The WordPress security platform, in four layers
The Silent Threads platform is a WordPress security platform in four layers: protection that runs on your site, signed cloud threat intelligence, a Security Center that shows what happened, and response tools that act on it. Each layer has one job, and every update and feed between them is signed.
Protection layers
What we watch
Runs inside WordPress
The plugin does its work on your own server. The firewall inspects incoming requests, the scanners check files and the database, and login security protects wp-login and your accounts.
- Web Application Firewall (356 built-in rules) Every plan
- Brute-force protection and rate limiting Every plan
- 2FA, strong password policy, suspicious-username blocking Every plan
- One-click hardening (16 checks) Every plan
- Malware, vulnerability, database, configuration, attack-surface and persistence scanners Every plan
- Deep scans, secret, media and JS card-skimmer scanners Pro
Signed feeds, verified on arrival
New malware signatures, WAF rules and the network IP blocklist come from our servers as Ed25519-signed feeds. The plugin checks each signature before it uses anything.
- Live signatures and WAF rules: immediately on Pro and Agency, 30 days after release on Basic Every plan
- New live rules start in report-only mode Every plan
- Network IP Blocklist, built from reports by several different sites Pro
- Community Threat Blocklist Pro
What happened, in one place
Inside WordPress admin, the plugin brings together what the scanners found, what the firewall blocked and the alerts that need your attention.
- Weekly security email digest Every plan
- Instant new-administrator alert Every plan
- Security Baseline Pro
- Custom Email Alert Schedule Pro
- Multi-Site Hub across client sites Agency
Acting on what it finds
When something is wrong, response tools step in: the firewall escalates under sustained attack, playbooks run the steps for common incidents, and evidence is packaged for review.
- Progressive WAF Response Pro
- Forensic Evidence Bundle Pro
- Incident Response Playbooks Agency
- Auto-Suspend Rogue Admins Agency
- Step-Up Verification Agency
Follow a request through the layers
The how-it-works flowchart goes step by step from install to a blocked attack.