Protect your websites with the best security available.

Real-Time Threat Defense Feed

Web Application Firewall

♥Customer Favorite

Get Peace of Mind with the Wordfence Web Application Firewall

The Web Application Firewall stops you from getting hacked by identifying malicious traffic, blocking attackers before they can access your website. Powered by the Threat Defense Feed, it is automatically updated with new firewall rules that protect you from the latest threats. Even if you are running a vulnerable plugin or theme, Wordfence will protect you from being hacked by blocking attacks based on known and constantly updated attack patterns.

Wordfence protects you from new and emerging threats

The Wordfence Forensic Lab is constantly adding new firewall rules to the Threat Defense Feed
The Premium version of the Threat Defense Feed is updated in real-time

Block Brute Force Attacks

Real-Time Threat Defense Feed

⋆Premium Plan Feature

♥Customer Favorite

Protection from the latest threats, delivered as they emerge

Wordfence protects over 1 million WordPress websites, giving us unmatched access to information about how hackers compromise sites, where attacks originate from and the malicious code they leave behind. The team in our Forensic Lab are constantly adding updates as they discover new threats. Premium members receive the real-time version of the Threat Defense Feed. Free users receive the community version, which is delayed by 30 days.

The real-time version of the Threat Defense Feed provides our Firewall and Scan Engine with:

Updated firewall rules
The latest malware signatures
Malicious IP updates

Block Brute Force Attacks

♥Customer Favorite

Stop brute force attacks

It takes just one look at the live login activity on your site to quickly realize how many failed login attempts you receive. Wordfence monitors these and will lock out any attempts to brute-force guess your WordPress password or WordPress usernames.

Wordfence prevents Brute Force Attacks by:

Locking out users after too many login failures
Locking out users after using the “forgot password” form too many times
Optionally locking out anyone who uses an invalid username
Preventing WordPress from giving hackers information about what usernames may exist on your system
Enforcing Cell Phone Sign-in (Two Factor Authentication) with Wordfence Premium

Country Blocking

Country Blocking

⋆Premium Plan Feature

Put geographic protection in place

Wordfence country blocking is designed to stop an attack, prevent content theft or end malicious activity that originates from a geographic region in less than 1/300,000th of a second. Blocking countries who are regularly creating failed logins, a large number of page not found errors and are clearly engaging in malicious activity is an effective way to protect your site during an attack.

Wordfence Country Blocking gives you these options to protect your WP site:

Block access to your login form
Block access to the rest of your WordPress site
Access to a continually updated database of country to IP mappings
You’ll find even more options in Advanced Blocking

Advanced Manual Blocking

Powerful options allow you to block traffic from any source

Quickly and efficiently dispatch site security threats by blocking entire malicious networks and any human or robot activity that indicates suspicious intentions based on pattern matching and IP ranges.

Wordfence helps you intelligently block WordPress website threats by giving you the ability to:

Block ranges of IP addresses (Think of these as networks)
Specific web browsers and web browser patterns
Referring websites
Any combination of the above

Malware Scanner

Real-Time Threat Defense Feed

Malware Scanner

♥Customer Favorite

Scan for Malware, Bad URLs, Backdoors and DNS Changes There are many places on WordPress sites for hackers to hide, but not with Wordfence. We maintain a cluster of high performance servers in our data center to assist with scanning your website. When Wordfence scans your site, it compares your core files, themes and plugins with what is in the WordPress.org repository and reports any changes to you. Wordfence leaves no corner of your WordPress site untended by:

Scanning core files, themes and plugins for malware, code injections and backdoors. Also checks them against WordPress.org repository versions to check their integrity
Checks URLs against Google’s safe browsing list
Scans for DNS changes
Premium users can scan as frequently as every hour and select optimal times that don’t interfere with high traffic time periods.

Check if Site IP is Generating Spam

Real-Time Threat Defense Feed

⋆Premium Plan Feature

♥Customer Favorite

Protection from the latest threats, delivered as they emerge

The real-time version of the Threat Defense Feed provides our Firewall and Scan Engine with:

Updated firewall rules
The latest malware signatures
Malicious IP updates

Check if Site is Spamvertized

Check if Site IP is Generating Spam

⋆Premium Plan Feature

♥Customer Favorite

Feeling ignored? Your emails might be trapped

Your legitimate customer emails can be caught in spam filters if another site on your shared IP address is generating a lot of spam. Use this feature to confirm that your site is running on a clean IP address, and that the shared IP you are using to host your website is not listed as a known source of spam email.

Wordfence prevents your IP from generating spam by:

Checking your IP address reputation with reputation providers like Spamhaus
Protecting your own website which prevents your site from being used to send spam email
Alerting you to file changes that don’t match the official WordPress repository, which may indicate a script installed that generates spam

View Blocked Intrusion Attempts

Check if Site is Spamvertized

⋆Premium Plan Feature

♥Customer Favorite

More than a pain, spam is destructive

When your website URL is being used for spamvertising, it can severely impact your SEO rankings and email deliverability. Wordfence checks if your website URL has been flagged for spamvertising, indicating that your site may have been compromised or that you are emailing too aggressively.

Wordfence prevents your site from becoming a venue for spamvertizing by:

Protecting your site from being hacked, which prevents spammers from using your URL in spam emails
Checking if your site domain name has been flagged as a source of spam, which may indicate that your site has been hacked, or you are being flagged as a spammer for another reason

Watch hackers trying to break into your site right now

Monitor visits and hack attempts not shown in other analytics packages and see attempts in real time; including where in the world they’re coming from, their IP address, the time of day and time spent on your site.

Wordfence monitoring in real time means you’ll see:

Traffic from robots, humans, Google crawlers and 404 errors
Traffic not shown by Google Analytics and other Javascript loggers
Logins, logouts and who is consuming the most content
Security threats and exploit attempts in real-time
Visitor location at the city level and visitor hostname

View Google Crawl Activity

Watch Google Crawl Your Site In Real Time

If you’re like most website owners, SEO matters. Monitor Google as it crawls your site to see which pages are being crawled and which aren’t. Identify issues like crawling non-existent pages and missing robots.txt files.

Wordfence Live Traffic monitoring allows you to see:

Separates pageviews generated by humans from those generated by crawlers
Immediately blocks fake Google crawlers and malicious or overly aggressive crawlers
Helps enhance SEO by logging how often and when Google crawlers access your site

View Bots and Crawlers

Block rogue crawlers in real-time. Save bandwidth, protect content.

If someone or something is generating many “page not found errors” or consuming content too aggressively, they’re likely up to no good. Block them with Wordfence, and make room for Google crawlers to work unhindered.

Wordfence is your ally in crawler control, because it:

Separates pageviews generated by humans from those generated by crawlers
Immediately blocks fake Google crawlers and malicious or overly aggressive crawlers
Helps enhance SEO by logging how often and when Google crawlers access your site

View Logins and Logouts

Watch visitors log in and out of your site in real time

There are many scenarios where it is helpful to see who is logging in and out of your site. If you think that you’ve been hacked you can look to see who has logged in, when they did and where they came from. If you are seeing a huge spike in brute force login attempts, you can use the information to develop a blocking strategy. Visibility into which usernames attackers are using during password guessing attacks alerts you to usernames you may need to change.

Wordfence Live Traffic monitoring allows you to see:

Logins, logouts and who is consuming the most content
Traffic from robots, humans, Google crawlers and 404 errors
Traffic not shown by Google Analytics and other Javascript loggers
Security threats and exploit attempts in real-time
Visitor location at the city level and visitor hostname

View Human Visitors

Watch site visitors use your site in real time

Monitor visits to your site in real time; including where in the world they’re coming from, their IP address, the time of day and time spent on your site.

Wordfence Live Traffic monitoring allows you to see:

Traffic from robots, humans, Google crawlers and 404 errors
Traffic not shown by Google Analytics and other Javascript loggers
Security threats and exploit attempts in real-time
Visitor location at the city level and visitor hostname

Cell Phone Sign In

Cell Phone Sign In

⋆Premium Plan Feature

The most effective way to stop brute force attacks permanently

Take your site security to the next level with “Two Factor Authentication” and secure your website investment. Used by banks, government agencies and military worldwide, Two Factor is one of the most secure forms of remote system authentication available.

Wordfence Cell Phone Sign-in is secure because:

It relies on something you know (your password) and something you have (your cellphone). Two factors
It prevents simple password guessing attacks because they don’t have your cellphone to pass the second phase of authentication
An attacker needs to know your password before you will receive an SMS, protecting you from being inundated with SMS’s during a brute force attack

Repair Files

Repair Files

♥Customer Favorite

Don’t just find corrupted files. See the changes and repair them

Wordfence uses our source code verification feature to tell you what has changed and help repair hacked files. Backed by our cloud servers (over a terabyte of data), Wordfence checks the integrity of your core files, theme files and plugin files against what is stored in the official WordPress repository. We maintain a record of every WordPress core, theme and plugin file ever released to the official repository to provide this feature.

After Wordfence has alerted you to file changes, you can:

See how files have changed, something only Wordfence does
Download the original file to compare original to current
View and repair the file by overwriting with a pristine, original version

Audit Existing Passwords

Advanced Comment Spam Filter

Audit Existing Passwords

⋆Premium Plan Feature

Easily crackable passwords lead to larger problems

Strong passwords are crucial to the security of your site, and Wordfence ensures your passwords are strong by checking them against a database of common passwords and simulating a hack attempt using our password auditing GPU cluster. A Wordfence Password Audit simulates what a hacker would do if they stole your password database and launched an attack on it.

Wordfence completes the password audit, so you can:

Know which user accounts are using passwords known in the hacker community through previously hacked websites
Know which accounts are using easily crackable passwords
Email admins, publishers and members their new passwords if they are using a weak password
Alternatively, send admins, publishers and members a request to update their passwords themselves if they are using a weak password