Compare the security checks

Security Ninja Pro extends the Security Ninja dashboard with cloud firewall controls, malware scanning and cleanup, login protection, hardening fixes, expanded event logging, and scheduled scans and reports. The base plugin already includes an 8G-based firewall for common malicious requests, more than 50 security tests, vulnerability and core integrity scanners, and a basic events logger.

On WordPress 7, the base add-on also includes an AI Security Advisor that summarizes scan findings using an LLM provider connected by the site owner. Pro includes the controls described below.

Manage traffic with the cloud firewall

The Pro cloud firewall and advanced Web Application Firewall controls can block known bad IP addresses using a database of more than 600 million addresses. Country blocking and IP management let administrators set additional traffic controls. The firewall also whitelists known third-party service IPs, and administrators can add IP addresses or CIDR ranges manually.

Find out what a scan has flagged

The Vulnerability Scanner highlights known issues in plugins and themes so administrators can review and patch them. The Core Scanner checks WordPress core folders for modified or unexpected files, with a file viewer for examining findings. It can restore altered core files or remove suspicious unknown files.

The Advanced Malware Scanner checks WordPress core, plugins, and themes for malicious code and suspicious files. Its one-click removal tools can quarantine or delete infected files.

Protect logins and adjust options

Pro login protection can limit failed login attempts, rename the login URL, and add two-factor authentication. The base plugin logs successful and failed login attempts, but does not block repeated failed logins by itself.

One-click fixes provide hardening settings such as disabling XML-RPC, restricting file editing, and hiding PHP error messages. Review each setting before applying it, especially if your website depends on a particular WordPress workflow or integration.

Review activity and schedule scans

The full Events Logger adds security log exports, scheduled email reports, webhooks such as Slack or Discord notifications, and deeper alerting to the basic event history. Administrators can schedule security scans daily, weekly, or monthly and receive reports by email.

Get started in the dashboard

1. Install and activate Security Ninja Pro on the WordPress site.
2. Open the Security Ninja dashboard and review the security tests, scanner results, and current events.
3. Configure the cloud firewall, IP or country controls, login protection, and two-factor authentication as needed.
4. Review one-click fixes before applying them, then configure scheduled scans, reports, exports, or webhooks.