Defender Pro brings WordPress security scans, traffic filtering, login controls, and site activity records into one add-on. Review scan findings, pick which protections to enable, and check reports or logs as your site changes.

Scan documents and review findings

Scans check WordPress core files and extensions for unexpected changes or rogue additions, and look for suspicious code, known vulnerabilities, outdated extensions, and plugins removed from the WordPress repository. Server files are also checked for possible injections or backdoors. These findings identify entries to review; they do not explain the cause of every issue.

Schedule recurring scans for malicious code, suspicious injections, vulnerabilities, abandoned plugins, and missing hardening recommendations. Defender can email security reports and immediate threat summaries so you can review site condition between dashboard visits.

Choose firewall filtering and manage IPs

The AntiBot Global Firewall uses threat data from more than 750,000 websites. Its blocklist refreshes every 12 hours, giving connected sites access to shared threat updates on that schedule. Enable the firewall and choose Basic Mode for balanced filtering or Strict Mode for tighter filtering of suspicious activity.

The Hub centralizes IP rules and AntiBot options across connected sites. You can block individual addresses, import blocklists, apply allowlists, set timed or permanent lockouts, restrict traffic by country or geographic location, and manage user-agent blocking.

Protect logins and strengthen WordPress settings

Login controls include two-factor authentication, login attempt limits, stronger password rules, and checks against compromised passwords before they are used. You can hide the login URL and use session security to help prevent session hijacking. Two-factor options include authenticator apps, biometric authentication, hardware keys, backup codes, lost-device emails, and WooCommerce support.

Defender delivers 12 recommended hardening settings that can be applied with one click. Examples include disabling the file editor, updating security keys, hiding front-end PHP errors, adding security headers, and disabling trackbacks and pingbacks to reduce spam.

IP banning, IP lockouts, and 404 detection help identify unwanted activity and block addresses. These controls can also be used to respond to repeated requests from the same IP.

Review site activity and manage multiple sites

Audit logs record logins, user changes, add-on and theme updates, content edits, and settings changes. Use the entries to see what happened and when.

Defender works with WordPress Multisite and can be network enabled and managed from network admin. The Hub provides central management for IP rules and AntiBot settings across connected sites. Defender Pro also includes 24/7 live support; WPMU DEV support can advise on cleaning up a hacked site.

Install and configure Defender Pro

Install and activate the plugin, run an initial malware scan, then enable the firewall, strengthen login security, and apply the recommended hardening settings you need. Review the scan findings and configure scheduled checks and email reports. If another security plugin is active, avoid enabling the same firewall, malware scanner, or login security functions in both plugins to reduce the chance of conflicts.