Skip to content
SPECIFICTION
Get listed

Wordfence Security

wordfence.com

From $12.42/mo Free plan WebSelf-hosted
Visit wordfence.com
Spec score 7.5 #10 of 29 in Web Security Software

What it is

Wordfence Security is a WordPress plugin for protecting self-hosted sites, with an endpoint Web Application Firewall, malware scanner, login controls, and live traffic views. The firewall identifies and blocks malicious traffic at the WordPress endpoint. Scanning covers core files, themes, and plugins for malware, backdoors, redirects, code injections, and known vulnerabilities. Login security includes passkeys, two-factor authentication, CAPTCHA, and brute-force protection. Wordfence Central is free for users and can manage sites, launch scans, apply configuration templates, and send alerts through email, SMS, Slack, and Discord. The free plan costs nothing, scans every three days, and receives firewall and malware-signature updates with a 30-day delay. Premium costs $149 a year; Care costs $590 a year; Response costs $1,250 a year. Paid plans provide real-time updates, while each plugin installation requires a unique license key.

Spec sheet

Product
Wordfence is a WordPress security plugin with an endpoint firewall, malware scanner, login security, and live traffic views.Read 11 Oct 2026 · wordpress.org
Integrations
Wordfence Central can send security event notifications by email, SMS, Slack, and Discord.Read 11 Oct 2026 · wordfence.com
Support
Free plugin users can seek help through volunteer forums, while Premium includes ticket support and Response offers a one-hour incident response time.Read 11 Oct 2026 · wordfence.com
Headquarters
Seattle, Washington, United StatesRead 28 Sep 2026 · wordfence.com
Founded
The About page names founders Mark Maunder and Kerry Boyte but does not state a founding year.Read 11 Oct 2026 · wordfence.com
Company
Wordfence is made by Defiant Inc, incorporated in Delaware and headquartered in Seattle, Washington.Read 11 Oct 2026 · wordfence.com
Central management
Wordfence Central is free for Wordfence users and supports managing site security, launching scans, and applying configuration templates across sites.Read 11 Oct 2026 · wordfence.com
Firewall
The Web Application Firewall identifies and blocks malicious traffic, and Wordfence says it runs at the WordPress endpoint.Read 11 Oct 2026 · wordpress.org
Login protection
Login security includes passkeys, two-factor authentication, CAPTCHA, and protection against brute-force attempts.Read 11 Oct 2026 · wordpress.org
Malware scanning
The scanner checks core files, themes, and plugins for malware, backdoors, malicious redirects, code injections, and known vulnerabilities.Read 11 Oct 2026 · wordpress.org
Service exclusions
Care and Response services are not available for Windows servers, load-balanced servers, or WordPress Multisite Networks.Read 11 Oct 2026 · wordfence.com
Site limits
Each Wordfence plugin installation requires a unique license key; Care and Response cover one site per license, with multisite allowed up to five total sites.Read 11 Oct 2026 · wordfence.com
Threat intelligence
Free users receive firewall rule and malware signature updates with a 30-day delay, while paid plans receive real-time updates.Read 11 Oct 2026 · wordfence.com

Plans and prices

Wordfence Free Free Firewall rules and malware signatures delayed 30 days · scans every 3 days · volunteer forum support Read 11 Oct 2026 · wordfence.com
Wordfence Premium $149 a year $149 USD per year Real-time firewall rules and malware signatures · premium IP blocklist · country blocking · 30-day audit log · ticket-based support Read 11 Oct 2026 · wordfence.com
Wordfence Care $590 a year $590 USD per year Hands-on installation, configuration, optimization and monitoring · unlimited incident response · annual security audit · 6-month audit log Read 11 Oct 2026 · wordfence.com
Wordfence Response $1,250 a year $1250 USD per year 24/7/365 incident response · 1-hour response time · 24-hour time to resolution · 1-year audit log Read 11 Oct 2026 · wordfence.com

Every Wordfence Security plan and price →

Strong points and limits

Strong points

  • Firewall blocks malicious traffic at the WordPress endpoint
  • Scanner checks core files, themes, and plugins
  • Passkeys and two-factor authentication are supported
  • Central management handles multiple sites
  • Free plan is available

Limits

  • Free threat-intelligence updates are delayed 30 days
  • Each installation requires a unique license key
  • Care and Response exclude Windows and load-balanced servers
  • Premium costs $149 a year

Who it suits

It suits WordPress site owners who need firewall, scanning, login protection, and centralized management. The paid tiers add ticket support or incident-response services.

Verdict

Wordfence Security covers major WordPress security tasks, from traffic filtering to malware and login protection. Plan differences center on update timing, support, logs, and incident response, so site requirements determine the suitable tier.

Where Specifiction places it

Alternatives to Wordfence SecurityAll alternatives →