Category · recomputed daily
security plugins
1,534 plugins in the directory carry the security tag. This page leads with what has moved in the last 90 days, because a ranked list of the biggest ones is available anywhere.
1,534
plugins
26,787,540+
combined reach
645
released in 90 days
31%
quiet 18 months+
5
movements in 90 days
What moved
Ownership changes, closures and long-silent plugins that shipped again, over a rolling 90-day window recomputed daily. Events older than 90 days drop off as new ones arrive. The part of this category that a directory listing cannot show. Nothing here says anything about intent.
| Date | Plugin | Installs | What happened |
|---|---|---|---|
| 03 Sep 2026 | Login Alert Notification | 20+ | released after a long silence |
| 03 Sep 2026 | Fullworks Security Scanner | 10+ | released after a long silence |
| 24 Aug 2026 | WPVulnerability | 10,000+ | changed hands |
| 14 Aug 2026 | SMNTCS Disable REST API User Endpoints | 8,000+ | released after a long silence |
| 03 Aug 2026 | A litte more secure | 100+ | released after a long silence |
Most installed
The 50 most installed plugins carrying this tag, ordered by install band, which WordPress.org rounds to one significant digit. Ordering is adoption only. Nothing here is a recommendation, and no link on this page earns anything. The full directory, all categories together, is in the master list.
| Plugin | Installs | Rating | Last release |
|---|---|---|---|
| Wordfence Security – Firewall, Malware Scan, and Login Security Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence. | 5,000,000+ | 4.7★ | 28 days ago |
| Hostinger Tools Simplified WordPress management. Manage site info, maintenance, security, & redirects. | 3,000,000+ | 3.5★ | 13 days ago |
| Jetpack – WP Security, Backup, Speed, & Growth Improve your WP security with powerful one-click tools like backup, WAF, and malware scan. Includes free tools like stats, CDN and social sharing. | 3,000,000+ | 3.7★ | 6 days ago |
| Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. | 3,000,000+ | 4.9★ | 6 days ago |
| All-In-One Security (AIOS) – Security and Firewall Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plugin designed especially for WordPress. | 1,000,000+ | 4.7★ | 25 days ago |
| Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention WordPress login security with brute force protection, Two-factor authentication (2FA/MFA), firewall, IP/country blocking, and login monitoring | 1,000,000+ | 4.8★ | 6 days ago |
| Loginizer Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks. | 1,000,000+ | 4.8★ | 19 days ago |
| Safe SVG Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website. | 1,000,000+ | 4.9★ | today |
| Security Optimizer – The All-In-One Protection Plugin Secure your WordPress site from brute-force attacks, threats, malware, and bots. Free to use and easy to set up. | 1,000,000+ | 4.5★ | 10 days ago |
| ManageWP Worker A better way to manage dozens of WordPress websites. | 1,000,000+ | 4.6★ | 17 days ago |
| Kadence Security – Password, Two Factor Authentication, and Brute Force Protection Harden your site security with Login Security, Two-Factor Authentication (2FA), Vulnerability Scanner, Firewall, and more. Formerly iThemes Security. | 700,000+ | 4.6★ | 1 month ago |
| MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites MainWP Child establishes a secure link between your WordPress sites and your self-hosted MainWP Dashboard, simplifying site management. | 700,000+ | 5.0★ | 13 days ago |
| User Role Editor User Role Editor WordPress plugin makes user roles and capabilities changing easy. Edit/add/delete WordPress user roles and capabilities. | 700,000+ | 4.5★ | 13 days ago |
| SiteGuard WP Plugin Adds WordPress login and admin protections, including CAPTCHA, login lock, login alerts, renamed login URLs, and SiteGuard WAF tuning support. | 600,000+ | 4.3★ | 19 days ago |
| Sucuri Security – Auditing, Malware Scanner and Security Hardening The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening. | 600,000+ | 4.2★ | 2 months ago |
| Admin Menu Editor Lets you edit the WordPress admin menu. You can re-order, hide or rename menus, add custom menus and more. | 300,000+ | 4.6★ | 19 days ago |
| Limit Login Attempts Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable. | 300,000+ | 4.6★ | 3 years ago · quiet |
| Activity Log – Monitor & Record User Changes Monitor every change on your WordPress site — who did what, when, and where it came from — for a complete audit trail and stronger security. | 200,000+ | 4.3★ | 5 days ago |
| InfiniteWP Client Install this plugin on unlimited sites and manage them all from a central dashboard. This plugin communicates with your InfiniteWP Admin Panel. | 200,000+ | 4.4★ | 19 days ago |
| Advanced Access Manager – Access Governance for WordPress Access Governance for WordPress. Control roles, users, content, admin areas, and APIs to prevent broken access controls and excessive privileges. | 100,000+ | 4.2★ | 3 months ago |
| BBQ Firewall – Fast & Powerful Firewall Security The fastest firewall plugin for WordPress. Protect against a wide range of threats with minimal performance impact. | 100,000+ | 4.9★ | 29 days ago |
| CloudSecure WP Security CloudSecure WP Securityは、管理画面とログインURLをサイバー攻撃から守る、国産・日本語対応のセキュリティ対策プラグインです。 簡単な設定だけで、不正アクセスや不正ログインからWordPressを保護し、サイトのセキュリティを高めます。 | 100,000+ | 5.0★ | 11 days ago |
| Anti-Malware Security and Brute-Force Firewall This Anti-Malware scanner searches for Malware, Viruses, and other security threats and vulnerabilities on your server and it helps you fix them. | 100,000+ | 4.9★ | 2 months ago |
| WP Ghost (Hide My WP Ghost) – Security & Firewall Hide and Secure WP paths with the 8G Firewall, Brute Force protection and Passkeys. AI security explanations available with a subscription. | 100,000+ | 4.5★ | 4 days ago |
| Jetpack Protect Free daily vulnerability scans & WordPress security, powered by WPScan (an Automattic brand) and its 60,000+ vulnerability database. No setup needed! | 100,000+ | 4.6★ | 26 days ago |
| NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall A true Web Application Firewall to protect and secure WordPress. | 100,000+ | 4.9★ | 22 days ago |
| Two Factor Enable Two-Factor Authentication (2FA) using time-based one-time passwords (TOTP), email, and backup verification codes. | 100,000+ | 4.8★ | 5 months ago |
| WPS Limit Login WPS Limit login limit connection attempts by IP address | 100,000+ | 4.9★ | 24 days ago |
| Defender Security – Malware Scanner, Login Security & Firewall WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more. | 80,000+ | 4.8★ | 14 days ago |
| Stream – Activity Log & Audit Trail Real-time activity log and audit log for WordPress. Track every user action — logins, edits, plugin & settings changes — and get alerts. | 70,000+ | 4.3★ | 7 days ago |
| Login No Captcha reCAPTCHA Adds a Google No Captcha ReCaptcha checkbox to your Wordpress and Woocommerce login, forgot password, and user registration pages. | 60,000+ | 4.5★ | 3 months ago |
| Patchstack – WordPress & Plugins Security Patchstack automatically identifies and mitigates security vulnerabilities in WordPress plugins, themes, and core. | 60,000+ | 4.9★ | 1 month ago |
| WP fail2ban – Advanced Security WP fail2ban uses fail2ban to protect your WordPress site. | 60,000+ | 4.2★ | 16 months ago |
| Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter Block spam comments, defend against login attacks, strengthen site security. Anti-spam, brute-force protection & two-factor authentication built in. | 50,000+ | 4.5★ | 18 days ago |
| Stop User Enumeration Helps secure your site against hacking attacks through detecting User Enumeration | 50,000+ | 4.9★ | 4 days ago |
| WP Hide & Security Enhancer Protect your website by concealing vulnerable WordPress traces, plugins, themes, login/admin url. 2FA, Captcha, Firewall, Security Headers etc. | 50,000+ | 4.4★ | 25 days ago |
| Companion Auto Update Manage all updates on your WordPress site. Stay in the know with several optional e-mail notifications and logs. For free. | 40,000+ | 4.8★ | 6 months ago |
| Modular DS: Monitor, update, and backup multiple websites Manage all your WordPress sites from one place. Automate updates, backups, uptime monitoring, security, reports, and more. | 40,000+ | 5.0★ | 3 days ago |
| SecuPress with Simple SSL – Simple and Performant Security Protect your WordPress with SecuPress, analyze and ensure the safety of your website daily. | 40,000+ | 4.1★ | 2 months ago |
| Security Plugin, Firewall & Malware Scanner with Auto Removal Protect WordPress from malware, hackers, brute-force attacks & suspicious traffic. Includes firewall, login security, 2FA & vulnerability checks. | 40,000+ | 4.8★ | 7 days ago |
| underConstruction Creates a 'Coming Soon' page that will show for all users who are not logged in | 40,000+ | 4.5★ | 2.5 years ago · quiet |
| Blackhole for Bad Bots Blackhole is a WordPress security plugin that detects and traps bad bots in a virtual black hole, where they are denied access to your entire site. | 30,000+ | 4.7★ | 17 days ago |
| Kadence Central – Site Management, Backups, Security, and Reporting Manage multiple WordPress sites from one dashboard. | 30,000+ | 4.2★ | 19 days ago |
| NinjaScanner – Virus & Malware scan A lightweight, fast and powerful virus scanner for WordPress. | 30,000+ | 4.1★ | 22 days ago |
| Protect Uploads Protect your uploads directory. Prevent browsing, add watermarks, disable right-click, and password-protect files. For more information, visit protect … | 30,000+ | 4.8★ | 10 days ago |
| Simply Static – The Static Site Generator Convert WordPress to static HTML. Boost performance 3-5x. Eliminate security vulnerabilities. Deploy anywhere. | 30,000+ | 4.5★ | 10 days ago |
| Stop Spammers Classic A simplified, restored, and preserved version of the original Stop Spammers plugin. | 30,000+ | 4.4★ | 2 months ago |
| WPFront User Role Editor Easily allows you to manage WordPress user roles. You can create, edit, delete and manage capabilities, also copy existing roles. | 30,000+ | 4.5★ | 19 days ago |
| Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning Smart WordPress security that blocks bots automatically, guides you to what matters, and repairs problems — without drowning you in noise. | 30,000+ | 4.8★ | 11 days ago |
| XO Security XO Security is a plugin to enhance login related security. | 30,000+ | 5.0★ | 2 months ago |
Nobody at wordpress.org assigns these. A plugin is in this category because its author typed the tag, and it is missing from it for the same reason. All categories