Wordfence Premium

Wordfence Security brings an endpoint firewall, malware scanner, login controls and live traffic monitoring to a WordPress site. Wordfence Premium includes real-time Threat Defense Feed updates and additional scan and support options. Care and Response provide various levels of hands-on security assistance.

How the paid plans differ

• Wordfence Premium: A Premium API key provides real-time Threat Defense Feed updates, including firewall rules, malware signatures and a real-time IP blocklist. Premium also includes country blocking, more frequent scans, spam and spamvertising checks, premium support and the Security Audit Log. Feed updates in the free version are delayed by 30 days.
• Wordfence Care: Includes hands-on support, help with security incidents and a yearly security audit.
• Wordfence Response: Provides 24/7/365 support from the incident response team. The stated response time is one hour, with a maximum of 24 hours to resolve a security issue.

Firewall, scanning and login security

The endpoint Web Application Firewall identifies and blocks malicious traffic within WordPress. It can limit login attempts to help protect against brute-force attacks. Login security also includes passkeys, TOTP-based two-factor authentication, login page CAPTCHA and an option to block administrator logins using known compromised passwords.

The scanner checks core documents, themes and extensions for malware, bad URLs, backdoors, SEO spam, malicious redirects and code injections. It compares files with repository versions to report changes, checks for known vulnerabilities, and scans posts, comments and files for dangerous URLs or suspicious content. Wordfence can overwrite changed files with original versions and provides options to delete files that do not belong. Review scan results and back up files before using cleanup tools.

Monitoring and website management

Live Traffic shows visits and hack attempts, including their origin, IP address, time and time spent on the site. You can block an IP address or create rules based on IP range, hostname, user agent or referrer. Country blocking is available with Premium. Security alerts can track administrator logins, breached password use and increases in attack activity.

The Security Audit Log, available with Premium, monitors changes and actions in security-sensitive areas of a site. Its data can be stored remotely through Wordfence Central. WordPress Multisite is supported, with scanning across the network's blogs from one click.

Getting started

1. Install the Wordfence Security extension on your WordPress site.
2. Choose the paid plan that fits your feed update, support, audit or incident response needs.
3. Use the Premium API key where applicable to receive paid Threat Defense Feed updates.
4. Review firewall, scanning, live traffic, login security and alert settings.
5. Investigate scan results and traffic data, then use the available blocking or file management tools as needed.