Wordfence
A comprehensive WordPress security plugin offering malware scanning, firewall protection, login security, and real-time threat defense.
Overview
Compatibility
Installation instructions
Customer support & learning resources
Changelog
Main benefits
Real-time firewall updates
Comprehensive malware scanner
Two-factor authentication
Centralized site management
Live traffic monitoring
About this plugin
Overview
WordPress Firewall
- Identifies and blocks malicious traffic.
- Real-time firewall rule and malware signature updates via the Threat Defense Feed (Premium).
- Real-time IP Blocklist blocks requests from the most malicious IPs (Premium).
- Protects your site at the endpoint, ensuring deep integration with WordPress.
WordPress Security Scanner
- Checks core files, themes, and plugins for malware, bad URLs, backdoors, SEO spam, malicious redirects, and code injections.
- Real-time malware signature updates via the Threat Defense Feed (Premium).
- Compares your core files, themes, and plugins with the WordPress.org repository to check their integrity.
- Alerts you to known security vulnerabilities and potential security issues.
Login Security
- Two-factor authentication (2FA) via any TOTP-based authenticator app or service.
- Login Page CAPTCHA to stop bots from logging in.
- Block logins for administrators using known compromised passwords.
Wordfence Central
- Manage the security for multiple sites in one place.
- Assess the security status of all your websites in one view.
- Highly configurable alerts delivered via email, SMS, or Slack.
- Track and alert on important security events including administrator logins and surges in attack activity.
Features list
Feature
Free version
Premium version
Firewall rules delayed 30 days
Firewall rules are updated with a 30-day delay.
Malware signatures delayed 30 days
Malware signature updates are delayed by 30 days.
Volunteer forums support
Support is provided through volunteer-moderated forums.
Scheduled security scans every 3 days
Security scans are scheduled to run every three days.
Plugin/Theme vulnerability monitoring
Monitors for vulnerabilities in plugins and themes.
File change detection
Detects changes made to files on the system.
Intrusion alerts
Alerts are sent when an intrusion is detected.
Rate limiting
Limits the rate of requests to prevent abuse.
Brute force protection
Protects against brute force attacks on login.
Login security - 2FA & RECAPTCHA
Enhances login security with 2FA and RECAPTCHA.
Real-time firewall rules
Instantly updated firewall rules to protect against the latest threats.
Real-time malware signatures
Immediate updates to malware signatures for enhanced security.
Real-time IP blocklist
Live updates to block malicious IP addresses.
Country blocking
Restrict access based on geographic location.
1-hour response time
Guaranteed response within one hour for urgent issues.
24/7/365 incident response
Round-the-clock incident response service.
Hands-on support from a dedicated analyst
Personalized support from a dedicated security analyst.
We install Wordfence
Professional installation of the Wordfence security plugin.
We configure Wordfence
Expert configuration of Wordfence settings for optimal security.
We optimize Wordfence for performance & security
Enhancing Wordfence for better performance and security.
Once yearly security audit
Annual comprehensive security audit.
Optional second audit
An additional security audit available upon request.
Continuous security monitoring
Ongoing monitoring to detect and respond to security threats.
Pricing
In some cases companies have different prices based on various components like a location. As a result the prices displayed here can differ from the ones you see on their websites.
See all pricing options