WordSec

WordSec is a complete WordPress security suite. The firewall blocks exploits, malicious bots and brute-force attempts with ready-made presets and custom rules. The malware scanner checks file integrity and repairs infected files in one click. Login security adds 2FA, captcha and lockouts; block attackers by IP or country and watch your traffic live. CVE alerts cover plugins and themes, every action lands in the audit log, and alarms reach you by email, Telegram or Slack. Eight modules replace eight separate plugins, and everything runs locally on your own server.

Key features:
- WAF firewall with custom rule builder and 25+ hardening toggles
- Seven-stage malware and file-integrity scanner with one-click repair
- Two-factor authentication, CAPTCHA and brute-force lockouts
- IP, CIDR and country/continent blocking
- Real-time live traffic log with bot detection
- Supply-chain CVE alerts for core, plugins, themes and PHP
- Full audit log across 11 object types
- 36 alert types via Email, Telegram or Slack

WordSec is free with no license key to enter, and with no key the plugin makes no outbound request to the WordSec service at all.