Wordpress plugin to increase site security

I am told that Wordpress is the least secure among Opensource CMS. Is there anything I can do, like a plug-in or something that can increase the security of my client's website?
Please let me know.Thanks in advance. - Anoop Vattoly, Tecriti Consulting

 

There are lots of security plugins for many purposes - just use Google. But they may slow down your website. I personally think that these plugins are not very useful unless there are hackers that are trying to break into your site. WP is pretty secured itself.

 

It is the least secure, except for all the other OpenSource CMSs.

A plugin is not the answer. Keeping the code updated is the best way to keep your WordPress site secure. There are other actions you can take as a website manager but they are only layers on top of the most important thing: update, update, update.

 

WordPress is a really great blogging platform that has very few limits for whatever you might want to do with your blog.

 

If you want a good security for your website , you have to do few things firstly have to update your wordpress from admin panel whenever wordpress update will come and second is for good security you have to buy akismet api key from wordpress..

Thanks
Manish

 

try limit login attempts. One of the best wordpress security plugin.

 

you can edit .htaccess and specifically put IPs that can enter wp-admin exclusively

 

What if the admin has a dynamic IP?

 

There are many ways to do that. Depends on which place you want to secure. Login page? The backends? The Homepage? Or the whole website? Try some of my approach here.
Htaccess Protection , Protect WordPress Against Malicious URL Requests.

 

there are lots of wordpress plugins you need the best ones for long term security of your website.

 

Keep updated and have a difficult password is just as good as adding any plugins.

 

Also keep in mind that more plugins = more bugs and security holes.

 

The best plugin i have used is the LockDown WP-Admin

lockdown-wp-admin

It changes the login page, so even if your password is somehow cracked, they wont know your admin page. Yet you are safe. Or you can use http auth aswell. have a look cheers

 

WpVault is a good plugin. try it

 

I am always astounded when folks raise posts from the dead, to raise their post count but, still can't even answer the guys thread.

And FYI, wp vault appears totally unrelated to security but hey, nice try....

Additionally, moving the wp login page is a nice thing to do but does not address why stuff gets hacked in the first place. If folks are getting into your admin panel the problems are not a security matter but one of stupidity.

The answer is bulletproof security which does a wide range of things and can be found here http://wordpress.org/extend/plugins/bulletproof-security/

I had to use that for a guy getting hacked on a daily basis. It works great.

Nigel

 

I found BulletProof to be very good