26 plugins tagged with hardening
Hardens and protects your site by locking down login, REST API, XML‑RPC, file editor, and applying HTTP security headers.
Adds some extra security to your WordPress with only one click.
Basic hardening: secure headers, login honeypot, user enumeration blocking, generic login errors, rate limiting, and more.
Secure HTTP headers - Essential, and easy.
Dessky Security is the ultralight plugin for basic Security Hardening. It is specially designed not to drain any resources from your website.
A simple way to clean and secure WordPress by disabling unnecessary features like comments, XML-RPC, and RSS feeds.
Connect your site to Webfiable (webfiable.com) to track config health and get security recommendations. Public early access (white march). Free.
🛡️ Enterprise-grade WordPress security made simple. Implement military-standard HTTP security headers with zero technical knowledge required.
One place for site security and site performance. Secure and optimize your site to perform better. WM Secure and Optimize
A lightweight, zero configuration plugin that removes all WordPress version output from your site for improved security and cleaner markup.
Security posture report for WordPress — 30+ checks, prioritized risks, and a printable report. Get a clear picture in minutes.
Simple one-click WordPress security. Protect your site in 30 seconds.
ShadowScan Guard local WordPress hardening and basic diagnostics, with optional ShadowScan portal connection for managed features.
PF Secure Toolkit is a lightweight, modular plugin to harden WordPress by disabling unnecessary features.
Add safe, modern HTTP security headers with optional strict cross-origin protections and a simple admin UI.
Create a private login URL and hide /wp-login.php with stealth 404s. Logged-out /wp-admin/ visits redirect to your homepage.
All-in-one WordPress security with brute-force protection, hardening controls, and a clear failed login audit log.
WordPress security scanner with 36 checks, malware scanning, core integrity verification, remediation, and 23 MCP abilities.
Put your WordPress site in read-only mode — block persistent changes while keeping the site browsable until an administrator disables the freeze.
A basic security plugin for WordPress 4.x, 5.0 or higher. You can selectively disable unused features in WordPress core...
TotalWeb strengthens your site security with malware defense, brute-force protection, firewall rules, and smart hardening controls.
High-signal WordPress security auditing and hardening with practical site audit tools for administrators.
WP security is a plugin responsible by security with short steps and fix the mainly security problems.
Per-user Safe Mode plus role-based client restrictions for safer troubleshooting and cleaner client handoff.