Really Simple Security

by Really Simple Plugins
Tested with WP 7.1.3 Free, GPLv2

Our take

Really Simple Security started as the easiest way to switch WordPress to HTTPS and has grown into a light security toolkit. The free version handles the SSL redirect, the most useful hardening tweaks and alerts about vulnerable plugins. For a firewall and a mixed content fixer you need Pro; many sites pair the free version with a login limiter.

Good

  • One-click switch to HTTPS with proper 301 redirects
  • Useful hardening options in plain language
  • Alerts when an installed plugin has a known vulnerability
  • Modular, so unused features don't load

Watch out

  • Mixed content fixer and firewall are Pro
  • 2FA in the free version sends codes by email only

Really Simple Security, previously called Really Simple SSL, is best known for moving a WordPress site from http to https without editing files. It detects your certificate, updates the site address, sets up 301 redirects and marks cookies as secure, all from one button.

Security features beyond SSL

The plugin now also covers the basics of WordPress hardening. Each option is explained in plain language, so you can switch things on without knowing the technical background. A vulnerability check compares your plugins, themes and WordPress version with a list of known security issues and tells you when to update.

What you get for free

  • One-click HTTPS migration with 301 redirects
  • Let’s Encrypt certificate installation where your host allows it
  • Hardening: no PHP execution in uploads, hidden user names, XML-RPC off, no directory browsing
  • Notifications about vulnerable plugins and themes
  • Two-factor authentication by email for chosen user roles

Really Simple Security Pro adds a mixed content scan and fixer, a firewall and stronger login protection.