Open Source Wordfence Alternatives

    The best open source alternative to Wordfence is All In One WP Security and Firewall, which is both free and Open Source. If that doesn't suit you, our users have ranked more than 25 alternatives to Wordfence and nine of them is open source so hopefully you can find a suitable replacement. Other interesting open source alternatives to Wordfence are Hide My WP Ghost (Free, Open Source), malCure Malware Removal & Firewall (Free, Open Source), NinjaFirewall (WP Edition) (Free, Open Source) and Shield Security (Freemium, Open Source).

    This page was last updated Jul 16, 2021

    1. A comprehensive, user-friendly, all in one WordPress security and firewall plugin for your site.
      show more
      • FreeOpen Source
      • Online
      • Software as a Service (SaaS)
      • Wordpress
      Hide My WP Ghost is a WordPress Security plugin. Changes and hides WordPress common paths for the Best WP Security against hacker’s bots. The plugin works like security through obscurity solution for a WP website.
      show more


    2. No. 1 Plugin for cleaning up hacked websites. Trusted by web-security agencies to eliminate even the most challenging infections. It scans your WordPress files and database for malware, infections, malicious redirects and other vulnerabilities.
    3. NinjaFirewall (WP Edition) is a true Web Application Firewall. Although it can be installed and configured just like a plugin, it is a stand-alone firewall that sits in front of WordPress.
      No screenshots yet
      • FreemiumOpen Source
      • Self-Hosted
      • iControlWP
      • Wordpress
      The most advanced and easy-to-use WordPress security plugin. Combines elegant and powerful features to block brute force attacks, facilitate multi-factor user authentication, and block malicious requests to WordPress sites. And much more besides.
      No screenshots yet


      • Online
      • Wordpress
      WordPress Security Plugin.
      No screenshots yet
      • FreemiumOpen Source
      • Self-Hosted
      • Wordpress
      WPScan is a free, for non-commercial use, black box WordPress security scanner written for security professionals and blog maintainers to test the security of their sites.
      show more
      • FreeOpen Source
      • Linux
      • Wordpress
      This plugin improve login security, create a blacklist of IP addresses and reports brute force login attempts attacks.
      show more
    4. BBQ Firewall is a lightweight, super-fast plugin that protects your site against a wide range of threats. BBQ checks all incoming traffic and quietly blocks bad requests containing nasty stuff like eval(, base64_, and excessively long request-strings.
      No screenshots yet
    Showing 9 of 9 alternatives