99/100
OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA)
Protect your forms from spam with 99.9% accuracy - no CAPTCHA, no JavaScript, no tracking. Trusted by 3.5M+ websites.
Curated collection
Best Security tools
Compare 171 quality-filtered Security tools using public popularity, activity, licensing and source data.
99/100
Prevent XSS Vulnerability
This WP plugin blocks XSS by encoding harmful URL characters & safely handling HTML in $_GET. Customizable settings for enhanced website security.
99/100
SP Move Login
Move your WordPress login page to protect it from bots. This plugin contains the Move Login module from SecuPress. Other security modules are availabl …
99/100
Stop XML-RPC Attacks
Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.
99/100
Melapress File Monitor
Get email alerts for file and permission changes on your WordPress sites. No false positives!
98/100
Manage XML-RPC
Enable/Disable XML-RPC for all or based on IP list, also you can control pingback and Unset X-Pingback from HTTP headers.
98/100
WPMasterToolKit (WPMTK) – All in one plugin
Duplicate post, post order, email via SMTP, code snippets, disable gutenberg, child theme generator, svg support, disable XMLRPC, and more...
N
98/100
No CAPTCHA reCAPTCHA
Protect WordPress login, registration, comment and BuddyPress registration forms with Google's No CAPTCHA reCAPTCHA.
98/100
RSFirewall!
Based on the success of the most popular firewall for Joomla!, RSFirewall! is now available to protect your WordPress website as well.
98/100
Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms
Protect your WordPress website from brute force attacks by limiting the number of failed login attempts. Improve security and stop bots.
98/100
WP Anti-Clickjack
Protect Your WordPress Site From Clickjacking Attacks by Adding the X-Frame-Options Header and Owasp's Legacy Browser Frame Breaking Script.
S
98/100
Simple Login Lockdown
Simple Login Lockdown prevents brute force login attacks/attempts on your WordPress installation.
C
97/100
Chaterm
Open source AI terminal for cloud and infrastructure management, enabling you to deploy, troubleshoot, and automate services using natural language and intellig
97/100
HSTS Ready
Enable easily HSTS on your website.
97/100
WP fail2ban Blocklist
WP fail2ban Blocklist is a collaborative preemptive blocklist for WordPress.
97/100
BotBlocker Security – Firewall & Bot Protection
Stop bots, brute force, spam, and fake crawlers before they reach WordPress. Three-layer firewall, 9 CAPTCHAs, FCrDNS, 2FA. Setup in 60 seconds.
97/100
Expire User Passwords
Require certain users to change their passwords on a regular basis.
P
97/100
Protection Against DDoS
Protects your login, xmlrpc and RSS feeds pages against DDoS attacks. Denies access to your site from certain countries via CloudFlare.
97/100
DefendWP Firewall
Get instant protection against vulnerabilities disclosed by security companies.
97/100
Lock Down Admin
Lock Down Admin plugin secure your WordPress admin panel. It locks the wp-admin url and if this plugin is activated then user can't login in the …
W
97/100
WP Author Slug
Add a layer of security and prevent your login name from being shown in the author archive's URL.
97/100
WP-WebAuthn
WP-WebAuthn enables passwordless login through FIDO2 and U2F devices like Passkey, FaceID or Windows Hello for your site.
97/100
CrowdSec
This plugin blocks detected attackers or displays them a captcha to check they are not bots.
97/100
Dam Spam
Spam protection for WordPress registration, login, comments, and contact forms.