MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall

Automatically adds a logout button to your password protected content.

Add and manage essential HTTP security headers with ease. Protect your WordPress site from XSS, clickjacking, and other common vulnerabilities.

Free, lightweight WordPress security. Harden your site with login protection & 2FA, see Site Health clearly and run on-demand checks—setup in minutes.

Hardens and protects your site by locking down login, REST API, XML‑RPC, file editor, and applying HTTP security headers.

Safely disable XML-RPC, block attacks with HTTP 403, stop pingback DDoS, and protect your WordPress site with a single click.

Blocks malicious and unknown query-string requests, detects injection attempts, and audits user capabilities and sessions.