Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!
Top keywords
- security27×3.54%
- really15×1.97%
- simple15×1.97%
- login14×1.84%
- really simple14×1.84%
- really simple security11×1.44%
- simple security11×1.44%
- wordpress10×1.31%
- vulnerability9×1.18%
- ssl8×1.05%
- site7×0.92%
- website6×0.79%
weMail –
Most email marketing platforms treat WordPress as an afterthought. weMail is built differently: it delivers professional-grade email marketing natively inside your WordPress dashboard, without the complexity or the runaway cost. Whether you’re sending a weekly campaign to a few hundred loyal readers or running sophisticated drip campaigns for tens of thousands of subscribers, weMail gives you the tools to do it right. Full sending flexibility across eight-plus gateways, a drag-and-drop email newsletter builder, powerful email automation, customizable signup forms, and native WooCommerce integration for transactional and marketing emails: all managed from a single interface. weMail stores campaign and subscriber data in the cloud, so your WordPress database stays lean regardless of list size. At scale, weMail runs up to 88% cheaper than Mailchimp without sacrificing a single feature. From building optin forms that capture leads to delivering automated newsletter sequences that convert them, weMail covers the complete subscriber lifecycle inside WordPress. Explore: Official Website Facebook Community Useful Links Docs | Videos Tutorials | Support | Get Started SMTP Flexibility: Send From Any Gateway You Trust Email deliverability starts with your SMTP configuration; a poorly wired setup guarantees campaigns land in spam, not inboxes. weMail supports eight-plus email gateways, giving you complete control over delivery. Supported SMTP providers: Amazon SES SendGrid Mailgun SparkPost Postmark Elastic Email Brevo Custom SMTP Configure your gateway directly inside weMail’s settings: no third-party SMTP plugins required. Authentication, TLS/SSL, and connection management are handled natively, and the sending layer is decoupled from your campaigns, lists, and automation, so switching providers never breaks anything. Agencies can run separate or shared SMTP setups across multisite installations. Email Campaigns: Build Beautiful Campaigns That Convert An email newsletter lives or dies on design and trust. weMail’s drag-and-drop builder makes it easy to create professional campaigns without code: choose pre-built templates or start from a blank canvas. The visual editor supports: Block-based editing: arrange text, images, buttons, dividers, and social links on a canvas Responsive layouts: every newsletter renders correctly on desktop, tablet, and mobile Brand customization: apply your colors, fonts, and logo across campaigns Dynamic personalization: address subscribers by name or insert any custom field Preview and test send: confirm rendering before a campaign reaches anyone’s inbox Scheduling is timezone-aware: queue a campaign today and deliver at peak engagement time tomorrow, in each subscriber’s local hour. The builder generates both HTML and plain-text versions of every campaign, improving deliverability and reaching recipients who prefer plain text. All newsletter data, opens, clicks, bounces, unsubscribes — is stored in weMail’s cloud, so history stays accessible through hosting migrations and WordPress updates. Email Automation: Nurture Subscribers on Autopilot Manual campaigns create results; email automation creates compounding results. weMail’s automation engine works as a complete autoresponder platform, building sequences that engage subscribers at every stage of their journey, executing automatically based on behavior, time, or external triggers with no ongoing manual effort. Trigger-based automation fires campaigns the moment conditions are met: list signup, purchase completion, link clicks, email opens, date conditions, or inactivity. Define the logic once; weMail runs it continuously. Core automation capabilities: Drip email sequences: a series of emails over days or weeks — an introduction on day one, a walkthrough on day three, a case study on day seven, an offer on day fourteen — mapped visually in the node-based builder. Welcome email: every new subscriber gets a personalized onboarding email immediately, your highest-opened touchpoint, with tailored content or an introductory offer. Behavioral automation: branch sequences based on what contacts do — different follow-ups depending on opens, clicks, or 30 days of inactivity. Date-based automation: trigger campaigns on fixed dates, anniversaries, or expiration events without manual scheduling. Post notification: automatically send a newsletter when new content goes live — configure once, and every published post fires a broadcast to your chosen list. Re-engagement automation: systematically win back dormant contacts with targeted sequences before removing them from active lists. The visual builder uses a node-based canvas where each node is a step (send, wait, or evaluate a condition), with branching paths for different behaviors, so complex flows are easy to build, read, and adjust as your strategy evolves. A/B Testing: Optimize Every Campaign With Data Gut instinct has a ceiling; A/B testing removes it. weMail’s built-in testing tools let you validate campaign decisions, systematically improving open rates, click rates, and conversions over time. Subject line testing is the most impactful starting point: send variant A to 20% of your list and variant B to another 20%; let weMail measure performance, then automatically deliver the winner to the remaining 60%. Content testing goes further, comparing layouts, calls to action, or offers, short versus long subject lines, emoji versus plain text, preheader variations, image-heavy versus text-first designs, and CTA color, copy, or placement. weMail declares a winner based on your chosen metric (open rate, click-through rate, or attributed revenue) and stores every result in your analytics dashboard, building institutional knowledge about what works for your audience. Optin Forms: Grow Your List From Every Corner of Your Site Your subscriber list is only as strong as the systems feeding it. weMail’s optin form builder lets you create, customize, and place forms throughout your site without code, adapting to any WordPress theme. Supported form types: Inline forms: embedded within post content, sidebars, or any widget area Popup forms: timed or exit-intent overlays that capture leaving visitors Slide-in forms: subtle panels appearing from the corner without interrupting reading Top bar banners: sticky strips that stay visible as visitors scroll Every form is fully customizable — colors, fonts, field labels, button text — with custom fields to collect attributes like location, company, or preferences at signup. Double optin keeps lists healthy and compliant: each new subscriber receives a confirmation email before being added, creating a documented consent trail and better long-term engagement. weMail’s forms connect natively to weMail lists and to 18-plus third-party integrations, so leads from any optin touchpoint flow automatically into the right segments, across all WordPress themes including block-based Gutenberg layouts. Subscriber Management: Organize, Segment, and Target Building a list is step one. How you organize, qualify, and communicate with subscribers determines whether email becomes a real revenue channel or just noise. weMail includes a complete subscriber management system built directly into WordPress. List management: unlimited lists for different audiences, products, or campaigns. A contact can belong to multiple lists, and moving contacts between lists is handled through bulk actions. Tagging and segmentation: tag based on behavior, purchase history, signup source, or any custom attribute, and build dynamic segments that update automatically as data changes. Custom fields: store any subscriber attribute your campaigns need; these sync with optin forms and become personalization tokens in every email. Subscription status: view active, unsubscribed, bounced, and pending contacts at a glance, and update records individually or in bulk for cleaner deliverability. Activity timeline: each contact’s history of emails received, opens, clicks, and signup events, to inform re-engagement and segmentation. Bulk operations: import, export, tag, move, or delete contacts en masse, and merge duplicates to keep lists authoritative. Because weMail stores subscriber data in the cloud, your database never carries the weight of large lists — hosting performance stays consistent whether you manage 500 subscribers or 500,000. WordPress Integration: Email Marketing That Feels Native weMail feels like a natural extension of WordPress, not a bolted-on tool. Every major WordPress feature connects without extra configuration. WordPress user sync: automatically add new registrations to subscriber lists based on role, turning registration into a signup event. Gutenberg block: add signup forms to any page or post using weMail’s native block, live without shortcodes. Post notification: configure a list once, and every published post goes out as a formatted email notification automatically. Widget support: place signup forms in any widget area, compatible with classic and block-based themes. Shortcode support: embed forms with a simple shortcode in any theme or page builder. WooCommerce Integration: Turn Customers Into Loyal Subscribers For WooCommerce stores, weMail connects store data directly to email campaigns, delivering full subscriber lifecycle management powered by real purchase behavior. Branded WooCommerce emails: design transactional messages — order confirmations, shipping notifications, post-purchase follow-ups — using the same drag-and-drop builder as marketing campaigns. Customer-to-subscriber sync: when a purchase completes, weMail can add the buyer to a list, tag them by product category, and trigger a post-purchase automation, turning every customer into an addressable contact. Abandoned cart recovery: one of the highest-ROI applications of WooCommerce email automation. weMail detects an abandoned cart and sends a timed sequence of recovery emails, consistently recovering 10-15% of lost revenue with no ongoing effort. Product-based segmentation: segment subscribers by what they’ve purchased, browsed, or spent, sending targeted promotions to specific-product buyers or re-engagement messages to customers inactive for 90 days. Revenue attribution: see which newsletter drove the most purchases, which automation sequence produces the highest lifetime value, and which segments convert best. The integration is native, with no bridge plugins needed. Connect your store in minutes from weMail Integrations and start turning order data into targeted campaigns immediately. Contact Form Integrations: Capture Leads at Every Touchpoint Not every visitor converts through a dedicated registration form. Many engage first through your site’s inquiry form, quote request form, or support page. weMail integrates with the most popular WordPress form plugins to ensure those touchpoints also grow your subscriber list. Supported contact form plugins: Contact Form 7 Ninja Forms Caldera Forms WPForms weForms Gravity Forms Happy Forms Formidable Forms Fluent Forms Forminator Froms Everest Forms Elementor Forms For each integration, you control which fields map to subscriber attributes and whether a consent checkbox is required, keeping consent transparent and auditable. When a visitor submits the form and opts in, they’re added to your specified list immediately, ready for your welcome sequence and subsequent campaigns. Team Management: Collaborate Without Chaos Collaborate with your marketing team without granting everyone full admin access. weMail includes built-in team management with role-based permissions to keep your account secure and productive. weMail leverages WordPress’s native role system. By default, only Administrator and Editor roles have access: Administrator: full access to all weMail features Editor: full access to campaigns, subscribers, and settings Admins can grant access to additional roles (Author, Contributor, etc.) from weMail Settings → General. Users without an accessible role cannot see or interact with weMail features. Analytics & Reporting: Measure What Actually Matters Every campaign generates detailed performance data in a clean, actionable dashboard, with no separate analytics tool required. Campaign reports: delivery, open, click-through, bounce, and unsubscribe rates for every newsletter or automation step, plus geographic distribution of engagement. List reports: subscriber growth over time, signup source breakdown, and list health metrics, helping identify which forms produce the highest-quality leads based on engagement, not volume. Automation reports: step-by-step performance across every sequence, showing where subscribers drop off and which branch or step performs best. Link tracking: click maps for individual emails show exactly which links contacts clicked most, helping optimize placement and CTA copy in future campaigns. All analytics data is stored in weMail’s cloud, so historical reports remain accessible even after WordPress updates or server migrations. Import & Export: Migrate Without the Headache Switching email platforms is notoriously painful. weMail makes it as smooth as possible. Import subscribers from any CSV file. The import wizard maps your columns to weMail fields, handles duplicates, and respects existing opt-in status, so previously unsubscribed contacts aren’t re-added to active lists. Platform-specific guides walk through migrating from Mailchimp, ActiveCampaign, ConvertKit, and others, with tags, custom fields, and history transferring cleanly where the source platform allows export. Export at any time: pull any list or segment to CSV on demand. Your data is never locked in, whether auditing, syncing to a CRM, or evaluating alternatives. GDPR Compliance: Built-In Privacy Tools Privacy regulations require verifiable consent for email marketing. weMail includes the tools to keep your subscriber collection compliant without custom development. Double optin: each new contact receives a confirmation email before activation, creating a documented consent record for every signup. Consent logging: weMail records the date, time, IP address, and form ID for each subscription, exportable for regulatory review under GDPR, CCPA, or similar frameworks. One-click unsubscribe: every email includes a compliant unsubscribe link, processed instantly and respected across all future sends and automations. Data access and deletion: export or delete individual subscriber records directly from the management panel, fulfilling access and erasure requests without third-party tools. Installation & Setup Getting started with weMail takes under ten minutes. Install and activate weMail from the WordPress plugin directory. Create a free weMail account or connect an existing one from the plugin dashboard. Go to weMail → Settings → SMTP and connect your preferred gateway. weMail walks through API key setup for each supported sending provider step by step. Create your first subscriber list. Build a lead form using the optin form builder and publish it to your site. Set up a welcome email in the email automation builder to greet every new subscriber automatically. The onboarding wizard guides you through each step. Most users complete initial setup (including sending setup and first optin form) in a single session. For WooCommerce stores, enable the integration under weMail → Integrations to begin syncing customers and configuring store-related emails. 🔒 Privacy Policy weMail collects telemetry data upon user confirmation to troubleshoot problems faster and make product improvements. Learn more about how weMail collects and uses data. Additionally, review weDevs privacy policy for complete information. More Products from weDevs Dokan – WooCommerce multivendor marketplace solution WP User Frontend – Frontend post submission, user registration, profile builder Happy Addons for Elementor – 143+ free & pro Elementor widgets WP Project Manager – Project management with Kanban board, Gantt charts weDocs – Self-hosted knowledge base plugin WP ERP – Complete ERP with HR, CRM, and accounting Texty – Lightweight SMS notification plugin wePOS – WooCommerce point of sale solution