More controls for WordPress security reviews

Security Ninja Pro extends the Security Ninja dashboard with firewall, malware, login, hardening, and reporting controls. Site owners and administrators can configure protection and review security activity.

The base add-on includes an 8G-based firewall for common malicious requests, more than 50 security tests, vulnerability and core integrity scanners, and a basic events logger. On WordPress 7, it also includes the AI Security Advisor, which requires an LLM provider connected by the site owner. Pro includes the functions below.

Cloud firewall controls and traffic management

The cloud firewall and advanced Web Application Firewall controls can block known bad IP addresses using data described as covering more than 600 million IPs. Country blocking and IP management provide additional traffic controls. The Cloud Firewall can whitelist known third-party service IPs; administrators can also add IP addresses or CIDR ranges and enable optional service whitelists. The free add-on’s 8G-based firewall continues to block common malicious requests and bot noise.

Malware detection and file integrity checks

The Advanced Malware Scanner checks WordPress core, plugins, and themes for malicious code and suspicious files. It can quarantine and remove infected files. The vulnerability scanner identifies known issues in add-ons and themes, while the Core Scanner flags changed or unexpected files in WordPress core folders. Pro’s scheduled scans support recurring reviews of these findings.

Login protection and account verification

Pro can limit failed login attempts, let administrators rename the login URL, and add two-factor authentication (2FA). Users with 2FA enabled must complete an additional verification step when signing in.

Hardening fixes and site options

One-click fixes on the Fixes page include options such as disabling XML-RPC, restricting file editing, and hiding PHP error messages. Review each setting before applying it, especially when the site depends on a related WordPress process or integration.

Event logs and scheduled reports

The free plugin’s basic logger records firewall events and successful or failed login attempts. Pro adds log exports, scheduled email reports, webhooks such as Slack or Discord notifications, and deeper alerting. Scans can run daily, weekly, or monthly, with reports sent by email.

Configure the security workflow

1. Install and activate Security Ninja Pro on the WordPress site.
2. Open the Security Ninja dashboard and review the security tests, scanner results, and current events.
3. Configure the cloud firewall, IP or country controls, login protection, and 2FA as needed.
4. Review one-click fixes before applying them, then configure scheduled scans, reports, exports, or webhooks.