Defender Pro

Defender Pro brings file scanning, traffic filtering, login controls, and site activity entries together for WordPress. Run scans to review flagged files and vulnerabilities, then choose the protections to enable for your site.

Scan files and review findings

Scans compare WordPress core files and extensions with the official repository to find unexpected changes and rogue additions. They also check core, themes, and extensions for known vulnerabilities, server files for suspicious code or injections, and extensions for outdated or removed entries. These findings identify items to review.

Filter traffic and manage IP rules

When enabled, the AntiBot Global Firewall uses threat data from more than 750,000 websites to block harmful traffic and spam bots. Its blocklist updates every 12 hours. Basic Mode delivers balanced filtering; Strict Mode applies tighter filtering to suspicious activity.

The Hub provides central management for IP rules and AntiBot settings across connected websites. You can block individual addresses, import blocklists, apply allowlists, set timed or permanent lockouts, block traffic by country or location, and manage user-agent rules.

Protect logins and harden WordPress

Login protections include two-factor authentication, login limits, stronger password rules, and checks against compromised passwords before they are used. Options also include hiding the login URL, protecting sessions, and forcing a site-wide password reset when a breach is suspected.

Apply recommended hardening settings to disable the file editor, update security keys, hide front-end PHP errors, add security headers, or disable trackbacks and pingbacks. IP banning, IP lockouts, and 404 detection help identify and block unwanted activity.

Schedule scans and review activity

Set recurring scans for malicious code, suspicious injections, vulnerabilities, abandoned plugins, and missing hardening recommendations. Defender can email security reports and immediate threat summaries. Audit logs record logins, user changes, plugin and theme updates, content edits, and settings changes, providing a timeline to review.

Manage connected sites and set up

Defender supports WordPress Multisite and can be network enabled and managed from the network admin. The Hub centralizes IP rules and AntiBot settings across connected sites. Defender Pro includes access to 24/7 live support, and WPMU DEV support can advise on cleaning up a hacked site.

Install and activate Defender Pro, open its settings, and review the recommended protections. Enable the firewall, AntiBot, login, scanning, reporting, and hardening settings you need. If another security plugin is active, avoid enabling the same firewall, malware scanner, or login security capabilities in both, since duplicate controls can conflict.