Plug into possibility
Add new features or connect your favorite tools with thousands of plugins — available on all paid WordPress.com plans.
hardening
78 plugins
SMEPlan Security ShieldScheduled security scanning (files/DB/config), baseline/integrity checks, safe quarantine & rollback, and hardening for WordPress.
StaticGuardReduce the public WordPress attack surface with a verified static copy. Elementor pages, galleries, lightboxes and classic forms remain available.
Rooted Dev Studio Security ToolkitPractical WordPress hardening, two-factor authentication, login protection, file monitoring, and transparent security checks.
CodeCanvas GuardRecovery-first WordPress security with protected login, 2FA, hardening, scanning, repair, monitoring, and activity logs.
Delta Dev Comment LockdownLock down the WordPress comment attack surface with layered protections while preserving existing comment data.
Kwistech SecureTwelve local hardening controls with an audit trail. No account, no telemetry, no third-party requests, nothing to configure elsewhere.
Keel Defaults39 sane WordPress defaults, each one a switch you can see and turn off — security, updates, privacy, UX, and performance.
Papy3D Security GuardA modular, self-hosted WordPress security suite with no external CAPTCHA or TOTP service.
BadgerScanSee your site the way an attacker does and the way only an admin can, reconciled into one honest A to F grade.
Sitemap GuardianFree, practical security monitoring and hardening for WordPress.
Aegistha Security CheckupYour site's security, in plain English. See your real risks, honestly prioritized, and fix the safe ones in one click. No fear, no jargon.
H3SEC Guard - Security HardeningLightweight WordPress security plugin focused on hardening, explainable risk scoring, activity logging, and a lightweight malware/integrity scan.
Controla: Secure your siteKeep track of your WordPress site's security and health by connecting it to Controla.
Open24 SecuritySecurity hardening for WordPress and WooCommerce: lock down the REST API, protect the login, hide version info and add security headers.
Locktura SecurityAll-in-one WordPress security suite with local firewall, login protection, anti-spam controls, hardening, monitoring, and alerts.
Xerotact SHIELD-X SecurityShared-hosting security with WAF logging, opt-in enforcement, malware scanning, login protection, hardening, backups, and audit tools.
Scudo SecurityEnvironment-aware security: firewall, malware & integrity scan, brute-force protection and 2FA — safety-first, with previews and rollback.
WAF Manager for CloudflareDeploy five battle-tested Cloudflare WAF rules to any zone in one click — straight from WordPress. No expression language required.
Aardwolf Security ScannerFree WordPress security scanner. Audit your site for vulnerabilities, weak settings and exposed files, with a clear fix for every issue found.
Zen Site SecuritySSL in one click plus security hardening: 301 HTTPS redirect, mixed content fixer, HSTS, security headers, SameSite cookies, attack-surface hardening.