Security plugins
Firewalls, malware scanning, and spam filtering. A security plugin with its own open advisory is its own problem, so we surface that first.
-
All-In-One Security (AIOS)
The most-installed free WordPress firewall and hardening plugin. Genuinely capable free tier from the UpdraftPlus team.
Jun 2026Freemium -
Kadence Security
Login hardening, two-factor auth, and brute-force protection — the plugin formerly known as iThemes Security, then Solid Security.
Jul 2026Freemium -
Sucuri Security
Free auditing, malware scanning, and hardening — paired with a paid cloud WAF that filters traffic before it reaches WordPress.
Jul 2026Freemium -
Wordfence
Endpoint firewall and malware scanner for WordPress. Free core, paid threat intelligence feeds.
88 Lighthouse May 2026Freemium -
Akismet
Comment spam protection. Free for personal use, paid for commercial. Default-installed on most WordPress sites.
98 Lighthouse Apr 2026Freemium
