WordPress Security Plans for Different Needs
Wordfence Premium, Wordfence Care, and Wordfence Response are paid plans for the Wordfence Security plugin. They build on a security toolkit that includes an endpoint firewall, malware scanner, login security, live traffic views, and additional security tools.
The plugin’s Web Application Firewall identifies and blocks malicious traffic at the WordPress endpoint. It can limit login attempts to help protect against brute-force attacks, while integrated scanning checks for malware or malicious code and content. The scanner examines core files, themes, and plugins for malware, bad URLs, backdoors, SEO spam, malicious redirects, code injections, and changes compared with WordPress.org repository versions.
What the Paid Plans Add
Wordfence Premium provides a Premium API key with real-time updates to the Threat Defense Feed. These updates include firewall rules, malware signatures, and a real-time IP blocklist. Premium also includes premium support, country blocking, more frequent scans, and spam and spamvertising checks.
Wordfence Care is a paid plan with hands-on support, including help with security incidents, as well as a yearly security audit. This option is intended for site owners who want assistance with security issues and a scheduled review of their website’s security.
Wordfence Response provides 24/7/365 support from the incident response team. The source describes a one-hour response time and a maximum of 24 hours to resolve a security issue. It is positioned for websites that require continuous incident response coverage.
Daily Security Workflows
Use Wordfence to monitor live visits and hack attempts, including their origin, IP address, time of day, and time spent on the site. You can block attackers by IP or create advanced rules using IP range, hostname, user agent, and referrer. Country blocking is available with Wordfence Premium.
When scans identify changed core, theme, or plugin files, Wordfence can report the changes and optionally overwrite them with an original version. The interface also provides options for deleting files that do not belong. Security alerts can track administrator logins, breached password usage, and increases in attack activity.
Installation and Setup
- Install the Wordfence Security plugin on your WordPress website.
- Choose the paid plan that matches your required feed updates, support, audit, or incident response needs.
- Use the Premium API key where applicable to receive the paid Threat Defense Feed updates.
- Review firewall, scanning, live traffic, login security, and alert settings.
- Use scan results and traffic data to investigate suspicious activity and apply available blocking or file-management tools.
Wordfence also supports WordPress Multisite, allowing every blog in a network to be scanned for malware with one click. The paid plans provide different levels of security updates and assistance while using the same central WordPress security workflow.
