Type to search.

#11 by installscommercial

Wordfence Security – Firewall, Malware Scan, and Login Security

by Mark MaunderVersion 9.0.2

Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.

Active installs
5+ million
#11 of 1,000
Downloads, all time
432M
432,031,910
Downloads, 30 days
3.9M
287.9K in the last 7
Rating
4.7 / 5
5,038 reviews
Last updated
31 days ago
Sep 30, 2026
Version
9.0.2
304 releases

What Wordfence Security's own page says

Read from wordfence.comon

PlanPriceBilledRenews atSites
Wordfence Premium$149per yearNot shownSelf-Administered Websites that Need the Best Protection Aga
Wordfence Care$590per yearNot shownBusy Business Owners Who Need Hands-on Support From a Dedica
Wordfence Response$1250per yearNot shownMission-Critical Sites that Require 24/7/365 Incident Respon
The page's own words around each price
  • Wordfence Premium: dfence.com/products/pricing compare-plans) - Wordfence Premium Wordfence Premium $149USDper year [Buy Now](https://www.wordfence.com/cart?add=premium) Real-time updat
  • Wordfence Care: m/products/pricing compare-plans) - Recommended Wordfence Care Wordfence Care $590USDper year [Buy Now](https://www.wordfence.com/cart?add=care) For business owner
  • Wordfence Response: ence.com/products/pricing compare-plans) - Wordfence Response Wordfence Response $1250USDper year [Buy Now](https://www.wordfence.com/cart?add=response) For mission-c

Who it is for

Wordfence protects over 5 million sites

Use cases the vendor names

  • WordPress security
  • malware detection
  • firewall protection
  • incident response

Features it lists

  • Real-time updates to firewall rules and malware signatures
  • Premium IP Blocklist blocks over 40,000 known threat actors
  • Country Blocking
  • access to the security Audit Log
  • Premium Support

A script read this page, and kept only what the page's text backs up. These are the vendor's list prices and its own words, not a deal and not my review. Prices change and can differ by country, so confirm on the vendor's page before you buy.

Upkeep and compatibility

Last updatedSeptember 30, 2026Updated in the last 3 months
Tested up toWordPress 7.1.4Covers WordPress 7.1.4, the current release
Needs WordPress4.7 or newer
Needs PHP7.0 or newer
First publishedApril 21, 2012
Support, last two months155 of 183 threads resolved (85%)

Reviews

4.7 / 5 from 5,038 reviews

Reviews by star rating
5 stars4,546
4 stars120
3 stars70
2 stars45
1 star257

Downloads, last 30 days

Low 29.8K a dayHigh 2.2M a day

What the author says it does

THE MOST POPULAR WORDPRESS FIREWALL & SECURITY SCANNER

WordPress security requires a team of dedicated analysts researching the latest malware variants and WordPress exploits, turning them into firewall rules and malware signatures, and releasing those to customers in real-time.

Choose the right protection for you: Wordfence Free, Premium, Care or Response

Wordfence is widely acknowledged as the number one WordPress security research team in the World. Our plugin provides a comprehensive suite of security features, and our team’s research is what powers our plugin and provides the level of security that we are known for.

At Wordfence, WordPress security isn’t a division of our business – WordPress security is all we do. We employ a global 24-hour dedicated incident response team that provides our priority customers with a 1 hour response time for any security incident.

The sun never sets on our global security team and we run a sophisticated threat intelligence platform to aggregate, analyze and produce ground breaking security research on the newest security threats.

Wordfence Security includes an endpoint firewall, malware scanner, robust login security features, live traffic views, and more. Our Threat Defense Feed arms Wordfence with the newest firewall rules, malware signatures, and malicious IP addresses it needs to keep your website safe.

The opening of the plugin's own description. The full text, installation notes and changelog are on its WordPress.org page.

Questions the author answers

How does Wordfence Security protect sites from attackers?

The WordPress security plugin provides the best protection available for your website. Powered by the constantly updated Threat Defense Feed, Wordfence Firewall stops you from getting hacked. Wordfence Scan leverages the same proprietary feed, alerting you quickly about security issues or if your site is compromised. The Live Traffic view gives you real-time visibility into traffic and hack attempts on your website.

What features does Wordfence Premium enable?

We offer a Premium API key that gives you real-time updates to the Threat Defense Feed which includes a real-time IP blocklist, firewall rules, and malware signatures. Premium support, country blocking, more frequent scans, and spam and spamvertising checks are also included. Click here to sign-up for Wordfence Premium now or simply install Wordfence free and start protecting your website.

How does the Wordfence WordPress Firewall protect websites?
  • Web Application Firewall stops you from getting hacked by identifying malicious traffic, blocking attackers before they can access your website.
  • Threat Defense Feed automatically updates firewall rules that protect you from the latest threats. Premium members receive the real-time version.
  • Block common WordPress security threats like fake Googlebots, malicious scans from hackers and botnets.
What checks does the Wordfence Security Scanner perform?
  • Scans core files, themes and plugins against WordPress.org repository versions to check their integrity. Verify security of your source.
  • See how files have changed. Optionally repair changed files that are security threats.
  • Scans for signatures of over 44,000 known malware variants that are known WordPress security threats.
What security monitoring features does Wordfence include?
  • See all your traffic in real-time, including robots, humans, 404 errors, logins and logouts and who is consuming most of your content. Enhances your situational awareness of which security threats your site is facing.
  • A real-time view of all traffic including automated bots that often constitute security threats that Javascript analytics packages never show you.
What login security features are included
  • See all your traffic in real-time, including robots, humans, 404 errors, logins and logouts and who is consuming most of your content. Enhances your situational awareness of which security threats your site is facing.
  • A real-time view of all traffic including automated bots that often constitute security threats that Javascript analytics packages never show you.

Latest changelog entry

9.0.2 – September 30, 2026

  • Change: Changed IPv6 diagnostics result to be informational only
  • Change: Added help link to increased attack rate emails
  • Improvement: Increased compatibility with WordPress Playground
  • Improvement: Harden REST API user enumeration protection
  • Fix: Upgraded virtualizer dependency to fix Firefox tab crash on screens with a lot of DOM elements (e.g., a running scan)
  • Fix: Better detection and handling of “module” script tagging to avoid conflict with renamed plugin directories
  • Fix: Add missed return value from upgrader_pre_install audit log filter

Screenshots

First 4 of 9, from WordPress.org.

Tagged

Plugins that share its tags

This Anti-Malware scanner searches for Malware, Viruses, and other security threats and vulnerabilities on your server and it helps you fix them.

Installs
100,000+
Rating
4.9 (783)
Updated
4 days ago

Where this page's numbers come from

Read from the WordPress.org plugin API on , when WordPress 7.1.4 was the current release. WordPress.org rounds active installs into buckets. These are the directory's figures, not my verdict, and I haven't tested this plugin.