Below are recommended plugins for many government-specific challenges.

Finding a ‘good’ plugin

How do you know if a plugin is “good?” Take a look at the right side of the plugin’s page and check to see that it has:

  • Recent and frequent updates (within the past several months)
  • High download count (tens of thousands to hundreds of thousands)
  • Strong user rating (four stars or higher)
  • Active support forums (with developer participation)

Recommended plugins

Kitchen sink

  • Jetpack: Supercharges your self-hosted WordPress site with the awesome cloud power of


  • Members: User role and permission management
  • Maintenance Mode: Temporarily disables public-facing site
  • BackWPUp: Automated on- or offsite database backups
  • See Also WordPress MultiSite

Performance and caching

  • WP Super Cache: Simple page cache for smaller sites
  • W3 Total Cache: Full-featured page, object, and browser cache, CDN integration, etc.
  • Batcache: Multi-server memcached-based caching that powers

Workflow and publishing

  • EditFlow: Comprehensive workflow management for teams
  • WP Document Revisions: Workflow-based document management

Business intelligence and analytics

  • Google Analytics for WordPress: Turnkey Google Analytics integration
  • Open Web Analytics: Advanced analytics and reporting, including backend business intelligence such as posts published/edited, comments, registrations, etc.

Search engine optimization (SEO)

  • WordPress SEO by Yoast: Full featured SEO solution, including generation of sitemaps
  • Google XML Sitemaps: Generates compliant XML sitemaps

Content organization and display

  • JSON API: Automatically generate JSON (machine-readable) APIs of all front-facing content
  • Mediaplayer.js: HTML5 video and audio embedding via shortcode
  • Responsive WordPress Slider - Soliloquy Lite
  • WP-PageNavi
  • WP Sitemap Page


  • Gravatar: (via the official JetPack plugin) Generates user images based off of e-mail addresss
  • Social Media Widget: Embed latest social media activity in sidebar


  • SI CAPTCHA Anti-Spam: 508-compliant, anti-spam captcha

Other content

  • WP jQuery Lightbox
  • The Events Calendar
  • WP Job Manager


Generally speaking, WordPress is secure, out of the box, especially when you follow the best practices described in the  Hardening WordPress Codex page. Looking for more security? These plugins may prove useful:

  • Limit Login Attempts: Limit rate of login attempts, including by way of cookies, for each IP. Fully customizable.
  • Secure WordPress: Removes error information on login pages, adds index.html to plugin directories, hides the WordPress version and much more.