Category · recomputed daily
security plugins
1,740 plugins in the directory carry the security tag. This page leads with what has moved in the last 90 days, because a ranked list of the biggest ones is available anywhere.
1,740
plugins
26,823,870+
combined reach
765
released in 90 days
28%
quiet 18 months+
31
movements in 90 days
What moved
Ownership changes, closures and long-silent plugins that shipped again, over a rolling 90-day window recomputed daily. Events older than 90 days drop off as new ones arrive. The part of this category that a directory listing cannot show. Nothing here says anything about intent. Showing the 15 most recent of 31.
| Date | Plugin | Installs | What happened |
|---|---|---|---|
| 27 Oct 2026 | VPN leaks test | 20+ | released after a long silence |
| 27 Oct 2026 | Honk Me – Notifications for Sites, Shops and Forms | fewer than 10 | changed hands |
| 26 Oct 2026 | Honk Me – Notifications for Sites, Shops and Forms | fewer than 10 | reopened |
| 24 Oct 2026 | Login Security – Custom Login URL | fewer than 10 | released after a long silence |
| 24 Oct 2026 | KHALAF Login Access Guard | fewer than 10 | reopened |
| 23 Oct 2026 | Zero Spam for WordPress | 20,000+ | changed hands |
| 23 Oct 2026 | Smart User Slug Hider | 2,000+ | released after a long silence |
| 22 Oct 2026 | Smart User Slug Hider | 2,000+ | changed hands |
| 21 Oct 2026 | Attentive security – Hide Wp Version, Redirect Wp-Admin link | 10+ | changed hands |
| 20 Oct 2026 | Log cleaner for Kadence Security | 7,000+ | released after a long silence |
| 20 Oct 2026 | Ace Login Block | fewer than 10 | released after a long silence |
| 20 Oct 2026 | Honk Me – Notifications for Sites, Shops and Forms | fewer than 10 | closed |
| 15 Oct 2026 | Value-Auth Two Factor and Access Control | 200+ | released after a long silence |
| 14 Oct 2026 | Protect WP Login – Password Protect wp-login.php with Basic Auth | fewer than 10 | released after a long silence |
| 11 Oct 2026 | IP Whitelist | 60+ | released after a long silence |
Most installed
The 50 most installed plugins carrying this tag, ordered by install band, which WordPress.org rounds to one significant digit. Ordering is adoption only. Nothing here is a recommendation, and no link on this page earns anything. The full directory, all categories together, is in the master list.
| Plugin | Installs | Rating | Last release |
|---|---|---|---|
| Wordfence Security – Firewall, Malware Scan, and Login Security Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence. | 5,000,000+ | 4.7★ | 1 month ago |
| Hostinger Tools Simplified WordPress management. Manage site info, maintenance, security, & redirects. | 3,000,000+ | 3.5★ | 17 days ago |
| Jetpack – AI Agents & MCP, Security, Backup & Analytics Connect ChatGPT, Claude, or another AI agent to your site. Plus backup, malware scan, firewall, stats, CDN, and SEO tools in one plugin. | 3,000,000+ | 3.7★ | 11 days ago |
| Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. | 3,000,000+ | 4.9★ | 12 days ago |
| All-In-One Security (AIOS) – Security and Firewall Protect your WordPress site with All-In-One Security (AIOS): easy-to-use login security, a powerful firewall, and much more. | 1,000,000+ | 4.7★ | 8 days ago |
| Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention WordPress login security with brute force protection, Two-factor authentication (2FA/MFA), firewall, IP/country blocking, and login monitoring | 1,000,000+ | 4.8★ | 1 month ago |
| Loginizer Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks. | 1,000,000+ | 4.8★ | 9 days ago |
| Safe SVG Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website. | 1,000,000+ | 4.9★ | 12 days ago |
| Security Optimizer – The All-In-One Protection Plugin Secure your WordPress site from brute-force attacks, threats, malware, and bots. Free to use and easy to set up. | 1,000,000+ | 4.5★ | 24 days ago |
| ManageWP Worker A better way to manage dozens of WordPress websites. | 1,000,000+ | 4.6★ | 3 months ago |
| Kadence Security – Password, Two Factor Authentication, and Brute Force Protection Harden your site security with Login Security, Two-Factor Authentication (2FA), Vulnerability Scanner, Firewall, and more. Formerly iThemes Security. | 700,000+ | 4.6★ | 24 days ago |
| MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites MainWP Child establishes a secure link between your WordPress sites and your self-hosted MainWP Dashboard, simplifying site management. | 700,000+ | 5.0★ | 9 days ago |
| User Role Editor User Role Editor WordPress plugin makes user roles and capabilities changing easy. Edit/add/delete WordPress user roles and capabilities. | 700,000+ | 4.5★ | 12 days ago |
| SiteGuard WP Plugin Adds WordPress login and admin protections, including CAPTCHA, login lock, login alerts, renamed login URLs, and SiteGuard WAF tuning support. | 600,000+ | 4.3★ | 12 days ago |
| Sucuri Security – Auditing, Malware Scanner and Security Hardening The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening. | 600,000+ | 4.2★ | 24 days ago |
| Admin Menu Editor Lets you edit the WordPress admin menu. You can re-order, hide or rename menus, add custom menus and more. | 300,000+ | 4.6★ | 3 months ago |
| Limit Login Attempts Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable. | 300,000+ | 4.6★ | 3.5 years ago · quiet |
| Activity Log – Monitor User and Agent Changes Monitor every change on your WordPress site — who did what, when, and where it came from — for a complete audit trail and stronger security. | 200,000+ | 4.3★ | 10 days ago |
| InfiniteWP Client Install this plugin on unlimited sites and manage them all from a central dashboard. This plugin communicates with your InfiniteWP Admin Panel. | 200,000+ | 4.4★ | 3 months ago |
| Access Governance for WordPress (aka AAM) Access Governance for WordPress. Understand, control, and continuously govern who and what can access your WordPress website. | 100,000+ | 4.2★ | 20 days ago |
| BBQ Firewall – Fast & Powerful Firewall Security The fastest firewall plugin for WordPress. Protect against a wide range of threats with minimal performance impact. | 100,000+ | 4.9★ | 3 months ago |
| CloudSecure WP Security CloudSecure WP Securityは、管理画面とログインURLをサイバー攻撃から守る、国産・日本語対応のセキュリティ対策プラグインです。 簡単な設定だけで、不正アクセスや不正ログインからWordPressを保護し、サイトのセキュリティを高めます。 | 100,000+ | 5.0★ | 24 days ago |
| Anti-Malware Security and Brute-Force Firewall This Anti-Malware scanner searches for Malware, Viruses, and other security threats and vulnerabilities on your server and it helps you fix them. | 100,000+ | 4.9★ | 11 days ago |
| Hide My WP Ghost – Security & Firewall Hide My WP Ghost is a WordPress security plugin that hides WP paths and protects your site with Path Security, Firewall, Brute Force Protection, 2FA | 100,000+ | 4.5★ | 8 days ago |
| Jetpack Protect Free daily vulnerability scans & WordPress security, powered by WPScan (an Automattic brand) and its 60,000+ vulnerability database. No setup needed! | 100,000+ | 4.6★ | 3 months ago |
| NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall A true Web Application Firewall to protect and secure WordPress. | 100,000+ | 4.9★ | 1 month ago |
| Patchstack – WordPress & Plugins Security Patchstack automatically identifies and mitigates security vulnerabilities in WordPress plugins, themes, and core. | 100,000+ | 4.9★ | 3 months ago |
| Two Factor Enable Two-Factor Authentication (2FA) using time-based one-time passwords (TOTP), email, and backup verification codes. | 100,000+ | 4.7★ | 1 month ago |
| WPS Limit Login WPS Limit login limit connection attempts by IP address | 100,000+ | 4.9★ | 2 months ago |
| Defender Security – Malware Scanner, Login Security & Firewall WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more. | 80,000+ | 4.8★ | 1 month ago |
| Stream – Activity Log & Audit Trail Real-time activity log and audit log for WordPress. Track every user action — logins, edits, plugin & settings changes — and get alerts. | 70,000+ | 4.3★ | 2 months ago |
| Stop User Enumeration Helps secure your site against hacking attacks through detecting User Enumeration | 60,000+ | 4.9★ | 15 days ago |
| WP fail2ban – Advanced Security WP fail2ban uses fail2ban to protect your WordPress site. | 60,000+ | 4.2★ | 18 days ago |
| Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter Block spam comments, defend against login attacks, strengthen site security. Anti-spam, brute-force protection & two-factor authentication built in. | 50,000+ | 4.5★ | 10 days ago |
| Login No Captcha reCAPTCHA Adds a Google No Captcha ReCaptcha checkbox to your Wordpress and Woocommerce login, forgot password, and user registration pages. | 50,000+ | 4.5★ | 5 months ago |
| WP Hide & Security Enhancer Protect your website by concealing vulnerable WordPress traces, plugins, themes, login/admin url. 2FA, Captcha, Firewall, Security Headers etc. | 50,000+ | 4.3★ | 1 month ago |
| Companion Auto Update Manage all updates on your WordPress site. Stay in the know with several optional e-mail notifications and logs. For free. | 40,000+ | 4.8★ | 8 months ago |
| Modular DS: Monitor, update, and backup multiple websites Manage all your WordPress sites from one place. Automate updates, backups, uptime monitoring, security, reports, and more. | 40,000+ | 5.0★ | 25 days ago |
| NinjaScanner – Virus & Malware scan A lightweight, fast and powerful virus scanner for WordPress. | 40,000+ | 4.0★ | 3 months ago |
| SecuPress with Simple SSL – Simple and Performant Security Protect your WordPress with SecuPress, analyze and ensure the safety of your website daily. | 40,000+ | 4.1★ | 16 days ago |
| Security Plugin, Firewall & Malware Scanner with Auto Removal Protect WordPress from malware, hackers, brute-force attacks & suspicious traffic. Includes firewall, login security, 2FA & vulnerability checks. | 40,000+ | 4.8★ | 11 days ago |
| underConstruction Creates a 'Coming Soon' page that will show for all users who are not logged in | 40,000+ | 4.5★ | 2.5 years ago · quiet |
| Blackhole for Bad Bots Blackhole is a WordPress security plugin that detects and traps bad bots in a virtual black hole, where they are denied access to your entire site. | 30,000+ | 4.7★ | 3 months ago |
| Kadence Central – Site Management, Backups, Security, and Reporting Manage multiple WordPress sites from one dashboard. | 30,000+ | 4.2★ | 3 months ago |
| Protect Uploads Protect your uploads directory. Prevent browsing, password-protect files, add watermarks, and discourage right-click copying. | 30,000+ | 4.8★ | 1 month ago |
| Simply Static – The Static Site Generator Convert WordPress to static HTML. Boost performance 3-5x. Eliminate security vulnerabilities. Deploy anywhere. | 30,000+ | 4.5★ | 9 days ago |
| WPFront User Role Editor Easily allows you to manage WordPress user roles. You can create, edit, delete and manage capabilities, also copy existing roles. | 30,000+ | 4.5★ | 3 months ago |
| Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning Smart WordPress security that blocks bots automatically, guides you to what matters, and repairs problems — without drowning you in noise. | 30,000+ | 4.8★ | 11 days ago |
| XO Security XO Security is a plugin to enhance login related security. | 30,000+ | 5.0★ | 4 months ago |
| Google Authenticator Google Authenticator for your WordPress blog. | 20,000+ | 4.3★ | 2 months ago |
Nobody at wordpress.org assigns these. A plugin is in this category because its author typed the tag, and it is missing from it for the same reason. All categories