Wordfence Security
Wordfence Security is a WordPress security plugin for self-hosted sites, with a Web Application Firewall, malware scanner, login protection, and live traffic…
What Wordfence Security is
Wordfence Security is a WordPress security plugin for self-hosted sites, with a Web Application Firewall, malware scanner, login protection, and live traffic views. The firewall identifies and blocks malicious traffic at the WordPress endpoint. Its scanner checks core files, themes, and plugins for malware, backdoors, malicious redirects, code injections, and known vulnerabilities. Login protections include passkeys, two-factor authentication, CAPTCHA, and brute-force defense. Wordfence Central is free for Wordfence users and can manage site security, launch scans, and apply configuration templates across sites. It can send security event notifications by email, SMS, Slack, or Discord. Free users receive firewall rules and malware signatures with a 30-day delay, while paid plans receive real-time updates. Wordfence Free costs nothing and includes scans every three days and volunteer forum support. Premium costs $149 a year; Care costs $590 a year; Response costs $1,250 a year. Each plugin installation requires a unique license key. Care and Response services are not available for Windows servers, load-balanced servers, or WordPress Multisite Networks.
Good
- Firewall blocks malicious traffic at the WordPress endpoint.
- Scans core files, themes, and plugins.
- Login security includes passkeys and two-factor authentication.
- Central can manage security across sites.
- Free plan includes scans every three days.
Watch out
- Free threat updates are delayed 30 days.
- Each plugin installation requires a unique license key.
- Care and Response exclude Windows servers.
- Care and Response exclude WordPress Multisite Networks.
Who it suits
Wordfence Security suits people managing self-hosted WordPress sites who need firewall, malware scanning, and login protections. The paid service tiers may suit those seeking ticket support or incident response, subject to their server setup.
Verdict
Wordfence combines endpoint firewall protection, file scanning, and login security, with a free plan and paid options that include real-time updates or response services. Check the update delay, license requirements, and service exclusions against your setup.
Plans and prices
From Wordfence Security's own pricing page, checked 11 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Wordfence Free | Free | Firewall rules and malware signatures delayed 30 days · scans every 3 days · volunteer forum support |
| Wordfence Premium | $149 a year | Real-time firewall rules and malware signatures · premium IP blocklist · country blocking · 30-day audit log · ticket-based support · $149 USD per year |
| Wordfence Care | $590 a year | Hands-on installation, configuration, optimization and monitoring · unlimited incident response · annual security audit · 6-month audit log · $590 USD per year |
| Wordfence Response | $1,250 a year | 24/7/365 incident response · 1-hour response time · 24-hour time to resolution · 1-year audit log · $1250 USD per year |
The facts
Each one read from Wordfence Security's own pages, with the date it was checked.
What it does
- Central management
- Wordfence Central is free for Wordfence users and supports managing site security, launching scans, and applying configuration templates across sites.checked 11 Oct 2026
- Firewall
- The Web Application Firewall identifies and blocks malicious traffic, and Wordfence says it runs at the WordPress endpoint.checked 11 Oct 2026
- Integrations
- Wordfence Central can send security event notifications by email, SMS, Slack, and Discord.checked 11 Oct 2026
- Login protection
- Login security includes passkeys, two-factor authentication, CAPTCHA, and protection against brute-force attempts.checked 11 Oct 2026
- Malware scanning
- The scanner checks core files, themes, and plugins for malware, backdoors, malicious redirects, code injections, and known vulnerabilities.checked 11 Oct 2026
- Product
- Wordfence is a WordPress security plugin with an endpoint firewall, malware scanner, login security, and live traffic views.checked 11 Oct 2026
- Service exclusions
- Care and Response services are not available for Windows servers, load-balanced servers, or WordPress Multisite Networks.checked 11 Oct 2026
- Site limits
- Each Wordfence plugin installation requires a unique license key; Care and Response cover one site per license, with multisite allowed up to five total sites.checked 11 Oct 2026
- Support
- Free plugin users can seek help through volunteer forums, while Premium includes ticket support and Response offers a one-hour incident response time.checked 11 Oct 2026
- Threat intelligence
- Free users receive firewall rule and malware signature updates with a 30-day delay, while paid plans receive real-time updates.checked 11 Oct 2026
The company
- Company
- Wordfence is made by Defiant Inc, incorporated in Delaware and headquartered in Seattle, Washington.checked 11 Oct 2026
- Founded
- The About page names founders Mark Maunder and Kerry Boyte but does not state a founding year.checked 11 Oct 2026
- Headquarters
- Seattle, Washington, United Stateschecked 28 Sep 2026
Alternatives to Wordfence Security
- 1

Cloudflare Gateway
Free planAndroidiOSWebAPI8.3$7 usage-based - 2
DNSFilter
AndroidiOSWebAPI7.8From $1 a month - 3
MalCare
Free planWebSelf-hosted6.9From $99 a year - 4

DataDome API Protection
AndroidiOSWebAPI6.8From $3,830 a month - 5

Gcore WAAP
Free planWebAPI6.8From €25 a month - 6
Google Cloud Secret Manager
Free planWeb6.5From $0.02 a month
