Defender Security – Malware Scanner, Login Security & Firewall

0

Defender adds the best in WordPress plugin security to your website with just a few clicks, including malware scanner, firewall, and login security features. Stop brute force login atta

Version
Last updated
Active installations
WordPress Version
Tested up to
PHP Version
pa_languages
Rating
Total ratings
Tags

Description

Defender adds the best in WordPress plugin security to your website with just a few clicks, including malware scanner, firewall, and login security features. Stop brute force login attacks, SQL injections, cross-site scripting XSS, and other WordPress vulnerabilities and hacks with Defender’s malware scanner, providing antivirus scans, IP blocking, firewall, activity log, security log, and two-factor authentication (2FA) login security.

No longer do you have to go through hideously complex security settings and get a virtual PhD in security. Defender’s malware scanner, firewall, and login security features add all the hardening and security recommendations you need.

Security Recommendations

Defender starts with a list of one-click hardening techniques that will instantly add layers of protection and security to your site.

Block hackers at every level:

  • Malware scanner – scan WordPress core files for modifications and unexpected changes which may be caused by malware. Scan for malware and tighten up the security of your files
  • WordPress Security Firewall – block or allowlist IPs, implement IP blocking, and Geo IP blocking, user agent banning and protect against brute force attacks
  • Two-factor authentication (2FA) – Easily set up better security with 2FA to prevent most login attacks such as brute force, App verification, backup codes, lost device email, WooCommerce 2FA, and Web Authentication
  • Login masking – change the location of WordPress’s default login area to improve login security
  • Login lockout – failed login attempts lockout
  • User Agent Banning – Block bad bots and user agents from accessing your site
  • Security Headers – Add an extra layer of defense security and protect against common attacks like: XSS, code injection, and more
  • 404 Detection – automated block of bot IPs
  • Configs – Create your ideal Defender security settings and export / import saved configs to any other site
  • Geolocation IP lockout – block users based on location and country (IP blocking)
  • Disable trackbacks and pingbacks – spam prevention
  • Core and server update recommendations – stay on top of your system
  • Antivirus scan – scan for active security threats, viruses, and other malware
  • Disable file editor – if they get in, they won’t get far
  • Hide error reporting – don’t reveal your security issues
  • Update security keys – reset on-demand
  • Prevent information disclosure – why tell them what you have?
  • Prevent PHP execution – because it’s daaaangerous!
  • Resolve security recommendations and issues in bulk
  • Google reCAPTCHA – easy to add, stop fraud and abuse – including BuddyPress and WooCommerce.
  • Pwned Password Check – Protect against compromised passwords.
  • Force Password Reset – Force users with selected roles to reset passwords.

Learn The Ropes With These Hands-On Defender Security Tutorials

WordPress Security Scans

Defender’s free malware scanner checks WordPress security issues such as suspicious code and malware. The Defender security plugin scans to compare your WordPress install with the master copy in the WP directory, reporting any changes and letting you restore the original file with a single click.

Two-Factor Authentication (2FA)

Easily add an extra layer of protection to your WordPress sites with Defender’s range of two-factor authentication (2FA) features. Including: mobile app verification (Google Authenticator, Microsoft Authenticator, Authy), backup code generation, lost device emails, WooCommerce 2FA, Biometric Authentication (fingerprint/facial recognition), and Hardware Key Authentication (USB security keys). An easy and ideal way of preventing brute force attacks and other login security vulnerabilities.

Login Protection

Brute force login attacks are no match for Defender. Limit login attempts to stop users trying to guess passwords. Permanently ban IPs or trigger a timed lockout after a set number of failed login attempts. Use Geo IP blocking to ban users from specific countries or locations.

Firewall and IP Manager

Improve your website security with Defender’s IP manager and firewall. Manually block specific IPs, import a list of banned IPs, and set automated timed and permanent lockouts. Defender makes it easy to block and unblock specific locations quickly thanks to its advanced firewall (WAF) offering Geographical IP blocking.

User Agent Banning

Add user agents to the block or allowlist and stop bad bots from spamming and scraping your site. All major search engines and special network bots are allow-listed out of the box. Easy to set up, Defender’s user agent banning tool does all the security work, with no editing of the .htaccess file required.

Google reCAPTCHA Integration

Add reCAPTCHA to your login / registration pages, lost password forms, and post comments in a couple of steps to up security and help protect from fraud and abuse. Select reCAPTCHA type, language, location, and style to suit. As well as Google, Defender also supports the following reCAPTCHA types:

  • BuddyPress reCAPTCHA
  • WooCommerce reCAPTCHA

Login Screen Masking

Defender makes it easy to move your login screen to a custom URL. Not only does login screen masking improve security, but it also lets you white label your login user experience and improves branding.

Force Password Reset

Password Reset enables you to force all users with selected roles to reset their password at any time. Especially helpful if you suspect a possible data breach on your site.

Security Headers

Security headers protect your site against the most likely types of attacks, such as: XSS, code injection, cross site scripting, and more. You can enable the following headers:

  • X-Frame-Options
  • X-XSS-Protection
  • X-Content-Type-Options
  • Strict Transport
  • Referrer Policy
  • Permissions-Policy

404 Limiter

Defender detects when bots are being used to scan your site for vulnerabilities and shuts them down. The 404 limiter lets you stop the scan by detecting when a bot keeps visiting pages that do not exist, which can also save you from a giant strain on your site’s performance.

Notifications and Reports

Defender runs surveillance and sends security notifications with information that matters. All activity and notifications are recorded in the activity log to let you see at a glance the website security actions that have been taken by the Defender security plugin.

Reduce Setup Time With Saved Configs

The configs module allows you to save your Defender configurations and reapply them to your other sites in just a few clicks. You can create and save an unlimited number of security configurations.

Pwned Password Check

Protect your site against password leak attacks. Entered passwords are checked against public database breach records. If a password is identified as compromised, the user will be asked to change it.

Global IP Block/Allowlists

This is a game-changer if you manage multiple sites. Create your IP block/allow list once, then apply and automatically sync it to all your other sites with just a single click. You’ll save hours by not having to manually add IPs to each individual site. *Note: a [free WPMU DEV account] (https://wpmudev.com/register) is required to access this feature.

Scheduled Security Scans and Reports (Pro Only)

The same effective and thorough Defender malware scanning, but fully automated! Schedule regular scans for round-the-clock protection, plus, stay informed with scheduled and fully detailed security reports sent straight to your inbox.

Safe Repair And Quarantine Malicious Files (Pro Only)

This powerful feature allows the safe and easy repair of malicious files without any disruption to your live site. With Safe Repair, suspicious files can be quarantined, deleted, or replaced with the latest copies from the official plugin repository in a single click. You can also quarantine modified files so that you have access to the original file if it’s ever needed.

Google Blocklist Monitor (Pro Only)

An easy and automated way to ensure your site is always in Google’s good books. Defender automatically checks Google’s blocklist every 6 hours to ensure your site hasn’t been flagged. If something is wrong you’ll be notified immediately by email.

Audit Logging (Pro Only)

No more manually having to determine what events have triggered unwanted behavior and activities on sites. Defender tracks, reviews, and logs everything so you can resolve issues faster and more accurately for yourself or your clients.

What Do People Say About Defender?

★★★★★
“I found other pro security plugins a bit too fiddly for my taste…I’m delighted with Defender” – KeithADV

★★★★★
“Thank you for bringing back a free and easy to use 2-Factor Authentication after Clef! Defender helps keep me aware of my site’s security.” – awijasa

★★★★★
“Defender’s interface is very intuitive with warnings that are very helpful” – djohns

★★★★★
“Defender Recently blocked over 3000 attacks in one week without any noticeable impact on the website. WPMUDEV knocking it out of the park on this one.” – David Oswald

Secure Websites, More Trust, Better Profit

Your visitors expect a super-safe extra secure website when deciding whether or not to make a purchase or submit information. If visitors don’t trust your site, they will leave without completing a transaction.

If you’re running a business website or eCommerce store, privacy, security, uptime and trust are essential.

The Defender security plugin is here to help you: it’s a one of a kind WordPress security plugin that makes web security easy for anyone, for free!

  • Malware scanner
  • Google two-factor authentication (2FA)
  • Web Authentication
  • Firewall setup and configuration
  • One-click site hardening and security tweaking
  • WordPress core file scanning and repair
  • Ongoing firewall protection
  • Google reCAPTCHA
  • Security headers
  • One-click configs
  • Login Screen Masking
  • Pwned Password Check
  • IP Blocklist manager and logging
  • Geo IP blocking
  • User agent banning
  • Unlimited file scans
  • Timed Lockout brute force login attack shield for login protection
  • 404 limiter for blocking vulnerability scans
  • IP lockout notifications and reports

Defender is built to make website security simple: it makes your WordPress site harder to hack – and it’s insanely easy to set up. Run a security scan and implement recommended changes in one-click, for added WordPress security in mere minutes.

All the above is free and will secure WordPress for you. If you need extra security for your WordPress site, you should get a WPMU DEV Membership.

Our Membership gives you access to Defender Pro – which features automated scanning, scheduled malware scans for Core, themes, plugins and other files, audit logs, firewall protection, Safe Repair, Blocklist monitoring – alongside Snapshot Pro cloud backups, the Hub with automated plugin, theme and core updates and safe-upgrade scans, all our premium WordPress plugins, 24/7 WordPress support and if your sites already been hacked our team of security experts will clean it up at no additional cost.

It’s an incredible deal, and you can find out more here.

Beyond Defender

Whilst Defender is a highly trusted solution for WordPress security and hack prevention, it’s only one part of the WPMU DEV suite of WordPress plugins, services, and support. Here are some of our other FREE plugins:

  • Smush – Image Compression and Optimization
  • Forminator – Form, Quiz, Poll and Survey Builder
  • Hummingbird – Page Speed Optimization
  • Hustle – Pop-ups, Slide-ins and Email Opt-ins
  • SmartCrawl – SEO checker, Analyzer and Optimizer

And if you need ALL our Pro plugins AND 24/7 WordPress support, get a WPMU DEV membership! wpmudev.com

About Us

WPMU DEV is a premium supplier of quality WordPress plugins and themes. For premium support with any WordPress-related issues you can join us here:
https://wpmudev.com/

Don’t forget to stay up to date on everything WordPress from the Internet’s number one resource:
WPMU DEV Blog

Hey, one more thing… we hope you enjoy our free offerings as much as we’ve loved making them for you!