Plug into possibility
Add new features or connect your favorite tools with thousands of plugins — available on all paid WordPress.com plans.
security-scan
299 extensions
Swairish Site SecurityWordPress malware protection, audit logging, firewall controls, file scanning, hardening, CAPTCHA, and reports.
Genisoft Security ConnectorSecure read-only connector linking your WordPress site to the WP Security malware-scanning service for remote security audits.
Elevoire Security AuditRead-only WordPress security auditing plugin. Scans for security issues, explains the risks, and recommends fixes.
Walkercorp Sentinelle - Security, Firewall, Anti-Bot & Malware ScanClear WordPress security for non-technical site owners: firewall, login protection, camouflage, file scan, live traffic analysis and a threat log.
Techbox Login SecurityLogin security for WordPress — brute-force lockouts, IP access lists, activity logging, and optional email login codes.
Memory Scan - PHP Memory Usage - No CrashWarns before a low-memory crash, flags end-of-life PHP, and checks whether your plugins are ready for a PHP upgrade — all read-only.
ManicSoup Activity Log & Security MonitoringA clean, self-hosted WordPress activity log with built-in attack detection. See who did what, when, and where — and catch credential attacks.
FPX Security GuardComplete security suite for WordPress — login protection, firewall headers, info hiding, and hardening.
Forvault SecurityForensic, read-only malware and integrity scanner: heuristic web-shell detection, core-checksum verification, and a file-change baseline.
Daryo89 Multi Scan and AI AssessmentFree, fully local site scan: AI Readiness, Agent Readiness, GEO and SEO scores, a branded PDF, and an AI-files manager (llms.txt, ai.txt).
Nexura Security — Malware Scanner, Firewall, 2FA & WordPress Security1 Free WordPress Security Plugin — Enterprise-grade malware scanner, WAF firewall, 2FA login protection, brute force blocking, file integrity monitor …
CyberNote Security CheckerDiagnoses WordPress security settings and version status, presenting plain-language improvement steps in Japanese. No external requests. Lightweight.
Nubivio Security Headers, security.txt & NIS2 Compliance for HealthcareSecurity headers, a self-renewing security.txt (RFC 9116) and an optional CRA, GDPR and NIS2 compliance scanner for healthcare WordPress sites.
ShieldScope – Site Security ScannerA thorough WordPress security scanner that checks your entire site for vulnerabilities and misconfigurations — without slowing it down.
ScanForge Database SecurityScans and removes malicious scripts and malware injections from your WordPress database tables.
Site Lockdown Security for MainWPManage Site Lockdown Security across your MainWP child sites with fast lock-status visibility, bulk sync tools, and one-click lock actions.
Aria Security SuiteEnterprise-grade WordPress security: WAF, malware scanner, hide login, 2FA, live traffic monitoring, and optional cloud API.
Defyn Security Manager - Hide Login, 2FA & Brute-Force ProtectionHide wp-admin behind a custom login URL and stop brute-force attacks with two-factor authentication, login limits, IP rules and an activity log.
WPGreeks SecuritiesAn advanced, robust, modular security and configuration utility toolkit. Streamline administrative interfaces, mask vulnerable routes, harden environm …
Pirajki Website Advance SecurityA lightweight, focused security toolkit for WordPress: request firewall, core file integrity checks, malware scanning, and one-click hardening.