Practical security controls for WordPress
Defender Pro is a WordPress security plugin for managing malware checks, suspicious traffic, login protection, hardening, and ongoing site activity. It brings these controls together in an interface intended for site owners who want security tools without having to configure every protection manually.
The plugin can scan a site for changed or unexpected files, suspicious code, known vulnerabilities, outdated extensions, and plugins removed from the WordPress repository. These checks help identify areas that may need attention across WordPress core, themes, plugins, and server files.
AntiBot and firewall protection
Defender Pro gives connected sites access to the AntiBot Global Firewall. It uses threat data from more than 750,000 sites to block harmful traffic and spam bots. The blocklist is updated every 12 hours, and the feature can be enabled from the plugin controls.
Choose between Basic Mode for balanced protection and Strict Mode for tighter filtering of suspicious activity. IP management can also be handled centrally in The Hub, where users can apply blocklists and allowlists across sites, configure Geo IP blocking, and manage specific addresses.
- Block individual IP addresses manually.
- Import custom blocklists.
- Create timed or permanent IP lockouts.
- Block traffic from selected countries or geographic locations.
- Manage user-agent blocking and related traffic controls.
Login security and site hardening
Defender includes tools for stronger passwords, two-factor authentication, login limits, and protection against compromised passwords before they are used on the site. One-click hardening recommendations can help apply security settings without requiring manual code changes.
Hardening options include disabling the file editor, updating security keys, hiding PHP error reporting on the front end, adding security headers, and disabling trackbacks and pingbacks to reduce spam. The plugin also includes IP banning, IP lockout, and 404 detection features for identifying and blocking unwanted activity.
Automated monitoring and reporting
Schedule recurring scans for malicious code, suspicious injections, vulnerabilities, abandoned plugins, and missing hardening recommendations. Defender can send automated security reports and immediate threat summaries to your inbox, helping you monitor site condition without repeatedly checking the dashboard.
Audit logs record important site events, including logins, user changes, plugin and theme updates, content edits, and settings changes. These records provide a timeline for reviewing what happened and when.
Managing multiple sites
Defender security features support WordPress Multisite and can be network enabled and managed from the network admin. The Hub provides a central place for IP rules and AntiBot settings across connected sites. Defender Pro also includes access to 24/7 live support, while WPMU DEV support can advise on cleaning up a hacked site.
Installation and setup
Install and activate Defender Pro in WordPress, then open the plugin settings and review the recommended protections. Enable the required firewall, AntiBot, login, scanning, reporting, and hardening options. If another security plugin is active, avoid enabling the same firewall, malware scanner, or login security features in both plugins to reduce the possibility of conflicts.
