Lightweight login protection, brute-force defence and safer admin access controls for WordPress.
Alternatives to XML-RPC Settings
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Login Delay Shield slows down brute-force attacks by adding a configurable delay to failed login attempts while keeping successful logins instant.
Free, offline-first WordPress security hardening with 15 configurable protection modules and a 20-point local security scan.
Simple and effective security measures for your WordPress site. Many security features you can activate with a single click.
WordPress hardening without touching your theme: XML-RPC, user enumeration, login limiter, security headers, strong passwords, event log.
Change your WordPress login URL and protect your site from brute-force attacks. Blocks default login paths with 404 errors.
Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.
Limit login attempts the smart way: stops password-guessing bots and botnets on wp-login, WooCommerce and XML-RPC, without locking out real people.
Protect your site from brute force attacks with hidden login, login lockout, Email OTP 2FA, REST API & XML-RPC hardening, and real-time email alerts.
Hardens WordPress with secure headers, login protection, user enumeration blocking, rate limiting, and a built-in security checklist.