress core files, login page, theme, and plugin paths from being shown on the front side. This is a vast improvement over Site Security; no one will know you run WordPress.

 

BulletProof

WordPress Security Protection: Malware scanner, Firewall, Login Security, DB Backup, Anti-Spam and more. View the Security feature highlights below. View BulletProof Security feature details under the FAQ help section below.

 

Security And Malware scan

CleanTalk is a cloud security service that protects your website from online threats and provides excellent security instruments to control your website’s security.

 

Hide My WP

Hide My WP is a WordPress Security plugin. It allows you to change and hide WordPress Admin and Login URLs to increase your WordPress security against hackers’ bots.

 

BlogVault

BlogVault is the most reliable backup and restores plugins. Trusted by 220,000 sites and counting, it ensures a stress-free WordPress backup and security solution in a single dashboard.

 

Dessky Security

Dessky Security is an ultralight plugin for basic Security Hardening. It is specially designed not to drain your website’s resources. Once you enable all major security measures, your input is no longer required.

 

Look-see Security Scanner

Look-see Security Scanner is designed to help you quickly and easily spot the file system irregularities that occur when a site is hacked.

 

WebDefender Security

Secure your WordPress website today with the CobWeb Internal Scanner (CWIS, pronounced see-wis), a lightweight antivirus scanner application and an easy-to-use WordPress admin security plugin developed by CobWeb Security Ltd.

 

Centrora

Centrora WordPress Security is an all-in-one security plugin specifically designed to safeguard WordPress users’ websites. It has an integrated firewall, file permissions, a range of powerful scanners, and a backup function, protecting users from malicious hacking and attacks of all kinds.

 

Access Watch

The Access Watch plugin is a traffic analysis and security service. Our technology processes visitor activity on your WordPress website and delivers insights to improve site security and performance.

 

Captcha Bank

Captcha Bank is a powerful WordPress shield that allows you to protect your WordPress website from SPAM.

 

Total Security

The Total Security plugin is a must-have tool for protecting your WordPress installation. The plugin monitors your website for security weaknesses that hackers might exploit and tells you how to fix them easily.

 

XO Security

XO Security is a plugin that enhances login-related security.
This plugin does not write to .htaccess files. Nginx also works.

 

Hide WP Admin and Login

Hide Admin and Login will change and hide the WordPress Admin and Login to increase your WordPress security against hackers and spammers.

 

WP Security Coat

A security plugin meant to relieve you from your security issues on your WordPress website, built to prevent server, PHP/MySQL, and WordPress-based attacks.

 

Shieldfy

Shieldfy is an external shield that loads before your website and filters all requests, passing only trusted non-harmful traffic and blocking other malicious traffic.

 

Don Security

This plugin allows you to set some security improvements to your WordPress site, such as blocking attempts to scan from WPScan and other similar tools.

 

Barbwire Security

This plugin enhances WordPress security.
Effective, such as the brute force attack.

 

PayPal

Scans all site content and returns a report of any insecure PayPal buttons found, as well as a recommendation on securing your PayPal buttons.

 

ThreatPress

ThreatPress is a free, straightforward, super-fast security and monitoring plugin that protects and scans your site for known malware, vulnerabilities, blocklisting, spam injections, and more.

 

WP Scanner

Monitor your site’s load time, performance, and security using WP Scanner. Gain insight into how quickly your site loads for visitors over time and receive suggestions on improving performance.

 

Security Audit

Security Audit is a wrapper around two third-party tools that can help you identify potential vulnerabilities in your site.

 

Crusader Security

Bleeding-edge technology combined with our security expertise has created a one-of-a-kind security suite for your WordPress website that easily nullifies all threats.

 

VA Simple Enhanced Security

This plugin will enhance the security of your WordPress.
This plugin is straightforward.