WordPress security features, all in one plugin
Silent Threads’s WordPress security features cover eight areas: malware scanning, a firewall with 356 built-in rules, login security, 16 one-click hardening checks, signed cloud protection, a Security Center with response tools, alerts and support, and multi-site management for agencies. Each feature below shows the lowest plan that includes it.
Pro includes everything in Basic, and Agency includes everything in Pro.
Malware scanning
Scanners for files, the database, configuration and attack surface, using 74 malware signatures plus live signature updates.
Scan modes: Quick (every plan) · Standard (every plan) · Deep (Pro) · Custom folders (Agency)
- Malware Scanner (Quick & Standard) Every plan
- Vulnerability Scanner Every plan
- Database Scanner Every plan
- Configuration Scanner Every plan
- Attack Surface Scanner Every plan
- Persistence Scanner Every plan
- Core File Integrity Every plan
- Deep & Full Malware Scans Pro
- Secret Scanner Pro
- Media File Scanner Pro
- JS & Card-Skimmer Scanner Pro
- Bundled JS Dependency Scan Pro
- Premium Plugin Drift Pro
- Live CVE Correlation Pro
- Runtime Malware Detection Pro
- Custom Folder Scan Agency
Firewall (WAF)
A web application firewall with 356 built-in rules runs on every plan, together with brute-force protection and rate limiting.
- Web Application Firewall (356 built-in rules) Every plan
- Brute-force protection Every plan
- Rate limiting Every plan
- WAF Rules Manager Pro
- WAF Rule Sandbox Pro
- Progressive WAF Response Pro
- Country Blocking Pro
- Community Threat Blocklist Pro
- Network IP Blocklist Pro
- Outbound Connection Monitor Pro
Login security
Two-factor authentication, a strong password policy and suspicious-username blocking on every plan, with more controls for the logins that matter most.
- Two-factor authentication (2FA) Every plan
- Strong password policy Every plan
- Suspicious-username blocking Every plan
- Custom Login URL Pro
- Login reCAPTCHA Pro
- Bot Login Detection Pro
- Registration Abuse Prevention Pro
- New-User Approval Queue Pro
- Canary Credentials Pro
- New-Device Login Approval Agency
- Session Fingerprinting Agency
- Active Session Monitoring Agency
- Step-Up Verification Agency
Hardening
16 hardening checks, each of which can be applied in one click, on every plan.
- One-click hardening (16 checks) Every plan
- Security Baseline Pro
Cloud protection
Signed live feeds keep signatures, firewall rules and the IP blocklist current without waiting for a plugin release.
- Live malware signatures and WAF rules (Basic: 30 days after release) Every plan
- Live malware signatures and WAF rules, immediately Pro
- Network IP Blocklist Pro
- Community Threat Blocklist Pro
- “Help protect other sites” (opt-in, off by default)
Security Center & response
See what the plugin found and blocked, and respond with tools that act for you.
- Security Baseline Pro
- Forensic Evidence Bundle Pro
- Progressive WAF Response Pro
- Incident Response Playbooks Agency
- Auto-Suspend Rogue Admins Agency
Alerts & support
A weekly digest and an instant alert when a new administrator appears, on every plan, plus support from people who know the plugin.
- Weekly security email digest Every plan
- Instant new-administrator alert Every plan
- Custom Email Alert Schedule Pro
- Support Tickets Pro
- In-plugin notifications when we reply Pro
- Live Chat Support Agency
Multi-site (Agency)
For agencies and anyone running several sites: one view across them, and threat intelligence shared between them.
- Multi-Site Hub Agency
- Cross-Site Threat Intelligence Agency
- Up to 10 sites per license Agency
- Up to 3 sites per license Pro