安全

Free WordPress security hardening: login protection, XML-RPC and file editor controls, upload protection, bot blocking and update controls.

Enterprise Security Suite for WordPress: Web Application Firewall (WAF), Active Malware Scanner, Brute-Force Defense, 2FA, and System Hardening.

Blocks selected AI crawler user agents, adds robots.txt rules, and stops WordPress HTTP API calls to selected inference hosts.

Protect your WooCommerce checkout from card testing, bots, fake orders and fraud with rate limiting and risk scoring.

A modern, hardened WordPress login page with captcha, honeypot and brute-force protection — fully customizable, no third-party services.

Blocks bots that scan your site for leaks, stops brute-force logins and keeps a local log. No account and no external service needed.

Country blocking and intelligent IP protection for WordPress, powered by Cloudflare.

Checks every file of your site against its official copy and tells you, in plain words, what was changed, added or removed.

One-click site audit: detect issues and download a full technical report with wpBara Audit.

Lightweight, safe-by-default WordPress security. Hardens your site without interfering with normal behaviour. Aggressive features are opt-in.

Threat-first, domain-scoped security monitoring inside WordPress.

Firewall, malware scanner, 2FA and login protection that keeps your visitors' data on your own server. No CDN, no tracking, made in Germany.

Instant company, domain, security and trust intelligence — as a WordPress admin tool and a public [marketxy_lookup] shortcode.

Cloud-managed firewall, bot protection, and threat monitoring. Manage rules, bans, and allow-lists from a central dashboard.

Records logins that use usernames which don't exist (username, password tried, IP, location, host) and blocks the IP until you unblock it.

Tracks user sessions/requests, flags suspicious multi-device activity, and gives admins an interactive timeline, a full request log, and settings.

Restrict front-end access by visitor country using a local IP database. No external APIs are used at runtime.

Administrators must enter an email verification code after password login. Regular users log in without extra verification.

Check your website's compliance with the Russian personal data law (152-FZ) from wp-admin: compliance score, violations and potential fines.

A plugin to track available plugin updates and optionally auto-update them based on time or security vulnerabilities.