Wordfence

Wordfence is a WordPress security plugin from Defiant Inc. that helps site owners protect WordPress installations from attacks, malware, and unauthorized access. It combines a web application firewall, malware scanning, two-factor authentication, and threat intelligence in a single plugin, with a free version available alongside paid tiers.

The plugin includes a web application firewall, malware scanning, two-factor authentication, and security alerts. Paid tiers add real-time firewall rules and malware signatures, a continuously updated premium IP blocklist, country blocking, security audit logging, and premium support. Wordfence Central provides centralized management across multiple WordPress sites, including security event dashboards, configuration templates, and scan launching. Wordfence Intelligence offers a vulnerability database, API access, and webhook integration. Wordfence CLI provides command-line vulnerability scanning.

Wordfence is available as a free version with a 30-day delay on firewall rules and malware signatures, alongside paid editions: Premium, Care, and Response. Care includes hands-on incident response and support, while Response provides 24/7 incident response with defined response and resolution times. Wordfence Central is free for all users, including those on the free version.