Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

Migrates your website to HTTPS and enforces SSL in just one click.

Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses.

Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action.

Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email.

Protect your site with all essential security features by upgrading to Really Simple Security Pro.

Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks.

Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware.

When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended.

Secure your website’s login process and user accounts with powerful security measures.

With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha)

If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support.

Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins.

For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!