Protect your websites with the best WordPress security available.

Wordfence includes an endpoint firewall and malware scanner that were built from the ground up to protect WordPress. Our Threat Defense Feed arms Wordfence with the newest firewall rules, malware signatures and malicious IP addresses it needs to keep your website safe. Rounded out by a suite of additional features, Wordfence is the most comprehensive security option available.

Why choose an endpoint firewall like Wordfence?

WordPress security is what we do, cloud alternatives are generic.

Wordfence runs at the endpoint, your server, providing better protection than cloud alternatives. Cloud firewalls can be bypassed and have historically suffered from data leaks. Wordfence firewall leverages user identity information in over 85% of our firewall rules, something cloud firewalls don’t have access to. And our firewall doesn’t need to break end-to-end encryption like cloud solutions.

More Powerful Features

Leaked Password Protection

Protect your site against attacks that leverage password information stolen in data breaches. Block logins for administrators using known compromised passwords.

Live Traffic

Monitor visits and hack attempts not shown in other analytics packages in real time; including origin, their IP address and the time of day.

Advanced Manual Blocking

Quickly and efficiently block entire malicious networks and any human or robot activity that indicates suspicious intentions based on pattern matching and IP ranges.

Country Blocking

Blocking countries who are clearly engaging in malicious activity is an effective way to protect your site during an attack. Premium Feature.

Repair Files

Wordfence uses our source code verification feature to help you recover from a hack. It tells you what changed in core, theme and plugin files and helps repair them.

Two-Factor Authentication

Stop brute force attacks permanently by using one of the most secure forms of remote system authentication available.

Over 150 Million Downloads Speaks Volumes

lairbear (@lairbear)

I’ve been using Wordfence for some time now on 6 of my sites. It works extremely well and provides me with the protection from intruders that I need. I’ve only had a couple of minor issues, mostly caused by my lack of experience, but the support at Wordfence has been great at helping me out of a jam. I highly recommend the plugin, and purchasing the upgrade to the pro version is worth every penny. The plugin is easy to install and setup is simple. And.. if your host is GoDaddy, it is one of their recommended plugin partners.

Cain57 (@cain57)

Amazing, Must-have for WP Site security

My small business WP Site got hacked (built, installed and maintained by me) and a cryptocurrency miner was hidden somewhere in my code.

I spent a week trying to eliminate that code, and my Host also looked for it, without success, meanwhile I looked like a jerk trying to mine cryptocurrency from clients and potential clients!

I tried several other WP security plugins, and web scan sites, but none could find or fix my problem.

I downloaded and installed Wordfence, it found and repaired my problem in less than 5 minutes!

I’ve since enabled many of its additional features and have been stunned to learn just how many attempts there are daily to log into my page! No wonder it got hacked. Some jerk even set up a new username for himself!

Anyhow, I’ll never have any other WP page without Wordfence, and neither should you!

Amazing plugin, very simple and very powerful.