Really Simple Security Pro

The plugin brings several WordPress security tasks together, including hardening, login protection, vulnerability management, and firewall controls. Preset hardening configurations cover checks such as file permissions and admin user restrictions. Login tools can require strong passwords, add two-factor authentication, and limit login attempts.

Recurring scans check plugins, themes, and WordPress core, with alerts in the dashboard and by email. The firewall can block traffic by IP address, region, user agent, or excessive 404 errors. HTTPS tools enforce secure connections with redirects and mixed content fixes, while security headers help protect visitors.

Features

• WordPress hardening: Choose from preset configurations for checks such as file permissions and admin user restrictions to address common WordPress security gaps.
• Login protection: Require strong passwords, use two-factor authentication, limit login attempts, and check credentials against the Have I Been PWNED service.
• Vulnerability scans: Run recurring scans on plugins, themes, and WordPress core, then receive email and dashboard alerts about affected components.
• Firewall controls: Block unwanted traffic based on IP address, geographic region, user agent, or excessive 404 errors.
• Security headers: Apply headers including HSTS, Content Security Policy, and Referrer Policy, with a learning mode for complex configurations.
• HTTPS enforcement: Enforce HTTPS with 301 redirects, mixed content fixes, and SSL server health checks.
• Component actions: Use force-update or quarantine options for plugins, themes, or WordPress core components flagged by vulnerability scans.

Best for

• WordPress site owners managing HTTPS
• Sites that need login safeguards
• Administrators monitoring vulnerable components