SiteLock WordPress Security Plugin

Fast to setup. Light to run. Harden WordPress the easy way.

Free on WordPress.org. Add essential security to your WordPress site with one plugin. Toggle WP-specific hardening, tighten login security, view Site Health and activity logs, and run off-server cloud checks - all inside WP Admin.

What the free plugin includes:

  • Ready-to-apply WP-specific hardening toggles to reduce common attack paths
  • Built-in login hygiene: enforce strong passwords, limit brute-force attack attempts and session timeouts
  • View WordPress Site Health and cloud scan results* without leaving WordPress
  • On-demand malware scans and recurring cloud checks*

* Available after connecting a free SiteLock account

Add the plugin

Why do WordPress websites need protection?

As the most popular CMS platform, WordPress attracts hackers. Its plugin-driven flexibility widens the attack surface, increasing site security risk and ongoing maintenance overhead.

  • WordPress sites are 25% more likely to have vulnerabilities than non-CMS sites
  • WordPress sites are 3.27× more likely to be infected
Source: SiteLock 2024 Website Security Report

Cloud checks + safe hardening help close common attack paths

How does the SiteLock plugin help secure WordPress?

The SiteLock plugin helps secure WordPress by focusing on high-impact protections delivered in a simple, lightweight way:

  • Action-first baseline - WordPress-specific hardening and core login protection in minutes, delivering quick wins without a maze of settings
  • Light footprint - Cloud checks run off your server, so your site stays fast without heavy, on-server scans
  • Built for clarity - Site Health view with a security summary for an at-a-glance posture check
  • Assurance on demand - Run cloud security scans after updates or changes for immediate visibility
GET STARTED FOR FREE

Wordpress website security made easy - How it works

The SiteLock WordPress plugin works directly inside WP Admin, giving you real-time visibility into site health and security. Use simple controls to apply WordPress hardening, then connect a free SiteLock account to run off-server cloud checks that validate changes without slowing your site.
The plugin provides baseline protection focused on prevention and visibility rather than full malware removal. For live attack blocking, malware cleanup, and performance optimization, connect a full SiteLock plan to enable firewall and CDN.

WordPress hardening

Toggle on WordPress specific hardening to cut common attack paths.

Login hygiene

Enforce password policies, gain visibility into login attempts, throttle brute-force attempts, and set session timeouts.

Site Health & activity in WP Admin

See Site Health; run on-demand scans and schedule recurring cloud checks (free SiteLock account required).

Free to start, easy to expand

Connect a free SiteLock account and add advanced protections later only when needed.

Two-Factor Authentication (2FA) is currently in development and will be added in a future plugin update.

How to install the SiteLock plugin

Recommended

via WordPress Dashboard

  1. Log in to WordPress admin
  2. Plugins → Add New
  3. Search “SiteLock Security”
  4. Install Now → Activate
  5. Connect your free SiteLock account to enable Scan Now and recurring cloud checks
MANUAL INSTALL

from WordPress.org

Download SiteLock Security from WordPress.org and upload it to your site’s plugins.

Install & Uninstall Safety

Safe to install and remove

No code changes or theme conflicts. Revert toggles if you like, then uninstall. Your SiteLock account stays available on the web.

Upgrade any time. No re-install. No loss of settings.

Reduce your website security risks

Get started with SiteLock today

SiteLock quickly removes threats, restores functionality, and helps prevent future attacks, all backed by continuous monitoring and support.