Join WPMU DEV and secure your site with

Defender Pro

Keep your site safe from hackers! Brute force attacks and malicious bots are no match for Defender's mighty WordPress security shields and cloaking technology.

Defender's regular security scans, vulnerability reports, audit logs, 2-factor authentication, safety recommendations, blocklist monitoring, IP lockout device, simple security tweaks, core, plugin and theme code checker and login masking are too much for even the most wily villain.
Downloads 1,325,091
Active Installs 154,085
Ultra Compatible
Version 2.3.2

Changelog / Translations

Schedule security scans, vulnerability reports, get safety recommendations and make security tweaks.
  • Recommendation and one-click action steps
  • Plugin, theme and core vulnerability scans
  • Manual and automatic IP lockout system
  • Google blocklist monitoring and alerts
  • Restore and repair changed files
  • 2-Factor Authentification

Scans and reports are awesome, but who do you call to lay the smack-down on hackers?

Defender not only makes suggestions, he’ll give you action steps and stand guard giving you a stronger site.


Block the Bad Guys With Defender


Brute Force Lockout

Limit login attempts to block attackers trying to guess your password.

File Change Detection

Scan plugins, themes and WordPress core files for changes to the code.

404 Lockout

Use 404 detection to stop bots that are scanning for vulnerabilities.


Audit Logs

Keep detailed logs of every user action from file modifications to settings changes.

Email Notifications

Never be left in the dark with customized reports and automate email notifications.

IP Lockout

Trigger timed or permanent site bans with both manual and automatic IP controls.


Security Key Updater

Add another layer of protection by changing security keys on a schedule.

Automated Scans

Keep an eye on your site with regular automated scans and reporting.

Blocklist Monitoring

Checks safe web services and warns you if your site has been flagged as unsafe.


2-Factor Authentication

Use 2-factor authentication to protect your site with both a password and a phone.

Remember Me Checked

Set how long the “Remember me” option will keep users logged in to your site.

Whitelist IP

Make exceptions to lockout rules and prevent administrators from losing access.


Security Tweaks

Add effective security measures with recommendations and one-click hardening.

Hub Security Manager

Monitor security issues, updates and backups for all your sites from the Hub.

Snapshot Backups

Defender includes 10GB of cloud storage and automated Snapshot backups.

Defender finds areas you can improve and makes suggestions for security tweaks.

Pro Security Tweaks

Security isn’t one-size-fits-all, so Defender will analyze your site, make suggestions for security tweaks and provide easy activation for the most effective layered security measures used by the pros.

Defender is the professional security upgrade you’ve been looking for.

Expose hidden code with regular scans.

Theme & Plugin Code Checker

Defender also checks for known issues with themes and plugins you have installed and scans for suspicious behavior in your system files.

Now you can remove the weak points in your system before hackers can get to them.

Get notified of core file changes and restore order with a click.

Let Defender Do The Crime Fighting

Defender scans the dark alleys of your site to find suspicious code in WordPress and alerts you when something doesn’t look right.

If a core file is corrupt Defender brings order. Restore files to their original state with a click.

Keep tabs on everything that happens on your site!

Audit Logging

Tired of mysterious breakages or inexplicable slowness on your site? With Defender keeping watch, you’ll know the cause – every time. Defender lets you keep and quickly search a detailed logs of comments, posts, login attempts, plugin installs, and well, pretty much everything.

Use blocklist monitoring to help keep a trusted brand.

Blocklist Monitoring

Defender checks safe web services and warns you if your site has been flagged as unsafe.

Be the first to know if your domain is blocklisted so you can act fast and reinstate your site – before you lose visitors or break trust.

Protect your site from brute force attacks.

IP Lockout

Brute force attacks are no match for Defender’s IP Lockout system. Trigger timed or permanent site bans for repeated 404s or failed login attempts. Run quick lockout audits with filterable logs. Protect your site with both manual and automatic IP ban and whitelist control.

  • Defender's interface is very intuitive with warnings that are very helpful.
  • Worth every penny! Plugins like Defender and Snapshot are one of a kind.
    Andre M.
  • I found other pro security plugins a bit too fiddly for my taste...I’m delighted with Defender.
  • This is the sort of security data I’ve always wished all my websites and web apps had.
  • So once again, my WPMU DEV membership pays huge dividends. Defender is awesome! Huge thanks.
    DigiBlueArc - DezinerBlogs
  • Defender Recently blocked over 3000 attacks in one week without any noticeable impact on the website. WPMUDEV knocking it out of the park on that one.
    David Oswald - Founder @
Mask your login screen with a custom URL.

Login Screen Masking

Make it harder for bots to find your login screen with a unique slug. Say goodbye to the default login URL.

As an added bonus, moving your login screen lets you further whitelabel your client sites!

Stay ahead of security with customized alert settings and notifications.

“Warning: I Sense a Disturbance”

Customize your alert settings. Send security updates, lockout notification emails, custom 2-factor emails, scheduled reports and audit logs to any one – an admin or  a team of people. Use regular security reports and alerts to help keep your site running fast and safe.

Backup and restore from any point with Snapshot.

Cloud Backups with Snapshot

Security and automated cloud backups – it’s the ultimate Super Duo. Activate Snapshot and you’ll never need to worry about a hack again.

Just restore to a clean install while you patch vulnerabilities.

Get Started With Our Defender Pro Tutorials

Learn how to find out if you're hacked with Defender

Looking for a convenient and hassle-free way to locate and delete suspicious code from your sites? Learn how Defender’s vast suite of security features can help banish and keep suspicious code at bay.

Read The Article

Learn how to stop hackers in their tracks with Defender

Put your site in the best position to stop hackers in their tracks. We walk you through a selection of Defender’s robust security features and how they can prevent hackers from waltzing right into your WP doors.

Read The Article

a preview look at this firewall tutorial for Defender

Stop troublemakers before they ever step into your WP site. Learn how to set up a firewall, block IP addresses with customized lists, and more.

Read The Article

Learn how to get the most out of our Defender and ramp up your WordPress security

Protect your site 24/7 against hackers, malicious code, SQL injections, and much more. This guide shows you how to get the most out of using Defender.

Read The Article

Getting Started:

The complete Defender Pro setup guide is now located in the newly designed documentation section of our website. Access the full Defender Pro tutorial now, complete with improved navigation and upgraded learning tools: Defender Pro Usage Documentation

Level Up With Our Practical Defender Tutorials:

Defender Pro is covered by the WPMU DEV Guarantee

WPMU DEV Guarantee

We guarantee that...

  • Defender Pro will work as advertised
  • You will receive 24/7 365 expert support for any problem
  • If you cancel your FREE trial, you can keep Defender Pro
  • Defender Pro is secure, always updated and well coded

Money back guarantee!

While you have 7 days, no obligations risk-free trial of WPMU DEV if you become a paid member and are dissatisfied with any of the above we'll refund you, no questions asked.

Defender Features

Get peace-of-mind with a more secure site.

  • Analyze site security
  • Security tweak recommendations
  • Resolve issues with a click
  • Manual and automatic IP lockout
  • Filterable IP logs
  • Scan core files for changes
  • 2-Factor Authentification
  • Customize 2-factor email
  • Vulnerability scans
  • Schedule scans
  • Repair/restore changed files
  • Choose file types to scan
  • Skip files based on file size
  • Receive email reports
  • Set report recipients
  • Google blocklist monitoring
  • Automated backups
  • Full website backups
  • Cloud backups
  • Site interactions with logging