Plugin
Updated
Really Simple Security Pro
Really Simple Security Pro by Rogier Lankhorst is a WordPress security plugin that brings several protection layers into one dashboard. It covers site hardening, login security, vulnerability scanning, a firewall, security headers and SSL enforcement, so you can secure a site with minimal setup.
- Version
- 9.8.3
- Released
- Sep 14, 2026
- Developer
- Rogier Lankhorst
- Type
- WordPress plugin
- Licence
- GPL
- Included in
- Every plan, or $5.59 a year on its own
What’s new in Really Simple Security Pro 9.8.3
Version 9.8.3 · Sep 14, 2026
Latest
- SecurityFixed a remaining 2FA bypass in XML-RPC authentication.
- SecurityFixed an issue where unauthenticated visitors could bloat the database via the 404 interceptor. Thanks to Naoki Kawahigashi via WPScan for reporting.
- FixedA possible error when processing plugins that were no longer available in Other Plugins.
- ImprovedRemoved SimplyBook.me from onboarding and Other Plugins.
- ImprovedStandardized punctuation in task and notice messages.
What it does
Keeping a WordPress site safe usually means juggling separate tools for logins, firewalls, HTTPS and plugin vulnerabilities. This plugin combines those jobs in one place. It applies over 15 preset hardening settings, such as file permission checks and admin user restrictions, and adds login protection with strong passwords, two-factor authentication and limited login attempts. It also checks passwords against the Have I Been PWNED service to flag credentials that have shown up in known breaches.
Beyond logins, the plugin runs recurring scans of your plugins, themes and WordPress core, then alerts you by email and in the dashboard. You can force updates or quarantine affected components. A firewall blocks traffic by IP address, region, user agent or excessive 404 errors. Security headers such as HSTS, Content Security Policy and Referrer Policy can be configured with help from a learning mode, and SSL tools handle 301 redirects, mixed content fixes and server health checks.
Best for
- Site owners wanting one plugin for WordPress security
- Agencies hardening and monitoring client WordPress sites
- Sites moving from HTTP to HTTPS
Features
Preset WordPress hardening
Apply over 15 preset configurations, including file permission checks and admin user restrictions, to reduce common weak points without editing settings by hand.
Two-factor authentication
Protect user accounts with two-factor authentication, strong password rules and limits on repeated login attempts to slow down brute force attacks.
Compromised password checks
Check user passwords against the Have I Been PWNED service so accounts using credentials exposed in known breaches can be identified.
Recurring vulnerability scans
Scan plugins, themes and WordPress core on a schedule, with email and dashboard alerts plus options to force updates or quarantine affected components.
Traffic blocking firewall
Block unwanted visitors based on IP address, geographic region, user agent or an excessive number of 404 errors.
Security headers with learning mode
Set headers like HSTS, Content Security Policy and Referrer Policy, using a learning mode to help build more complex configurations.
HTTPS enforcement
Force HTTPS with proper 301 redirects, fix mixed content issues and run SSL server health checks to confirm encryption works.
Really Simple Security Pro older versions
- 9.8.2Sep 102 improvements, 7 fixes
- 9.8.1Sep 13 security fixes
- 9.7.0Jul 284 improvements, 3 fixes
- 9.6.1Jul 1
- 9.6.0Jun 10
- 9.5.11May 6
- 9.5.10.1Apr 30
- 9.5.10Apr 14
- 9.5.9Mar 24
- 9.5.8.1Mar 4
Members and buyers of this product can download older versions.
78 older versions in all. If you need one that is not listed, ask support.
Questions about Really Simple Security Pro
Can this plugin help me switch my site to HTTPS?
Yes. It enforces HTTPS using 301 redirects, fixes mixed content so pages load securely, and runs SSL server health checks. It can also apply the HSTS header so browsers keep using the secure connection.
Does it include a firewall?
It does. The firewall can block traffic by IP address, geographic region or user agent. It can also block visitors who trigger an excessive number of 404 errors, which often points to automated probing.
How does it protect user logins?
You can require strong passwords, turn on two-factor authentication and limit login attempts. The plugin also checks passwords against the Have I Been PWNED service to spot credentials found in known data breaches.
Will it tell me if a plugin or theme has a known vulnerability?
Yes. It runs recurring scans of plugins, themes and WordPress core and sends alerts by email and in the dashboard. For affected components, you can force an update or place them in quarantine.
Is Really Simple Security Pro free?
The code of Really Simple Security Pro is licensed under the GPL, so anyone may use, change and share it. GPL Feast is a paid service: a plan or a single purchase gives you the download and automatic updates. The developer's own support, licence key and online services are not included.
Which version of Really Simple Security Pro is this?
Version 9.8.3, released Sep 14, 2026. New versions appear here when the developer publishes them, and members get them as automatic updates.
How do I update Really Simple Security Pro?
Install the free GPL Feast Updater on your site and connect it with your API key. It installs new versions of Really Simple Security Pro automatically and keeps a backup, so you can roll back.
You might also like
