WordPress WordPress security tools: selection criteria and comparison
Compare features, licenses and deployment needs.
Source description: “Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a…” Deployment: WordPress 4.7 / PHP 7.0. Listed version 9.0.2. 5,000,000 active installations reported by WordPress.org.
Source description: “Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate.” Deployment: WordPress 6.6 / PHP 7.4. Listed version 9.8.3. 3,000,000 active installations reported by WordPress.org.
Source description: “WordPress login security with brute force protection, Two-factor authentication (2FA/MFA), firewall, IP/country blocking, and login monitoring”. Deployment: WordPress 5.0 / PHP not specified. Listed version 3.3.10. 1,000,000 active installations reported by WordPress.org.
Source description: “Harden your site security with Login Security, Two-Factor Authentication (2FA), Vulnerability Scanner, Firewall, and more. Formerly iThemes Security.” Deployment: WordPress 6.5 / PHP 7.4. Listed version 10.0.6. 700,000 active installations reported by WordPress.org.
Source description: “Enable Two-Factor Authentication (2FA) using time-based one-time passwords (TOTP), email, and backup verification codes.” Deployment: WordPress 7.0 / PHP 7.4. Listed version 0.17.0. 100,000 active installations reported by WordPress.org.
Source description: “Get better WordPress login security; add two-factor authentication (2FA) for all your users with this easy-to-use plugin.” Deployment: WordPress 5.7 / PHP 7.4. Listed version 4.2.1. 100,000 active installations reported by WordPress.org.
Source description: “Extends the WP REST API using JSON Web Tokens Authentication as an authentication method.” Deployment: WordPress 4.2 / PHP 7.4.0. Listed version 1.5.0. 60,000 active installations reported by WordPress.org.
Source description: “Block spam comments, defend against login attacks, strengthen site security. Anti-spam, brute-force protection & two-factor authentication built in.” Deployment: WordPress 5.6 / PHP 7.4. Listed version 7.5.3. 50,000 active installations reported by WordPress.org.
Source description: “Protect your website by concealing vulnerable WordPress traces, plugins, themes, login/admin url. 2FA, Captcha, Firewall, Security Headers etc.” Deployment: WordPress 4.0 / PHP 5.4. Listed version 2.9.3. 50,000 active installations reported by WordPress.org.
Source description: “Protect WordPress from malware, hackers, brute-force attacks & suspicious traffic. Includes firewall, login security, 2FA & vulnerability checks.” Deployment: WordPress 5.0 / PHP 7.2. Listed version 2.190. 40,000 active installations reported by WordPress.org.
Source description: “Secure WordPress login with Two Factor Authentication - supports WP, Woo + other login forms, HOTP, TOTP (Google…” Deployment: WordPress 3.4 / PHP 5.6. Listed version 1.16.0. 20,000 active installations reported by WordPress.org.
Source description: “Secure and protect WordPress REST API from unauthorized access using JWT token, Basic Authentication, API Key, OAuth 2,…” Deployment: WordPress 3.0.1 / PHP 5.6. Listed version 5.0.0. 10,000 active installations reported by WordPress.org.