"Today, WordPress is widely used, making it a primary target for attackers!", This research evaluates the performance of 3 open-source Web Application Firewalls (WAF)—OpenAppSec, ModSecurity, and SafeLine in protecting WordPress websites from cyber threats. Analyzes their performance in Threat Detection, Response Time, and Resource Usage within a simulated environment on VirtualBox, helping users choose affordable and effective security solutions.