- Home
- Web Application Firewall Software
- Wordfence Security
Wordfence Security
Seattle, Washington, United States
What it is
Wordfence Security is a WordPress security plugin for self-hosted and web-based sites. It combines an endpoint Web Application Firewall, malware scanning, login protection, and live traffic views. The firewall identifies and blocks malicious traffic at the WordPress endpoint. Its scanner checks core files, themes, and plugins for malware, backdoors, malicious redirects, code injections, and known vulnerabilities. Login security provides passkeys, two-factor authentication, CAPTCHA, and brute-force protection. Wordfence Central is free for Wordfence users and lets administrators manage site security, launch scans, apply configuration templates, and receive event notifications through email, SMS, Slack, or Discord. The free plan costs nothing, scans every three days, and receives firewall and malware signature updates after a 30-day delay. Premium costs $149 a year with real-time updates and ticket support. Care costs $590 a year, while Response costs $1,250 a year.
For and against
For
- Endpoint firewall blocks malicious traffic
- Scans themes, plugins, and core files
- Passkeys and two-factor authentication
- Free central management across sites
- Managed rule sets and rate limiting
Against
- Free updates delayed 30 days
- Each installation needs a unique license key
- Free support uses volunteer forums
- Care and Response exclude some server setups
The verdict
Wordfence Security brings firewall, malware scanning, login protection, and centralized controls to WordPress sites. The free tier covers core protection, while paid plans add faster updates and different support services.
Who it suits
It suits WordPress administrators needing firewall, scanning, login controls, and centralized management. Free users can use volunteer forums, while paid plans add listed support options.
Plans and prices
Wordfence Free
Firewall rules and malware signatures delayed 30 days · scans every 3 days · volunteer forum support
Read 11 Oct 2026 · wordfence.com
Wordfence Premium
Real-time firewall rules and malware signatures · premium IP blocklist · country blocking · 30-day audit log
Read 11 Oct 2026 · wordfence.com
Wordfence Care
Hands-on installation, configuration, optimization and monitoring · unlimited incident response · annual security audit · 6-month audit log
Read 11 Oct 2026 · wordfence.com
Wordfence Response
24/7/365 incident response · 1-hour response time · 24-hour time to resolution · 1-year audit log
Read 11 Oct 2026 · wordfence.com
On the record
- Central management
- Wordfence Central is free for Wordfence users and supports managing site security, launching scans, and applying configuration templates across sites.wordfence.com · read 11 Oct 2026
- Company
- Wordfence is made by Defiant Inc, incorporated in Delaware and headquartered in Seattle, Washington.wordfence.com · read 11 Oct 2026
- Firewall
- The Web Application Firewall identifies and blocks malicious traffic, and Wordfence says it runs at the WordPress endpoint.wordpress.org · read 11 Oct 2026
- Integrations
- Wordfence Central can send security event notifications by email, SMS, Slack, and Discord.wordfence.com · read 11 Oct 2026
- Login protection
- Login security includes passkeys, two-factor authentication, CAPTCHA, and protection against brute-force attempts.wordpress.org · read 11 Oct 2026
- Malware scanning
- The scanner checks core files, themes, and plugins for malware, backdoors, malicious redirects, code injections, and known vulnerabilities.wordpress.org · read 11 Oct 2026
- Product
- Wordfence is a WordPress security plugin with an endpoint firewall, malware scanner, login security, and live traffic views.wordpress.org · read 11 Oct 2026
- Service exclusions
- Care and Response services are not available for Windows servers, load-balanced servers, or WordPress Multisite Networks.wordfence.com · read 11 Oct 2026
- Site limits
- Each Wordfence plugin installation requires a unique license key; Care and Response cover one site per license, with multisite allowed up to five total sites.wordfence.com · read 11 Oct 2026
- Support
- Free plugin users can seek help through volunteer forums, while Premium includes ticket support and Response offers a one-hour incident response time.wordfence.com · read 11 Oct 2026
- Threat intelligence
- Free users receive firewall rule and malware signature updates with a 30-day delay, while paid plans receive real-time updates.wordfence.com · read 11 Oct 2026