Plug into possibility
Add new features or connect your favorite tools with thousands of plugins — available on all paid WordPress.com plans.
brute-force
180 extensions
Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force PreventionSécurité de connexion WordPress avec protection contre les attaques par force brute, authentification à deux facteurs (2FA/MFA), pare-feu, blocage par IP/pays et surveillance des connexions
Force Regenerate ThumbnailsSupprimer et VRAIMENT forcer la régénération des miniatures.
CloudSecure WP Security管理画面とログインURLをサイバー攻撃から守る、国産・日本語対応のセキュリティ対策プラグインです。 かんたんな設定を行うだけで、不正アクセスや不正ログインからあなたのWordPressを保護します。- Pourquoi cette extension n’est-elle pas compatible avec WordPress.com ?
WP Ghost (Hide My WP Ghost) - Security & FirewallHide and Secure WP paths with the complete WP security suite for Site Hardening. Includes 8G Firewall, Brute Force protection, and Passkeys. 
Sécurité Anti-Malware et Pare-feu anti attaque par force brute.Ce scanner Anti-Malware recherche les malwares, virus, et autres menaces et vulnérabilités de sécurité sur votre serveur et vous aide à les corriger.
WP Force SSL & HTTPS SSL RedirectEnable SSL & HTTPS redirect with 1 click! Add SSL certificate & WP Force SSL to redirect site from HTTP to HTTPS & fix SSL errors.
WP fail2ban - Advanced SecurityWP fail2ban uses fail2ban to protect your WordPress site.
Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam FilterBlock spam comments, defend against login attacks, strengthen site security. Anti-spam, brute-force protection & two-factor authentication built in.
XO SecurityXO Security is a plugin to enhance login related security.
Force LoginForce Login is a simple lightweight plugin that requires visitors to log in to interact with the website.
User Login HistoryHelps you to know your website's visitors by tracking their login related information like login/logout time, country, browser and many more.
IP Geo BlockIt blocks spam posts, login attempts and malicious access to the back-end requested from the specific countries, and also prevents zero-day exploit.
JSM Force HTTP to HTTPS / SSL - No Setup, Fast and ReliableNo setup required - simply activate to force HTTP URLs to HTTPS using native WordPress filters and permanent redirects for best SEO.
Stop XML-RPC AttacksSécurisez le XML-RPC de votre site en retirant quelques méthodes, tout en continuant d’utiliser XML-RPC.
Force Authentification Before Checkout for WooCommerceForce customer to log in or register before checkout
HTTP AuthProvides comprehensive security during development by protecting your entire site and your admin pages from brute-force attacks.
WP Force Lowercase URLsPerform a 301 redirect from an uppercase URL to the lowercase version for all non-admin URLs
Force RefreshForce Refresh lets you request page refreshes for visitors viewing your site, whether you want to refresh the whole site or a single page.
BotBlocker Security - Firewall & Bot ProtectionStop bots, brute force, spam, and fake crawlers before they reach WordPress. Three-layer firewall, 9 CAPTCHAs, FCrDNS, 2FA. Setup in 60 seconds.
Protection Against DDoSProtects your login, xmlrpc and RSS feeds pages against DDoS attacks. Denies access to your site from certain countries via CloudFlare.