#346 by installs
BBQ Firewall – Fast & Powerful Firewall Security
The fastest firewall plugin for WordPress. Protect against a wide range of threats with minimal performance impact.
- Installs
- 100,000+
- Rating
- 4.9 (160)
- Updated
- 3 months ago
Security Optimizer – The All-In-One Protection Plugin
Secure your WordPress site from brute-force attacks, threats, malware, and bots. Free to use and easy to set up.
- Active installs
- 1+ million
- #51 of 1,000
- Downloads, all time
- 40.1M
- 40,145,597
- Downloads, 30 days
- 1.3M
- 870.1K in the last 7
- Rating
- 4.5 / 5
- 157 reviews
- Last updated
- 17 days ago
- Oct 14, 2026
- Version
- 1.6.9
- 19 releases
Upkeep and compatibility
| Last updated | October 14, 2026Updated in the last 3 months |
|---|---|
| Tested up to | WordPress 7.1.4Covers WordPress 7.1.4, the current release |
| Needs WordPress | 4.7 or newer |
| Needs PHP | 7.0 or newer |
| First published | May 31, 2021 |
| Support, last two months | 4 of 4 threads resolved (100%) |
Reviews
4.5 / 5 from 157 reviews
| 5 stars | 131 |
|---|---|
| 4 stars | 6 |
| 3 stars | 4 |
| 2 stars | 3 |
| 1 star | 13 |
Downloads, last 30 days
What the author says it does
Bulletproof your website security in a few clicks against a range of security breaches, including brute-force attacks, malware threats and bots, with our free WordPress security plugin – Security Optimizer.
Proactively monitor your site’s security to detect any suspicious activity and take immediate actions to protect your site and prevent further damage with these essential features:
- Enable 2FA (Two-Factor Authentication) for an extra layer of website security
- Set Limit Login Attempts to deter malicious login attempts and brute-force attacks
- Change your default login URL to Custom Login URL to avoid attacks
- Activate Advanced XSS Protection to fortify your website against malicious attacks
- Lock and Protect System Folders to ensure no unauthorized or malicious scripts can be executed in your system folders
- Disable Themes & Plugins Editor to safeguard your website from unauthorized access via the WordPress editor
- Hide WordPress Version effortlessly, keeping it hidden from prying eyes
- Use Activity Log to monitor your site and quickly prevent malicious actions
- Post-Hack Actions to take immediate actions and prevent further damages
Developed by the website security experts at SiteGround and trusted by over 900,000 webmasters for its robust security shield and ease of use to safeguard WordPress applications from possible attacks on any hosting platform.
The opening of the plugin's own description. The full text, installation notes and changelog are on its WordPress.org page.
Latest changelog entry
Release Date Oct 14th, 2026
- Security improvements
- Custom Login URL improvements
- 2FA improvements
Screenshots
Tagged
Plugins that share its tags
#401 by installs
Hide My WP Ghost – Security & Firewall
Hide My WP Ghost is a WordPress security plugin that hides WP paths and protects your site with Path Security, Firewall, Brute Force Protection, 2FA
- Installs
- 100,000+
- Rating
- 4.5 (373)
- Updated
- 1 day ago
#522 by installs
Defender Security – Malware Scanner, Login Security & Firewall
WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more.
- Installs
- 80,000+
- Rating
- 4.8 (334)
- Updated
- 32 days ago
#882 by installs
Security Plugin, Firewall & Malware Scanner with Auto Removal
Protect WordPress from malware, hackers, brute-force attacks & suspicious traffic. Includes firewall, login security, 2FA & vulnerability checks.
- Installs
- 40,000+
- Rating
- 4.8 (397)
- Updated
- 4 days ago
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.
- Installs
- 5+ million
- Rating
- 4.7 (5K)
- Updated
- 31 days ago
WordPress login security with brute force protection, Two-factor authentication (2FA/MFA), firewall, IP/country blocking, and login monitoring
- Installs
- 1+ million
- Rating
- 4.8 (1.5K)
- Updated
- 38 days ago
Where this page's numbers come from
Read from the WordPress.org plugin API on , when WordPress 7.1.4 was the current release. WordPress.org rounds active installs into buckets. These are the directory's figures, not my verdict, and I haven't tested this plugin.