What Defender Pro covers

Defender Pro brings WordPress file checks, traffic filtering, login safeguards, hardening, and site activity records into one add-on. Its utilities help site owners review security issues and manage protections across connected sites.

Scans and traffic controls

Scans check WordPress core documents and extensions for unexpected changes, suspicious code, known vulnerabilities, outdated extensions, and extensions removed from the repository. They also check server files for potential injections or backdoors.

The AntiBot Global Firewall uses threat data from more than 750,000 websites to block harmful traffic and spam bots. Its blocklist is updated every 12 hours. Basic Mode includes balanced filtering; Strict Mode applies tighter filtering to suspicious activity.

Through The Hub, visitors can manage IP rules and AntiBot settings across connected sites. Available controls include:

• Manually blocking individual IP addresses and importing custom blocklists.
• Creating timed or permanent IP lockouts.
• Applying blocklists and allowlists across sites, including Geo IP rules for selected countries or locations.
• Managing visitor-agent blocking and related traffic controls.

Login security and hardening

Login protections include strong password rules, two-factor authentication, login attempt limits, and checks for compromised passwords. Two-factor options include authenticator apps, biometric verification, hardware keys, and backup codes.

One-click hardening recommendations cover settings such as disabling the file editor, updating security keys, hiding PHP error reporting on the front end, adding security headers, and disabling trackbacks and pingbacks. IP banning, IP lockouts, and 404 detection help identify and block unwanted activity.

Scheduled checks and activity records

Recurring scans can check for malicious code, suspicious injections, vulnerabilities, abandoned extensions, and missing hardening recommendations. Automated reports and immediate threat summaries can be sent to an inbox.

Audit logs record events such as logins, user changes, add-on and theme updates, content edits, and settings changes, giving site owners a timeline to review.

Connected sites and support

Defender supports WordPress Multisite and can be enabled across a network and managed from the network admin. The Hub provides central management for IP rules and AntiBot settings across connected sites. Defender Pro includes 24/7 live support; WPMU DEV support can also advise on cleaning up a hacked site.

Setup and plugin compatibility

Install and activate Defender Pro in WordPress, then review the recommended protections in the plugin settings. Enable the firewall, AntiBot, login, scanning, reporting, and hardening options you need. If another security plugin is active, avoid enabling the same firewall, malware scanner, or login security functions in both plugins, since overlapping controls may conflict.