WordPress security plugin FAQ
More detail is in the docs. Pricing questions are on the pricing page.
All questions
Which WordPress and PHP versions are supported?
WordPress 6.4 or newer (tested up to 7.1) and PHP 7.4 or newer.
What does every plan include?
Every plan, Basic included, has the firewall with 356 built-in rules, brute-force protection, rate limiting, 2FA, a strong password policy, suspicious-username blocking, one-click hardening, a weekly security email digest and an instant alert when a new administrator is added.
What does the plugin send to your servers?
License checks, update checks and signed feed requests, plus the IP addresses of attackers so its attack map can show which country they came from (looked up and not stored). If you turn on “Help protect other sites”, it also sends the IPs your site blocked and the rule IDs that blocked them. It never sends your posts, files or passwords.
Is “Help protect other sites” on by default?
No. It is opt-in and off until you turn it on.
Can the network blocklist lock me out?
It is designed not to. The plugin never blocks logged-in administrators, IPs an administrator logged in from in the last 30 days, your trusted IPs and ranges, or your server’s own IP, whatever the list says. Entries expire automatically.
Do Basic sites get live signatures and WAF rules?
Yes, 30 days after each one is released. Pro and Agency sites get them immediately.
How do I know an update really came from you?
Every update package and live feed is signed with an Ed25519 key, and the plugin refuses anything whose signature does not verify. The plugin also checks its own files against a signed manifest.
Which support do I get?
Pro includes support tickets. Agency includes tickets and live chat. Replies show up in the plugin as a bell notification and a pop-up.
I didn’t get my license email. What now?
Check your spam folder first. If it’s not there, sign in to your account to send it again, or contact us.
What happens when my trial ends?
Without a paid plan, protection stops until you choose one. Nothing is deleted.