EVERYTHING XIAOMI
Get listed

Wordfence Security

Wordfence Security is a WordPress security plugin for self-hosted sites, with a Web Application Firewall, malware scanner, login protection, and live traffic…

Place
#6 of 29
Score
6.8
Wordfence Security's website

What Wordfence Security is

Wordfence Security is a WordPress security plugin for self-hosted sites, with a Web Application Firewall, malware scanner, login protection, and live traffic views. The firewall identifies and blocks malicious traffic at the WordPress endpoint. Its scanner checks core files, themes, and plugins for malware, backdoors, malicious redirects, code injections, and known vulnerabilities. Login protections include passkeys, two-factor authentication, CAPTCHA, and brute-force defense. Wordfence Central is free for Wordfence users and can manage site security, launch scans, and apply configuration templates across sites. It can send security event notifications by email, SMS, Slack, or Discord. Free users receive firewall rules and malware signatures with a 30-day delay, while paid plans receive real-time updates. Wordfence Free costs nothing and includes scans every three days and volunteer forum support. Premium costs $149 a year; Care costs $590 a year; Response costs $1,250 a year. Each plugin installation requires a unique license key. Care and Response services are not available for Windows servers, load-balanced servers, or WordPress Multisite Networks.

Good

  • Firewall blocks malicious traffic at the WordPress endpoint.
  • Scans core files, themes, and plugins.
  • Login security includes passkeys and two-factor authentication.
  • Central can manage security across sites.
  • Free plan includes scans every three days.

Watch out

  • Free threat updates are delayed 30 days.
  • Each plugin installation requires a unique license key.
  • Care and Response exclude Windows servers.
  • Care and Response exclude WordPress Multisite Networks.

Who it suits

Wordfence Security suits people managing self-hosted WordPress sites who need firewall, malware scanning, and login protections. The paid service tiers may suit those seeking ticket support or incident response, subject to their server setup.

Verdict

Wordfence combines endpoint firewall protection, file scanning, and login security, with a free plan and paid options that include real-time updates or response services. Check the update delay, license requirements, and service exclusions against your setup.

Plans and prices

From Wordfence Security's own pricing page, checked 11 Oct 2026.

All about pricing
PlanPriceWhat it gives you
Wordfence FreeFreeFirewall rules and malware signatures delayed 30 days · scans every 3 days · volunteer forum support
Wordfence Premium$149 a yearReal-time firewall rules and malware signatures · premium IP blocklist · country blocking · 30-day audit log · ticket-based support · $149 USD per year
Wordfence Care$590 a yearHands-on installation, configuration, optimization and monitoring · unlimited incident response · annual security audit · 6-month audit log · $590 USD per year
Wordfence Response$1,250 a year24/7/365 incident response · 1-hour response time · 24-hour time to resolution · 1-year audit log · $1250 USD per year

The facts

Each one read from Wordfence Security's own pages, with the date it was checked.

What it does

Central management
Wordfence Central is free for Wordfence users and supports managing site security, launching scans, and applying configuration templates across sites.checked 11 Oct 2026
Firewall
The Web Application Firewall identifies and blocks malicious traffic, and Wordfence says it runs at the WordPress endpoint.checked 11 Oct 2026
Integrations
Wordfence Central can send security event notifications by email, SMS, Slack, and Discord.checked 11 Oct 2026
Login protection
Login security includes passkeys, two-factor authentication, CAPTCHA, and protection against brute-force attempts.checked 11 Oct 2026
Malware scanning
The scanner checks core files, themes, and plugins for malware, backdoors, malicious redirects, code injections, and known vulnerabilities.checked 11 Oct 2026
Product
Wordfence is a WordPress security plugin with an endpoint firewall, malware scanner, login security, and live traffic views.checked 11 Oct 2026
Service exclusions
Care and Response services are not available for Windows servers, load-balanced servers, or WordPress Multisite Networks.checked 11 Oct 2026
Site limits
Each Wordfence plugin installation requires a unique license key; Care and Response cover one site per license, with multisite allowed up to five total sites.checked 11 Oct 2026
Support
Free plugin users can seek help through volunteer forums, while Premium includes ticket support and Response offers a one-hour incident response time.checked 11 Oct 2026
Threat intelligence
Free users receive firewall rule and malware signature updates with a 30-day delay, while paid plans receive real-time updates.checked 11 Oct 2026

The company

Company
Wordfence is made by Defiant Inc, incorporated in Delaware and headquartered in Seattle, Washington.checked 11 Oct 2026
Founded
The About page names founders Mark Maunder and Kerry Boyte but does not state a founding year.checked 11 Oct 2026
Headquarters
Seattle, Washington, United Stateschecked 28 Sep 2026

Alternatives to Wordfence Security

All alternatives
  1. 1Cloudflare Gateway logo

    Cloudflare Gateway

    Free planAndroidiOSWebAPI
    8.3$7 usage-based
  2. 2

    DNSFilter

    AndroidiOSWebAPI
    7.8From $1 a month
  3. 3

    MalCare

    Free planWebSelf-hosted
    6.9From $99 a year
  4. 4DataDome API Protection logo

    DataDome API Protection

    AndroidiOSWebAPI
    6.8From $3,830 a month
  5. 5Gcore WAAP logo

    Gcore WAAP

    Free planWebAPI
    6.8From €25 a month
  6. 6
    6.5From $0.02 a month