Category · recomputed daily
firewall plugins
228 plugins in the directory carry the firewall tag. This page leads with what has moved in the last 90 days, because a ranked list of the biggest ones is available anywhere.
228
plugins
9,716,340+
combined reach
150
released in 90 days
11%
quiet 18 months+
1
movements in 90 days
What moved
Ownership changes, closures and long-silent plugins that shipped again, over a rolling 90-day window recomputed daily. Events older than 90 days drop off as new ones arrive. The part of this category that a directory listing cannot show. Nothing here says anything about intent.
| Date | Plugin | Installs | What happened |
|---|---|---|---|
| 23 Oct 2026 | Zero Spam for WordPress | 20,000+ | changed hands |
Most installed
The 50 most installed plugins carrying this tag, ordered by install band, which WordPress.org rounds to one significant digit. Ordering is adoption only. Nothing here is a recommendation, and no link on this page earns anything. The full directory, all categories together, is in the master list.
| Plugin | Installs | Rating | Last release |
|---|---|---|---|
| Wordfence Security – Firewall, Malware Scan, and Login Security Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence. | 5,000,000+ | 4.7★ | 1 month ago |
| All-In-One Security (AIOS) – Security and Firewall Protect your WordPress site with All-In-One Security (AIOS): easy-to-use login security, a powerful firewall, and much more. | 1,000,000+ | 4.7★ | 7 days ago |
| Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention WordPress login security with brute force protection, Two-factor authentication (2FA/MFA), firewall, IP/country blocking, and login monitoring | 1,000,000+ | 4.8★ | 1 month ago |
| Security Optimizer – The All-In-One Protection Plugin Secure your WordPress site from brute-force attacks, threats, malware, and bots. Free to use and easy to set up. | 1,000,000+ | 4.5★ | 23 days ago |
| Sucuri Security – Auditing, Malware Scanner and Security Hardening The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening. | 600,000+ | 4.2★ | 23 days ago |
| Anti-Spam, Spam FireWall by CleanTalk Advanced antispam for comments, registrations & contact forms. No CAPTCHA, plus email validation and honeypot. We catch spam others miss! | 200,000+ | 4.8★ | 8 days ago |
| BBQ Firewall – Fast & Powerful Firewall Security The fastest firewall plugin for WordPress. Protect against a wide range of threats with minimal performance impact. | 100,000+ | 4.9★ | 3 months ago |
| Anti-Malware Security and Brute-Force Firewall This Anti-Malware scanner searches for Malware, Viruses, and other security threats and vulnerabilities on your server and it helps you fix them. | 100,000+ | 4.9★ | 10 days ago |
| Hide My WP Ghost – Security & Firewall Hide My WP Ghost is a WordPress security plugin that hides WP paths and protects your site with Path Security, Firewall, Brute Force Protection, 2FA | 100,000+ | 4.5★ | 7 days ago |
| Login Lockdown & Protection Protect, lockdown & secure login form by limiting login attempts from the same IP & banning IPs. | 100,000+ | 4.3★ | 1 month ago |
| MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall Get Bulletproof Security for your WordPress site. WordPress security plugin packed with comprehensive Firewall, malware scanner, cleaner & more. | 100,000+ | 4.4★ | 7 days ago |
| NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall A true Web Application Firewall to protect and secure WordPress. | 100,000+ | 4.9★ | 1 month ago |
| Patchstack – WordPress & Plugins Security Patchstack automatically identifies and mitigates security vulnerabilities in WordPress plugins, themes, and core. | 100,000+ | 4.9★ | 3 months ago |
| Defender Security – Malware Scanner, Login Security & Firewall WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more. | 80,000+ | 4.8★ | 1 month ago |
| Security Plugin, Firewall & Malware Scanner with Auto Removal Protect WordPress from malware, hackers, brute-force attacks & suspicious traffic. Includes firewall, login security, 2FA & vulnerability checks. | 40,000+ | 4.8★ | 10 days ago |
| Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning Smart WordPress security that blocks bots automatically, guides you to what matters, and repairs problems — without drowning you in noise. | 30,000+ | 4.8★ | 9 days ago |
| Zero Spam for WordPress No spam, no scams, just seamless experiences with Zero Spam for WordPress - the shield your site deserves. | 20,000+ | 4.1★ | 14 days ago |
| Forget Spam Comment The ultimate solution to stop spam comments in the default commenting system of WordPress | 9,000+ | 5.0★ | 17 months ago |
| IP Geo Block It blocks spam posts, login attempts and malicious access to the back-end requested from the specific countries, and also prevents zero-day exploit. | 7,000+ | 4.2★ | 7.5 years ago · quiet |
| Security Ninja – WordPress Security & Firewall WordPress security plugin: free 8G firewall/WAF, 50+ tests, vulnerability/core scanning, events logging, AI reports. | 7,000+ | 4.7★ | 9 days ago |
| RSFirewall! Based on the success of the most popular firewall for Joomla!, RSFirewall! is now available to protect your WordPress website as well. | 4,000+ | 5.0★ | 1 month ago |
| Advanced IP Blocker A complete WordPress security firewall: blocks IPs, bots, countries & ASN. Includes an intelligent WAF, Threat Scoring, Geo-Challenge, and 2FA. | 3,000+ | 4.9★ | 10 days ago |
| BotBlocker Security – Complete security platform Complete security platform for everyday: block bots, brute-force, viruses, spam, fake crawlers. WAF, 2FA, no-malware, proactive defense. | 3,000+ | 5.0★ | 26 days ago |
| Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… Premium WordPress Security - 100% FREE: Firewall, 2FA, Security Headers, Login and Malware Protection, File Monitor, Security Audit & more | 3,000+ | 5.0★ | 11 days ago |
| Injection Guard This plugin blocks all unauthorized and irrelevant requests through query strings and provides extended session tracking and capability audit. | 1,000+ | 5.0★ | 4 months ago |
| Atlant Security Enterprise-grade WordPress security: WAF, brute force protection, malware scanner, 2FA, honeypots, AI crawler control, and post-breach recovery. | 700+ | 5.0★ | 11 days ago |
| Atomic Edge Security – Firewall, Malware Scan and Login Security WordPress firewall with cloud WAF rules, malware scanning, 2FA, vulnerability checks, IP blocking, and real-time security logs. | 700+ | 5.0★ | 1 month ago |
| Site Lockdown Security Audit, protect, monitor, firewall, and secure WordPress with premium tools at no cost. | 700+ | 5.0★ | 4 months ago |
| Snitch Network monitor for WordPress. Connection overview for monitoring and controlling outgoing data traffic. | 700+ | 4.0★ | 8 months ago |
| WebTotem Security WebTotem is a SaaS which provides powerful tools for securing and monitoring your website in one place in easy and flexible way. | 700+ | 4.2★ | 2 months ago |
| Security Safe This security plugin helps you quickly audit, harden, and secure your WordPress website. | 600+ | 5.0★ | 8 months ago |
| Easy IP Blocker Quickly block unwanted IPs in your WP site with CDN/proxy-aware IP detection | 400+ | 5.0★ | 6 months ago |
| BitFire Security – Firewall, Malware Scanner, Bot Blocker, Login Protection Free WordPress firewall, bot blocking, login protection, and malware scanning. See suspicious traffic and investigate threats from your dashboard. | 300+ | 5.0★ | 1 month ago |
| WEDOS | Protection & Cache Performance Protect your WordPress website with WEDOS Global: cloud WAF, DDoS protection, CDN and page cache, set up from WordPress. | 300+ | 3.8★ | 7 days ago |
| Deactivate XML-RPC on WordPress This plugin will completely disable or deactivates XML-RPC on your WordPress installation. This will prevent any brute force attacks to your website u … | 200+ | — | 11 years ago · quiet |
| Malcure Security Suite 🔐 All-in-one WordPress security: malware scanner (files+DB), force re-login, force logout, control logins, email-alerts. Cloud-based, light & fast. | 200+ | 5.0★ | 13 months ago |
| QueryWall: Plug'n Play Firewall Autopilot protection for your WordPress against malicious URL requests. | 200+ | 5.0★ | 8 years ago · quiet |
| SAR One Click Security Adds some extra security to your WordPress with only one click. | 200+ | 5.0★ | 20 months ago · quiet |
| Spam Master Real-time firewall and anti-spam for WordPress. Block spam bots, comments, logins & registrations. No CAPTCHA, no slowdown. | 200+ | 4.2★ | 3 months ago |
| Protector – Malware Removal, Firewall & Core Repair Protect your WordPress. The ultimate lightweight security suite. Block brute-force attacks, auto-repair infected core files, hide your login URL, set … | 200+ | 5.0★ | 6 months ago |
| Limit Login Attempts (Spam Protection) Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable. | 200+ | 3.9★ | 17 months ago |
| All in One Content Protector & Security Find and fix security problems: a site scanner, vulnerability and file change alerts, login and bot protection, and safe fixes you can undo. | 100+ | 5.0★ | 14 days ago |
| Anti-Hacker – Security Plugin Anti-Hacker protects your Wordpress against hackers attacks, hiding sensitive information that would be used to exploit your site, detecting and fixin … | 100+ | 5.0★ | 1.5 years ago · quiet |
| Bottle Bottle is a bot throttling plugin. | 100+ | — | 9 days ago |
| Fail2WP WordPress security plugin. Requires WordPress 6.2+ and PHP 7.4+. | 100+ | 5.0★ | 18 days ago |
| Polar Mass Advanced IP Blocker Automatically block threats at the network level by forwarding Wordfence-detected IPs to Cloudflare. | 100+ | 3.7★ | 18 months ago |
| ReportedIP Hive: Firewall, Brute Force Protection, 2FA and Anti-Spam Firewall, limit login attempts, 2FA with passkeys and anti-spam for comments and forms without CAPTCHA. Optional IP blocklist. GDPR-first. | 100+ | — | 7 days ago |
| WP Guardian – Security Hardening Checklist & Lightweight Firewall For site owners who want an honest hardening checklist, not a heavy security suite: what to fix in WordPress, and what to ask your host for. | 100+ | 5.0★ | 28 days ago |
| WP Shieldon – WordPress Firewall WP Shieldon is a WordPress security plugin based on Shieldon library, a Web Application Firewall (WAF) for PHP. | 100+ | 3.7★ | 3 years ago · quiet |
| Zero Budget Bot Shield Free, lightweight WordPress plugin that blocks bots by country and prevents abuse via repeated 404 errors. Perfect for small organizations. | 100+ | — | 10 months ago |
Nobody at wordpress.org assigns these. A plugin is in this category because its author typed the tag, and it is missing from it for the same reason. All categories