WordPress is currently the most popular and widely used blogging platform. It is being used by millions of people around the globe. Because of this reason, hackers and spammers are also taking keen interest in breaking the security of the blogs. Though WordPress is very much secure by itself, but there is never too much ascertainable. The ‘numero uno’ priority for any blogger or web developer should be security. Due to the lack of security, any site can be hacked and altered, private information can be stolen, and countless hours of hard work can be messed up with. Here is a list of some of the top security plugins that are being used by users of WordPress to keep their site secured.
1. Blackhole
Blackhole is a trap for bad bots. Bots are software applications that run automated tasks over the Internet. The concept on which its workflow is based is quite simple: the owner has to add an invisible link inside a robots.txt file (forbidden directory) somewhere in the pages. Most of the nasty bots who do not follow the rules of the blog will crawl to that invisible link and fall into the trap. Blackhole thus do a WHOIS Look-up and registers the event into a blackhole data file. After the addition to the blacklist file, bad bots are immediately denied any type of access to the website.
====================================================================
2. BulletProof Security
BulletProof Security secures your ‘wp-admin’ folder and Root website folder with a single click. It offers security against all CSRF, Base64, XSS, RFI, SQL Injection and Code Injection hacking trials. Another useful maintenance feature is also added that allows developers to put up a “503 under maintenance” page while the site-owner works on their website.
===================================================================
3. WordPress File Monitor Plus
The main purpose of this plugin is to notify the owner about any changes made to the files or the site,by sending an e-mail. It also helps out in identifying and removal of the infected code on your site.
Get WordPress File Monitor Plus
4. AntiVirus For WordPress
WordPress is also prone to viruses, worms and malware like other sites. Your WordPress installation can get affected by these viruses. Spam injections are another serious matter of concern while operating any WordPress site. AntiVirus for WordPress comes out to be an apt solution for this purpose which monitors malicious injections and also warns you about any possible attacks. It comes with multilingual support. The plugin is quite easy to use and blocks any malicious content, spam, virus, malware, worms and links. After enlisting all the blocks that are made, it sends an email to a predefined address with all attempts of intrusion that have been blocked and the white-listed IP addresses.
==================================================================
5. WP Security Scan
This is one the very useful plugins that should definitely be used regularly by every WordPress blogger. This plugin can move through every security loophole in a few seconds. A list of possible vulnerabilities is then prepared, such as file passwords or permissions, and also offers further suggestions on corrective actions to deal with them.
================================================================
6. AskApache Password Protect
This plugin adds multi-layered security to the database of the website without controlling your WordPress blog or messing up with the database. It is designed and regularly updated specifically for stopping any automated attacks on the blog which utilize the vulnerabilities of the blog resulting the site being hacked.
It also blocks spam or malicious attempts to break-in into a website. Overall, this plugin saves and protects every type of resource like money, CPU usage and database resources from almost every type of basic attack.
Get AskApache Password Protect
=================================================================
7. Defensio Anti-Spam
Defensio anti-spam is one of the best and advanced spam filtering plugin that takes your and your blog readers’ behavior into consideration. It is equipped with many advanced features such as OpenID support, elaborated statistics, charts, RSS feeds of the comments on your blog (let it be innocent or spam-generated) and a counter widget.
================================================================
8. WordPress Firewall 2
It investigates every web request with simple WP-specific heuristics techniques to know and stop most obvious intrusions. Though there are a few generic modules made for this purpose; but they are installed only on some of the web servers, and also they are difficult to configure.
WordPress Firewall 2 is a newer version of WordPress firewall, offering protection against many of the repeatedly happening attacks on the sites. It provides a facility to track and report any malicious phrases to the site-owners.
====================================================================
9. NoSpamNX
NoSpamNX automatically adds some additional form-fields to the comment form of your blog, which is not visible to human users. If a spambot fills these invisible fields blindly (which they generally do with any form field), the comment is not saved. The owner thus can decide if he want to block the specific spambot or mark it as a spam.
=================================================================
10. WP-DBManager
WP-DBManager handles your WordPress database. It allows the owner for database optimizing, database repair, database backup, database restore, deleting the backup, dropping / emptying the tables & run optional queries. It provides support for an automatic backup schedule and also database optimization.
Source : Here
