HTTPS migration and core WordPress hardening
Really Simple Security brings HTTPS setup and essential WordPress hardening together in its free feature set.
- HTTPS migration: Enforce SSL, use 301 redirects through PHP or .htaccess, and secure cookies.
- Certificate and server checks: Generate a Let’s Encrypt certificate when the host supports manual installation, and check server health.
- Hardening controls: Disable XML-RPC and directory browsing, prevent code execution in uploads, and address login feedback and user enumeration.
These controls suit site owners seeking a single place to handle common HTTPS and configuration tasks; certificate generation depends on hosting support.
Login protection and vulnerability alerts
Free login protection includes role-based or enforced email two-factor authentication, while vulnerability alerts flag issues in WordPress core, plugins and themes.
Administrators can choose which user roles use 2FA or require it for them. Alerts give site managers a prompt to review affected software, so they still need a process for applying appropriate updates or other fixes.
Additional controls in Really Simple Security Pro
Pro adds broader defenses for site access, traffic and login security.
- Firewall and access controls: Use IP and username blocks, region restrictions, firewall rules, and allowlists or blocklists.
- Security headers and SSL: Configure security headers, including a tailored Content Security Policy, and use advanced SSL enforcement and HSTS settings.
- Mixed-content and vulnerability measures: Scan for HTTP-loaded files and fix them; configure update attempts or quarantine for vulnerable plugins and themes.
- Advanced hardening: Change the login URL, check file permissions, randomize the database prefix, and adjust other security settings.
- Login safeguards: Add TOTP or passkey login, password rules, login-attempt limits and CAPTCHA options.
Sites needing these additional protections should account for Pro; the free version covers a narrower set of core controls.
A widely adopted plugin with recent maintenance and room to weigh support coverage
Broad adoption, an excellent user rating and a recent update point to an actively maintained plugin, though the support record is based on few threads.
Really Simple Security is among the most widely installed plugins in the directory and was updated within the last week. Eight support threads are recorded, with three quarters resolved; that is encouraging, but too small a sample to establish consistent support performance. Consider whether the free controls meet your needs, and weigh the limited support record if timely help is important.
