WPMU DEV - Your All-in-One WordPress Platform

<p><strong>Defender adds the best in WordPress plugin security to your website with just a few clicks, including malware scanner, firewall, password protection, and login security features. Stop brute force login attacks, weak password usage, SQL injections, cross-site scripting (XSS), and other WordPress security vulnerabilities and hacks with Defender’s malware scanner, providing antivirus scans, IP blocking, firewall, activity log, security log, and two-factor authentication (2FA) login security.</strong></p>
<p>No more complex security settings, Defender’s malware scanner, firewall, and login security features add all the hardening and security you need.</p>
<p>Defender is brought to you by the WordPress speed specialists that created Smush image optimization, now active on more than +1 million websites.</p>
<p>Plus, connect for free to WPMU DEV’s AntiBot Global Firewall to block harmful IPs with data from over 500,000 sites.</p>
<p><strong>Enjoy complete site protection from malware, vulnerabilities, bot attacks, and session hijacking from the start with <a href="https://wpmudev.com/project/wp-defender/?utm_source=wordpress.org&utm_medium=readme&utm_campaign=defender-readme-above-the-fold&utm_content=wp_defender_pro" rel="nofollow ugc">Defender Pro</a>.</strong></p>
<p>Level up security immediately with exclusive Pro features like scheduled malware scanning, Safe Repair for suspicious files, and known WordPress vulnerability detection. <a href="https://wpmudev.com/project/wp-defender/?utm_source=wordpress.org&utm_medium=readme&utm_campaign=defender-readme-above-the-fold&utm_content=wp_defender_pro" rel="nofollow ugc">Learn more about Pro</a>.</p>
<h3>Security Recommendations</h3>
<p>Defender’s one-click security hardening recommendations instantly adds layers of protection and security to your site.</p>
<h3>Enhance Security and Block Hackers At Every Level:</h3>
<ul>
<li><strong>Malware Scanner</strong> – Scan WordPress core files for modifications and unexpected changes which may be caused by malware. Scan for malware and tighten up the security of your files.</li>
<li><strong>Outdated & Removed Plugins</strong> – Scans for plugins removed from WordPress.org or not updated in 2+ years.</li>
<li><strong>AntiBot Global Firewall</strong> – Connect for free to WPMU DEV to block harmful IPs with data from over 500,000 sites.</li>
<li><strong>WordPress Security Firewall</strong> – Block or allowlist IPs, implement IP blocking, and Geo IP blocking, user agent banning and protect against brute force attacks.</li>
<li><strong>Two-Factor Authentication (2FA)</strong> – Easily set up better security with 2FA to prevent most login attacks such as brute force, App verification, backup codes, lost device email, WooCommerce 2FA, and Web Authentication.</li>
<li><strong>Login Masking</strong> – Change the location of WordPress’s default login area to improve login security.</li>
<li><strong>Login Lockout</strong> – Failed login attempts lockout for even more security assurance.</li>
<li><strong>User Agent Banning</strong> – Fortify security by blocking bad bots and user agents from accessing your site.</li>
<li><strong>Security Headers</strong> – Add an extra layer of defense security and protect against common attacks like: XSS, code injection, and more.</li>
<li><strong>404 Detection Security</strong> – Automated block of bot IPs.</li>
<li><strong>Security Configs</strong> – Create your ideal Defender security plugin settings and export / import saved configs to any other site.</li>
<li><strong>Geolocation IP Lockout Security</strong> – Block users based on location and country (IP blocking).</li>
<li><strong>Disable Trackbacks And Pingbacks</strong> – Disable these notifications to enhance spam protection and site security.</li>
<li><strong>Core And Server Update Security Recommendations</strong> – Stay on top of your system security.</li>
<li><strong>Antivirus Scan</strong> – Scan for active security threats, viruses, and other malware.</li>
<li><strong>Disable File Editor</strong> – If they get in, they won’t get far.</li>
<li><strong>Hide Error Reporting</strong> – Hide code errors on the frontend so hackers can’t exploit site security.</li>
<li><strong>Update Security Keys</strong> – Update old WordPress security keys to be more encrypted and provide better security.</li>
<li><strong>Prevent Information Disclosure</strong> – Improve server security and protect sensitive files by locking down specific file types.</li>
<li><strong>Prevent PHP Execution</strong> – Defender bolsters security by automatically preventing any PHP code from being executed.</li>
<li><strong>Bulk Apply Security Recommendations</strong> – Apply multiple recommended security improvements at once for quicker site hardening.</li>
<li><strong>Google reCAPTCHA Security</strong> – Easy to add, stop fraud and abuse – including BuddyPress and WooCommerce.</li>
<li><strong>Cloudflare Turnstile</strong> – Protect your site from spam and automated attacks without annoying captchas.</li>
<li><strong>Pwned Password Check</strong> – Increase security by protecting against compromised passwords.</li>
<li><strong>Force Password Reset</strong> – Force users with selected roles to reset passwords.</li>
<li><strong>Force Strong Passwords</strong> – Ensure users create secure credentials by enforcing robust password requirements.</li>
<li><strong>User Agent Blocklist Presets</strong> – Easily block unwanted bots and scripts using curated user agent presets.</li>
<li><strong>Known Vulnerability & Suspicious Code Scan (Pro Only)</strong> – Scan WordPress core, themes, and plugins for vulnerabilities and harmful code.</li>
<li><strong>Malicious Bot Detector (Pro Only)</strong> – Block malicious bots with layered defenses, including traps for bots that ignore robots.txt and checks for fake crawlers posing as search engines.</li>
<li><strong>Google Blocklist Monitoring (Pro Only)</strong> – Get instant alerts if your site is flagged by Google.</li>
<li><strong>Session Protection (Pro Only)</strong> – Stop session hijacking and prevent unauthorized account access.</li>
<li><strong>Safe Repair For Suspicious Files (Pro Only)</strong> – Restore or replace compromised files safely with a single click.</li>
<li><strong>Automated Reports (Pro Only)</strong> – Receive scheduled security reports straight to your inbox.</li>
</ul>
<h3>Learn The Ropes With These Hands-On Defender Security Plugin Tutorials</h3>
<ul>
<li><a href="https://wpmudev.com/blog/how-to-get-the-most-out-of-defender-security/" rel="nofollow ugc">How to Get the Most Out of Defender Security</a></li>
<li><a href="https://wpmudev.com/blog/stop-hackers-with-defender-wordpress-security-plugin/" rel="nofollow ugc">How to Stop Hackers in Their Tracks with Defender Security</a></li>
<li><a href="https://wpmudev.com/blog/delete-suspicious-code-defender/" rel="nofollow ugc">Find Out if You’re Hacked: How to Find and Delete Suspicious Code with Defender Security</a></li>
<li><a href="https://wpmudev.com/blog/defender-ip-address-lockout-firewall/" rel="nofollow ugc">How to Create a Powerful and Secure Customized Firewall with Defender Security</a></li>
</ul>
<h3>WordPress Security Scans</h3>
<p>Defender’s malware scanner security checks for suspicious code and malware. It also compares your WordPress install with the WP directory master copy, and reports any changes so you can restore the original file with a click.</p>
<h3>Two-Factor Authentication (2FA) Security</h3>
<p>Easily add an extra layer of protection and security to your WordPress sites with Defender’s two-factor authentication (2FA) features. Including: mobile app verification (Google Authenticator, Microsoft Authenticator, Authy), backup code generation, lost device emails, WooCommerce 2FA, Biometric Authentication (fingerprint/facial recognition), and Hardware Key Authentication (USB security keys). Easily prevent brute force attacks and login security vulnerabilities.</p>
<h3>Login Protection</h3>
<p>Brute force attacks are no match for Defender’s login security. Limit login attempts so hackers can’t guess passwords. Permanently ban IPs or trigger a timed lockout after a set number of failed login attempts. Use Geo IP blocking to ban users from specific countries or locations.</p>
<h3>Firewall Security and IP Manager</h3>
<p>Improve your website security with Defender’s IP manager and firewall. Manually block specific IPs, import a list of banned IPs, and set automated timed and permanent lockouts. Defender makes it easy to block and unblock specific locations quickly thanks to its advanced firewall security(WAF) offering Geographical IP blocking.</p>
<h3>User Agent Banning</h3>
<p>Add user agents to the block or allowlist and stop bad bots from spamming and scraping your site. All major search engines and special network bots are allow-listed out of the box. Easy to set up, Defender’s user agent banning tool now includes built-in bot and script presets to help you quickly block malicious traffic. It does all the security work for you—no editing of the .htaccess file required.</p>
<h3>Google reCAPTCHA Integration</h3>
<p>Add reCAPTCHA security to your login / registration pages, lost password forms, and post comments in a couple of steps to up security and help protect from fraud and abuse. Select reCAPTCHA type, language, location, and style to suit. As well as Google, Defender also supports the following reCAPTCHA types:</p>
<ul>
<li>BuddyPress reCAPTCHA</li>
<li>WooCommerce reCAPTCHA</li>
</ul>
<h3>Login Screen Masking</h3>
<p>Defender makes it easy to move your login screen to a custom URL. Not only does login screen masking improve security, but it also lets you white label your login user experience and improves branding.</p>
<h3>Force Password Reset</h3>
<p>Enhance site security by forcing all users with selected roles to reset their password at any time. Especially helpful if you suspect a possible data breach on your site.</p>
<h3>Security Headers</h3>
<p>Protect your site against common attacks, such as: XSS, code injection, cross site scripting, and more. Enable the following security headers:</p>
<ul>
<li>X-Frame-Options</li>
<li>X-XSS-Protection</li>
<li>X-Content-Type-Options</li>
<li>Strict Transport</li>
<li>Referrer Policy</li>
<li>Permissions-Policy</li>
</ul>
<h3>404 Limiter</h3>
<p>Detect when bots are being used to scan your site for security vulnerabilities and shut them down. The 404 limiter lets you stop the scan by detecting when a bot keeps visiting pages that do not exist, which can also save you from a giant strain on your site’s performance.</p>
<h3>Security Notifications and Reports</h3>
<p>Defender runs surveillance and sends security notifications with information that matters. All activity and notifications are recorded in the activity log to let you see at a glance the website security actions that have been taken by the Defender security plugin.</p>
<h3>Reduce Security Setup Time With Saved Configs</h3>
<p>Save your Defender security plugin configurations and reapply them to your other sites in just a few clicks. You can create and save an unlimited number of security configurations.</p>
<h3>Pwned Password Check</h3>
<p>Entered passwords are checked against public database breach records to further boost security. If a password is identified as compromised, the user will be asked to change it.</p>
<h3>Custom IP Block/Allowlist</h3>
<p>Create your IP block/allow list once, then apply and automatically sync it to all your other sites with just a single click. Save hours by not having to manually add IPs to each individual site. *Note: a [free WPMU DEV account] (https://wpmudev.com/register) is required to access this feature.</p>
<h3>What Do People Say About Defender?</h3>
<p>★★★★★<br />
“I found other pro security plugins a bit too fiddly for my taste…I’m delighted with Defender” – <a href="https://profiles.wordpress.org/keithadv" rel="nofollow ugc">KeithADV</a></p>
<p>★★★★★<br />
“Thank you for bringing back a free and easy to use 2-Factor Authentication after Clef! Defender helps keep me aware of my site’s security.” – <a href="https://wordpress.org/support/users/awijasa/" rel="ugc">awijasa</a></p>
<p>★★★★★<br />
“Defender’s interface is very intuitive with warnings that are very helpful” – <a href="https://wpmudev.com/profile/djohns" rel="nofollow ugc">djohns</a></p>
<p>★★★★★<br />
“Defender Recently blocked over 3000 attacks in one week without any noticeable impact on the website. WPMUDEV knocking it out of the park on this one.” – <a href="https://wpmudev.com/profile/davidoswald/" rel="nofollow ugc">David Oswald</a></p>
<h3>Secure Websites, More Trust, Better Profit</h3>
<p>If you’re running a business website or eCommerce store, privacy, security, uptime and trust are essential.</p>
<p>The Defender security plugin is here to help you: it’s a one of a kind WordPress security plugin that makes web security easy for anyone, for free!</p>
<ul>
<li>Malware scanner</li>
<li>Google two-factor authentication (2FA)</li>
<li>Web Authentication</li>
<li>Firewall setup and configuration</li>
<li>One-click site hardening and security tweaking</li>
<li>WordPress core file scanning and repair</li>
<li>Ongoing firewall security</li>
<li>Google reCAPTCHA</li>
<li>Security headers</li>
<li>One-click security configs</li>
<li>Login Screen Masking</li>
<li>Pwned Password Check</li>
<li>IP Blocklist manager and logging</li>
<li>Geo IP blocking</li>
<li>User agent banning</li>
<li>Unlimited file scans</li>
<li>Timed Lockout brute force login attack shield for login security</li>
<li>404 limiter for blocking vulnerability scans</li>
<li>IP lockout notifications and security reports</li>
</ul>
<p>All the above is free and will enhance WordPress security for you. If you need extra security for your WordPress site, <a href="https://wpmudev.com/?utm_source=wordpress.org&utm_medium=readme&utm_campaign=defender-readme&utm_content=you_should_get_wpmudev_membership#trial" rel="nofollow ugc">you should get a WPMU DEV Membership</a>.</p>
<p>Our Membership gives you access to Defender Pro – which security features include automated scanning, scheduled malware scans for Core, themes, plugins and other files, audit logs, firewall protection, Safe Repair, Blocklist monitoring – alongside Snapshot Pro cloud backups, the Hub with automated plugin, theme and core updates and safe-upgrade scans, all our premium WordPress plugins, 24/7 WordPress support and if your sites already been hacked our team of security experts will clean it up at no additional cost.</p>
<p><a href="https://wpmudev.com/?utm_source=wordpress.org&utm_medium=readme&utm_campaign=defender-readme&utm_content=and_you_can_find_out_more_here#trial" rel="nofollow ugc">It’s an incredible deal, and you can find out more here</a>.</p>
<h3>About Us</h3>
<p>WPMU DEV is a premium supplier of quality WordPress plugins and themes. For premium support with any WordPress-related issues you can join us here:<br />
<a href="https://wpmudev.com/?utm_source=wordpress.org&utm_medium=readme&utm_campaign=defender-readme&utm_content=wpmu_dev_link" rel="nofollow ugc">https://wpmudev.com/</a></p>
<p>Don’t forget to stay up to date on everything WordPress from the Internet’s number one resource:<br />
<a href="https://wpmudev.com/?utm_source=wordpress.org&utm_medium=readme&utm_campaign=defender-readme&utm_content=wpmu_dev_blog_link" rel="nofollow ugc">WPMU DEV Blog</a></p>
<p>Hey, one more thing… we hope you <a href="https://profiles.wordpress.org/WPMUDEV/" rel="nofollow ugc">enjoy our free offerings</a> as much as we’ve loved making them for you!</p>


Defender Security – Malware Scanner, Login Security & Firewall

WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more.

Virusdie

matveevartem

<p>ONE-CLICK WEBSITE SECURITY WITH VIRUSDIE WORDPRESS PLUGIN</p>
<h3>Welcome to the most anticipated website security plugin – Virusdie WordPress Plugin!</h3>
<p>Managing website security like malware scanning and removal, website hardening, patch management, real-time website protection against online attacks, and blacklist monitoring – is an automatic pleasure and we can prove it!</p>
<ul>
<li><strong>More than 3 million</strong> connected websites!</li>
<li><strong>99.87% malware and vulnerabilities detection rate.</strong> The best detection rate in the industry. Virusdie detects as many threats as possible, including new kinds of threats</li>
<li><strong>No false positives.</strong> False positives rate — less than 0.0002%. You can always be sure that your antivirus won’t mislead you)</li>
<li><strong>Website cleanup in one click.</strong> The industry’s safest automatic cleanup procedures ensure that your site will remain stable after cleanup (automatic malware removal)</li>
<li><strong>Real-time website protection</strong> against attacks by Website Firewall (protection against bad bots, DoS, XSS, SQL injections, suspicious uploads and activities, etc.)</li>
<li><strong>Virtual and real patch management</strong> (website hardening). It makes a virtual patch automatically or updates your vulnerable plug-ins and other site components in seconds, minimizing the risk of future problems.</li>
<li><strong>Blacklist monitoring and blacklisting tool</strong> that help you save time for unblacklisting by an automated un-blacklist wizard.</li>
<li><strong>Smooth onboarding:</strong> only dashboard with all you need. Manage Virusdie tools in a click! Your website is in full view: entire web-security status on one page.</li>
<li><strong>Friendly and responsive Virusdie support team.</strong> We are welcome to help you and answer your questions.</li>
</ul>
<p>To avoid interruptions to your business, you need to keep your site free of viruses. As they say, shit happens — but when it does, you have to clean it up, and fast. Today, Virusdie makes it possible to resolve 100% of the security issues most businesses face, either fully or partially automatically. We’ve taken powerful website security tools and made them friendly and automatic in WordPress plugin format. Now, you can scan, clean, and protect your site from a single panel with just one click of the mouse. What’s more, you won’t need any help to use Virusdie. This means that you’ll save tons of time while keeping your site’s security under your control!</p>
<h4>Free plan feature list:</h4>
<p>1. Antivirus:</p>
<ol>
<li>No extreme server CPU load while scanning!</li>
<li>Instant malware database update. The antivirus database is automatically updated in the background, so you won’t even have to think about doing anything manually to be sure you can eliminate as many viruses and vulnerabilities as possible.</li>
<li>Scans once a month:
<ul>
<li>Scanning website files for malware: all website files (not just CMS’ files), themes, plugins, PHP, JS, HTML, images, files with no type, any binary files and system files, .htaccess, and files with custom types and archives.</li>
<li>Scanning website database. Scan posts and comments for bad URLs and suspicious content, scan posts and comments for malware and injections.</li>
<li>Scanning for malware types (threats): malware, malicious redirects, Trojans, backdoors, shell scripts, malicious codes, bad URLs and SEO spam, defaces, code injections, browser coin miners.</li>
</ul>
</li>
<li>Detailed scan reports with malware and threats description and recommendations.</li>
<li>Add files to the exclusion list to ignore them in future scans.</li>
</ol>
<p>Find out more about <a href="https://virusdie.com/tools/#3rdPage" rel="nofollow ugc">Virusdie Antivirus</a></p>
<p>2. WAF:</p>
<ol>
<li>Don’t slow down your website while you’re using WAF!</li>
<li>Instant Firewall rules database update.</li>
<li>Bad requests, hacks attempts and attacks detection.</li>
</ol>
<p>Find out more about <a href="https://virusdie.com/tools/#6page" rel="nofollow ugc">Virusdie Firewall</a></p>
<p>3. Patch Management (website hardening)</p>
<ol>
<li>Instant vulnerabilities database update.</li>
<li>Check site (files, themes, plugins and components) for known security vulnerabilities and alerts you if found.</li>
<li>Scan once a month.</li>
</ol>
<p>Find out more about <a href="https://virusdie.com/tools/#4rdPage" rel="nofollow ugc">Virusdie Patch Manager</a></p>
<p>4. Blacklists Monitoring</p>
<ol>
<li>Checking your website more than 60+ blacklists automatically.</li>
<li>One-click to un-blacklist.</li>
</ol>
<p>Find out more about <a href="https://virusdie.com/tools/#7page" rel="nofollow ugc">Virusdie Blacklist Monitoring</a></p>
<h4>Premium plan feature list:</h4>
<p>(In addition to the free plan’ feature list)</p>
<p>1. Antivirus:</p>
<ol>
<li>Daily scans and Unlimited scans.</li>
<li>Automatic malware removal: The safest in the industry automatic malware removal – Your website continues to run stably after the automated cleanup.</li>
<li>Unlimited site cleanups.</li>
<li>File editor.</li>
<li>Malicious code highlighting in the file editor.</li>
<li>Pre-cleanup file backups.</li>
<li>Exclusion list to add files and ignore them in future scans.</li>
</ol>
<p>Find out more about <a href="https://virusdie.com/tools/#3rdPage" rel="nofollow ugc">Virusdie Antivirus</a></p>
<p>1. Firewall:</p>
<ol>
<li>Basic bad request protection.</li>
<li>XSS and SQL injection protection.</li>
<li>DoS-attacks protection.</li>
<li>Brute force protection by limiting login attempts.</li>
<li>Content scraping protection.</li>
<li>Malicious uploads prevention.</li>
<li>IP whitelisting/blacklisting.</li>
<li>URL blocking.</li>
<li>Country blocking.</li>
<li>History of blocked requests.</li>
<li>Make custom rules to block requests based by: IP Range, Hostname, User Agent and Referrer.</li>
<li>Make custom rules generic type for POST/GET requests.</li>
</ol>
<p>Find out more about <a href="https://virusdie.com/tools/#6page" rel="nofollow ugc">Virusdie Firewall</a></p>
<p>Patch Management:</p>
<ol>
<li>Daily and Unlimited scans.</li>
<li>Automatic virtual vulnerability patching (website hardening).</li>
<li>Automatic real patch management.</li>
</ol>
<p>Find out more about <a href="https://virusdie.com/tools/#4rdPage" rel="nofollow ugc">Virusdie Patch Manager</a></p>
<h4>Coming soon:</h4>
<ul>
<li><strong>Teamwork:</strong> you will be able to share access to your site with your team. Simple and secure!</li>
<li><strong>Website sharing.</strong> You’ll be able to share your website access with your digital agency who manage your website security – with one click!</li>
<li><strong>Website insurance and security expert marketplace:</strong> for being confident that in the event of a complex website infection or damage to your site, getting help from third-party security experts to restore your site won’t cost you any more than the minimum cost in your insurance policy.</li>
<li><strong>Firewall statistics and attack attempts reports will be available on the free tier plan!</strong> Keep your finger on the website pulse even for free!</li>
</ul>
<p>Join us on <a href="https://www.facebook.com/groups/WebSecCommunityVirusdie" rel="nofollow ugc">Facebook Community</a> and find out more about Virusdie cloud security tools.</p>


Virusdie – One-click website security

Malware scanning & removal, website hardening, patching vulnerabilities, real-time protection against online attacks, blacklist monitoring in a click!

Defender Security – Malware Scanner, Login Security & Firewall vs Virusdie – One-click website security