Wonderful Repeated Hit Blocker for Wordfence

Protects your login, xmlrpc and RSS feeds pages against DDoS attacks. Denies access to your site from certain countries via CloudFlare.

Enforce WordPress login and password security policies to protect user accounts and prevent unauthorized logins.

Complete security platform for everyday: block bots, brute-force, viruses, spam, fake crawlers. WAF, 2FA, no-malware, proactive defense.

Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.

Provides comprehensive security during development by protecting your entire site and your admin pages from brute-force attacks.

It blocks spam posts, login attempts and malicious access to the back-end requested from the specific countries, and also prevents zero-day exploit.

Counts recurring PHP fatal errors per plugin and automatically deactivates the broken plugin before it keeps your whole site down.

Simple, bloatware-free SMTP email plugin: sends by SMTP, logs the result, resends failures. Minimal and secure on purpose, and it will stay minimal.

Safely clean up outdated post revisions and their leftover metadata — preview exactly what will be removed with a dry run before deleting.

Blocks site access, login, or registration for visitors from selected countries or VPN services, with a custom message per area.

GDPR: stop sending visitor IPs to Google and other font hosts. See which plugin loads which font, and serve it from your own server.

Blocks registrations, WooCommerce checkouts, and comments that use disposable (throwaway) email addresses, with custom block and allow lists.