1
Wordfence Security Partial
XML-RPC disabling and REST API user-enumeration protection; no broader hardening checklist.
80feature score
WordPress Security Plugins with One-click hardening
Disable XML-RPC, file editing, user enumeration and similar weak points. 10 of the 12 plugins we track include it.
2
Sucuri Security Included
Disable file editor and XML-RPC, block PHP in uploads, hide WP version.
87feature score
3
Defender Security Included
One-click tweaks: disable XML-RPC and file editor, stop user enumeration, block PHP in uploads.
79feature score
4
Shield Security Included
Locks down XML-RPC and REST API and blocks user enumeration.
84feature score
5
MalCare Security Paid version Protect
Paid hardening: block PHP in untrusted folders, disable file editor, block installs, rotate keys.
80feature score
6
Kadence Security (formerly Solid Security) Included
Advanced tools: change user ID 1, DB prefix, file permissions, salts, wp-config rules.
77feature score
7
WP Cerber Security Included
Disable XML-RPC, role-based REST API access, stop user enumeration.
69feature score
8
All-In-One Security (AIOS) Included
Disable file editing, XML-RPC, user enumeration; protect sensitive files.
61feature score
9
Really Simple Security Included
Disable XML-RPC, user enumeration, directory browsing, uploads code execution.
54feature score
10
Patchstack Paid version Personal protection
Disable theme editor, block user enumeration, restrict XML-RPC/REST API, hide WP version.
60feature score