Plug into possibility
Add new features or connect your favorite tools with thousands of plugins — available on all paid WordPress.com plans.
Security
Take advanced control of your site’s security.
1,475 plugin
Haq Security CVE MonitorReal-time CVE vulnerability monitor and security auditing GUI dashboard for WordPress powered by Haq Security API.
SendityPasswordless WordPress login with Sendity verification and normal WordPress user sessions.
Who Changed It? – Activity Log & Audit TrailActivity log and audit trail: see who changed what, and when — logins, users, plugins, themes, posts, settings. Tamper-proof. Stays on your site.
WhoChangedKnow exactly who changed what in your WordPress admin — options, Customizer, plugins, users, menus, content and more.
SafeUser – Registration Alerts for TelegramInstant Telegram alerts on every new WordPress user registration. Catch admin hijacking and suspicious signups in real time.
Restrictify Extension Access ControlControl access to plugin features and menus based on user roles, keeping your WordPress dashboard secure.
Ultra Web Hosting Performance ToolkitOptimize, secure, and speed up WordPress: trim front-end bloat, clean the database, block attacks and spam, and purge every cache in one click.
Open24 SecuritySecurity hardening for WordPress and WooCommerce: lock down the REST API, protect the login, hide version info and add security headers.
ProofwrightEU Cyber Resilience Act toolkit: component inventory, SPDX & CycloneDX SBOM, hash-chained snapshots, a posture score, and a CRA document generator.
Sigil – Passkeys and Two-Factor AuthenticationAdd two-factor authentication to WordPress logins: passkeys, authenticator apps, backup codes and email codes, with per-role enforcement.
PW Security and BackupSecurity monitoring, login protection, file integrity checks, protected backups, and read-only comparison in one panel.
SiteCheck Pro AutoFixAutomatically repair, verify, and optimize your WordPress website with SiteCheck Pro AutoFix.
GuardrSecurity grade, uptime and misconfiguration monitoring for this site, scanned agentlessly from Cloudflare's edge. Nothing runs on your server.
Quarivo Comment ShieldActivate it and stay focused. Obvious comment spam is quietly quarantined, while possible false positives remain easy to review and restore.
Locktura SecurityAll-in-one WordPress security suite with local firewall, login protection, anti-spam controls, hardening, monitoring, and alerts.
Brainwerk Security SuitePrivacy-first WordPress security suite — built for EU compliance and Multisite. GDPR-ready by default, transparent about every byte that leaves your s …
Qevix ShieldWordPress security: login protection, brute force lockouts, 2FA, reCAPTCHA, malware scanning, firewall and audit log. All off until you turn it on.
Defen.so ConnectorOfficial Defen.so connector. One-click connect: managed WAF, upload scan, uptime monitor, brute-force signal, attack log. No config file.
Decionis Checkout GateProtect WooCommerce checkout margin with a real-time, fail-open Decionis policy gate.
Codiecool Action Guard for AI AgentsHuman-approval queue, audit log, and undo for AI/MCP agent writes on WordPress.