Phantom User Lockout v1.2.0
Records logins that use usernames which don't exist (username, password tried, IP, location, host) and blocks the IP until you unblock it.
Tags / brute-force
Brute Force
142 WordPress plugins tagged “Brute Force”. Every result links to a crawlable PlugIndex profile.
Protect WP Login – Password Protect wp-login.php with Basic Auth v1.1.2
Password protect wp-login.php with HTTP Basic Authentication. Stops bots and brute force attacks at the server, before WordPress even loads.
Ropeline – Limit Login Attempts & Brute Force Protection v0.3.6
Limit login attempts the smart way: stops password-guessing bots and botnets on wp-login, WooCommerce and XML-RPC, without locking out real people.
Secure Admin Login v1.0.0
Protect your WordPress website by hiding the default wp-login.php and wp-admin URLs.
Sentinel Login Guard v1.1.0
Professional protection for WordPress login: hide login path, geo-restrict access, manage IP whitelist and blacklist, and view login statistics.
SentriLog – Limit Login Attempts, Security & Activity Log v1.2.1
Limit login attempts, hide your login URL, log every auth event, and get email alerts — a lightweight, privacy-first login security plugin.
ShadowScan Security Link v1.4.0
ShadowScan Guard local WordPress hardening and basic diagnostics, with optional Guard or ShadowScan portal connection for managed features.
Solutiontech Seguridad de acceso v2.7.1
Protects WordPress access with custom login URL, Micro-WAF, 2FA, IP control, brute force protection, core integrity, and local audit logs.
Sovaryx Login Security v1.0.1
A free WordPress security plugin focused on login protection, security diagnostics, and API protection.
SR WORKS ArmorPro v1.2.0
Free WordPress security: WAF, firewall, brute force protection, two-factor authentication, passkeys, country blocking, and security headers.
Thessley Security Hardening v1.0.21
Modular WordPress security hardening — IP/country blocking, request inspection, file integrity, malware scanning, and real-time alerting.
TotalWeb – Security, Firewall & Malware Scanner v1.0.2
TotalWeb strengthens your site security with malware defense, brute-force protection, firewall rules, and smart hardening controls.
Vardalion Security v2.3.0
Behavioural WordPress security with threat scoring, brute-force protection, bot detection, automatic IP blocking, logging and recovery tools.
VigiGuard Security v1.0.0
Simple one-click WordPress security. Protect your site in 30 seconds.
Vortix Web Security v2.2.0
Free, offline-first WordPress security hardening with 15 configurable protection modules and a 20-point local security scan.
Vyntic Guard – Security & Malware Scanner v1.7.2
Security plugin with malware scanning, brute-force protection, login security, IP blocking, activity logs, hardening, and custom login URLs.
Webboll Security v2.9.20
Behavior-first WordPress security: custom login URLs, brute-force protection, 2FA, threat engine, activity logging and more.
wPadlock v1.0
wPadlock adds an additional PIN field to your login page and provides additional security against brute-force attacks
WPS Protect: Login URL & Security Headers v2.0.0
Move your login URL, stop brute-force attacks, and send HTTP security headers on every response. Lightweight, cache-friendly, no bloat.
ZAIA Security v1.0.1
Checks the context of every login, comment, order and REST API call: origin, device, replay, bots, credential stuffing.
ZeroBot Security – Login Protection, Firewall & Bot Blocker v1.1.1
Free brute-force login protection and XML-RPC blocking, plus an optional bot firewall backed by the live ZeroBot threat network.
ZetaRank StoreGuard for WooCommerce v2.2.0
Lightweight WooCommerce account security with math CAPTCHA, honeypots, bot checks, and brute-force protection.