Skip to content
PluginCanary

Security & Privacy plugins ranked by health

344
plugins in Security & Privacy
61%
rated Healthy

Healthiest security scanning & malware protection plugins

Top 20 by Canary Score with 10,000+ active installs.

#PluginScoreStatusActive installsLast releaseSupport resolved
1IP Location Block96Healthy10,000+20 Oct 2026100%
2Wordfence Security - Firewall, Malware Scan, and Login Security94Healthy5,000,000+30 Sep 202684%
3hCaptcha for WP94Healthy70,000+30 Oct 2026100%
4Loginizer93Healthy1,000,000+29 Oct 202650%
5Sucuri Security - Auditing, Malware Scanner and Security Hardening93Healthy600,000+14 Oct 2026100%
6NinjaFirewall (WP Edition) - Advanced Security Plugin and Firewall93Healthy100,000+2 Nov 2026100%
7WP Content Copy Protection & No Right Click93Healthy100,000+21 Oct 2026100%
8FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login93Healthy10,000+3 Nov 2026100%
9Activity Log - Monitor User and Agent Changes92Healthy200,000+28 Oct 2026100%
10Captcha by BestWebSoft - Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms92Healthy10,000+27 Oct 2026no data
11WPS Hide Login91Healthy2,000,000+13 Aug 20260%
12SSL Insecure Content Fixer91Healthy100,000+6 Sep 2026no data
13Invisible reCaptcha91Healthy70,000+26 Oct 202650%
14Titan Anti-spam & Security - Brute Force Protection, 2FA & Spam Filter91Healthy50,000+28 Oct 2026no data
15Protect Uploads91Healthy30,000+7 Oct 20260%
16AntiVirus91Healthy30,000+20 Sep 2026no data
17Disable WP REST API91Healthy30,000+10 Aug 2026100%
18Login rebuilder91Healthy20,000+7 Oct 2026no data
19LWS Hide Login91Healthy20,000+14 Oct 20260%
20Two Factor Authentication91Healthy20,000+26 Oct 2026no data

Most at risk popular plugins

At risk or Avoid, with 10,000+ active installs.

Limit Login Attempts300,000+ installsAt riskNo release in 43 months (last release 4 Apr 2023).Disable REST API80,000+ installsAt riskNo release in 38 months (last release 14 Sep 2023).Spider Blocker20,000+ installsAt riskNo release in 30 months (last release 7 May 2024).Lockdown WP Admin10,000+ installsAt riskNo release in 108 months (last release 28 Nov 2017).WP Limit Login Attempts10,000+ installsAvoidVulnerability published 27 Dec 2022 still has no fix after 14 days.

Recent events in Security Scanning & Malware Protection

Last 90 days, from the Radar.

3 Nov 2026, Maintenance
SSL Certificate Manager: Tested up to WordPress 5.8.19, 13 major versions behind 7.1.4.
3 Nov 2026, Maintenance
WP-Copyright-Protection: Tested up to WordPress 6.7.11, 4 major versions behind 7.1.4.
3 Nov 2026, Maintenance
Universal Honey Pot: Tested up to WordPress 6.8.12, 3 major versions behind 7.1.4.
3 Nov 2026, Maintenance
WP Disable Site Health: Tested up to WordPress 5.2.30, 19 major versions behind 7.1.4.
3 Nov 2026, Maintenance
HTTP Auth: Tested up to WordPress 6.8.12, 3 major versions behind 7.1.4.
3 Nov 2026, Maintenance
Lockdown WP Admin: Tested up to WordPress 4.3.34, 28 major versions behind 7.1.4.
3 Nov 2026, Maintenance
WP Fail2Ban Redux: Tested up to WordPress 6.8.12, 3 major versions behind 7.1.4.
3 Nov 2026, Maintenance
WP fail2ban Add-on for Gravity Forms: Tested up to WordPress 6.6.11, 5 major versions behind 7.1.4.