ScanForge File & Theme Security
ScanForge File & Theme Security is a dedicated static code analysis and file integrity scanner built to detect unauthorized code modifications.
WP Guardian
WP Guardian is a simple plugin for practical WordPress safeguards and security checks. It keeps a small set of local protections and helps you identify the higher-impact hardening to request from your host or CDN. About WP Guardian keeps WordPress file restrictions, Apache-compatible directory hardening, an optional nG .htaccess firewall, and environment audits in one […]
Ultimate Auditor
Ultimate Auditor connects your site to Plugin Auditor, a plugin analysis service, and audits every plugin installed on your WordPress site. Each plugin gets an overall score from 0 to 100, a score in six categories, and a list of issues pinned to the exact file and line, all without leaving your dashboard. It is […]
TempAccessly – Temporary Admin Access
Create secure, time-limited WordPress admin access with one-time login URLs, automatic expiration, revocation, and easy access management.
Carticy SiteVitals – Security, Speed, Performance & Database Optimization
Most performance plugins tell you your site is slow. Very few tell you why. SiteVitals measures real visits to your site and shows you which plugin is using the time. When a page takes 1.2 seconds, you get the plugin name, the file, and what it was doing. Not just a number. It also comes […]
visitor-sentinel
Real-time visitor monitoring, bot detection and honeypots for WordPress. Blocks attackers automatically with threat intel and a live dashboard.
AccessDoor – Smart Admin Login & Security
AccessDoor helps you customize and secure the WordPress login experience. Change the default WordPress login URL to a custom login address and create separate login URLs for different user roles. You can also manage administrator usernames and user email addresses, customize the WordPress login screen, and enable additional security hardening options from a single settings […]
HealthSweep Site Monitor – Advanced Site Health & Performance Tools
HealthSweep Site Monitor is a secure, lightweight Site Health enhancement plugin for administrators. It extends core Site Health without replacing it. Features include: A dedicated HealthSweep Site Monitor tab in Tools > Site Health Performance, Security, and Reliability tests using the Site Health API Safe, admin-initiated cleanup tools in Tools > HealthSweep Site Monitor > […]
Assist Security
WordPress signs every login cookie and nonce with eight secret keys and salts stored in wp-config.php (AUTH_KEY through NONCE_SALT). If those secrets leak — through an old backup, a stolen config file, or a contractor who still has access — an attacker can forge valid authentication cookies for as long as the keys stay unchanged. […]
DevOrbit Login Shield
DevOrbit Login Shield lets you change the address of your login page from the default /wp-login.php to a slug you choose, such as /my-login/.
