WordPress Security Plugins
Firewalls, malware scanners, login protection, bot blocking, activity logs and two factor login for WordPress sites. 20 plugins.
Top picks
| Product | What it is | Version | Last updated | Plan or price |
|---|---|---|---|---|
| Wordfence | Firewall and Malware Scanner | 9.0.2 | Sep 30, 2026 | Every plan, or $10.39 |
| iThemes Security Pro | WordPress Security Plugin | 9.0.8 | Sep 30, 2026 | Every plan, or $4.79 a year |
| Defender Pro | WordPress Security and Malware Scanning Plugin | 6.3.0 | Sep 22, 2026 | Every plan, or $0.79 a year |
| SecuPress Pro | Security Plugin for WordPress Sites | 2.7.1 | Sep 25, 2026 | Every plan, or $5.59 a year |
| Security Ninja (Premium) | WordPress Security Plugin | 5.305 | Oct 11, 2026 | Every plan, or $3.99 a year |
| WP Cerber Security | Firewall and Malware Scanner Plugin | 9.10 | Oct 14, 2026 | Every plan, or $10.39 a year |
| Hide My WP | Security Plugin That Hides WordPress Paths | 6.2.12 | Feb 15, 2025 | Every plan, or $3.99 |
| Loginizer Pro | Login Security Plugin for WordPress | 2.1.1 | Sep 29, 2026 | Every plan, or $4.79 a year |
| BBQ Pro | Lightweight Firewall Plugin for WordPress | 3.9.1 | Aug 9, 2026 | Every plan, or $4.79 a year |
| Blackhole Pro | Bad Bot Trap and Blocker for WordPress | 3.6.1 | Aug 10, 2026 | Every plan, or $4.79 |
All 20 products
Showing 20 of 20
Plugin
Plugin
Plugin
You have seen 20 of 20
Firewalls and malware scanning
Wordfence is titled a firewall and malware scanner, and WP Cerber Security is described the same way. Defender Pro by WPMU DEV guards your site against hackers, malware and bots. SecuPress Pro guards it against common threats, iThemes Security Pro is a security plugin by iThemes, and Security Ninja (Premium) checks your site for weak spots and helps protect it. BBQ Pro is a lightweight firewall that watches incoming traffic and blocks requests carrying harmful code.
Login, bots and hiding
Loginizer Pro by Softaculous is focused on protecting your login page, and Two Factor Authentication from WPEverest adds a second verification step to your login process. Blackhole Pro by Jeff Starr detects and blocks bad bots. Hide My WP by wpWave conceals the signs of a WordPress installation.
Keeping a record
WP Activity Log by MelaPress keeps an audit trail of what happens on your site. The topic also lists User Activity Log Pro, WP Ultimate Firewall and WooCommerce Two Factor Authentication, which add to the 12 plugins described here.
What to look at when choosing
- The job you need done. A firewall, a malware scan, login protection, a bot trap and an audit log are different jobs, and the descriptions name which one each plugin does.
- Overlap. Plugins with different jobs can sit side by side, such as a firewall and an activity log, while two firewalls would cover the same ground.
- Backups sit next to security. See the backup and migration plugins for the other half.