Documentation
Search first, then browse by task. Guides for install, firewall, scanners, and fixes.
Popular guides
-
Install: Quick Start Guide
Easily install WP Security Ninja on your WordPress site. Follow our step-by-step guide for plugin installation via the WordPress admin or FTP for enhanced security.
-
Exclude paths from the malware scanner
Learn how to exclude safe files, plugin folders, or custom paths from Security Ninja malware scans using wildcard patterns, whitelists, or developer filters.
-
Finding errors and solutions
Troubleshoot WordPress issues using WP Security Ninja's debugging tools. Learn to enable WP_DEBUG, find error logs, and address problems efficiently for better site performance.
Browse by topic
Clear hubs, pick a task, then open an article.
Get started
Install, activate, and first-run setup.
- Install: Quick Start Guide
- Access Security Ninja in MainWP
- Access your website via FTP
- Activate Default Security Measures for WordPress
- Bulk actions in MainWP
- Control White Label Settings Remotely on MainWP Child Sites
Show all 31
- Copy settings from MainWP
- Create or update database tables
- Data Processing Agreement for Customers
- Easy Setup with the Installation Wizard
- Enable or Disable Dashboard Widget
- Fleet email alerts in MainWP
- GDPR compliance
- Get started with MainWP
- How to Add Custom Code to WordPress with WPCode Snippets
- How to Set Up for WordPress
- How to Use License on Staging or Dev Sites
- Import and export
- Install Security Ninja with MainWP
- Install the free MainWP extension
- Install the Pro version
- Last login
- Manage IPs from MainWP
- Remove settings when deactivating
- Security Ninja sample templates for MainWP Pro Reports
- Security Ninja tokens in MainWP Pro Reports
- Show or hide the Security Ninja column
- Understand Data Sharing and Privacy
- Use the Security Ninja Events tab in MainWP
- Why Upgrade your PHP? Security, Speed, and New Features
- WordPress.com compatibility
Firewall & login
Block bad traffic, harden logins, and 2FA.
- Set up two-factor authentication (2FA)
- 404 Guard
- 8G firewall rules
- Adjusting Visitor Log Retention Period
- Allow users to bypass 2FA
- Automate WordPress Event Logs with Webhooks
Show all 31
- Automatically validated crawlers
- Ban subnet / IP range
- Block IP network (global bad IPs)
- Block or redirect visitors
- Cannot import data while firewall is on
- Change login URL
- Event Logger settings
- Filter Suspicious Queries
- How to blacklist an IP
- How to block a country
- How to get back into your website
- How to reset 2FA
- How to Search and Filter Events in WordPress Logs
- How to use the Event Logger
- How to use the firewall
- Integrate WordPress Webhooks with Zapier
- Login form protection
- Monitoring administrator accounts
- Restore access without the unblock URL
- Secret Access URL
- Set up and use 2FA as a user
- Understanding the Visitor Log: Key Features and Benefits
- Visitor IP detection
- Whitelisting services
- WooCommerce rate limits and coupon protection
Malware scanner
Scan files, review findings, and clean infections.
Security tests
Hardening checks and how to fix failures.
- Anyone can register option
- Check if plugins are up to date
- Conceal WordPress Version for Improved Security
- Content Security Policy (CSP) for WordPress: Complete Guide
- Deactivated plugins
- Disable plugin and theme editor
Show all 39
- Disable WordPress sitemaps
- Enable AI Security Advisor
- Enhancing WordPress Security by Managing Deactivated Themes
- Fix cURL SSL Certificate Problem
- Fixed test results still fail
- Fixes (one-click hardening)
- Hide Windows Live Writer (WLW) link
- How to Disable Application Passwords in WordPress 5.6
- How to Hide PHP Version in WordPress: Security Tips
- Importance of Updating WordPress Core for Enhanced Security
- Maintenance and password-protected sites
- Maximizing Security with Automatic WordPress Core Updates
- MySQL version check
- PHP version detail exposure
- PHP version update
- Plugin compatibility check
- Prevent Username Enumeration on WordPress
- Remove unwanted files
- Resolve Security Issues Found by
- Secure or remove readme.html
- Secure WordPress Cookies to Enhance Website Safety
- Security headers
- Security report
- Security Tests
- Temporary folder not writable
- Theme updates
- Unnecessary information on failed logins
- Update functions.php
- User “admin” with administrator privileges
- What happens when you generate a report
- What is the /sn-backups/ folder? Learn Its Purpose and Use
- WordPress version info
- WordPress version revealed in metadata
Vulnerabilities
Plugin/theme vulnerability scanning and alerts.
- Dangers of outdated plugins
- Email alerts for detected vulnerabilities
- How the vulnerability scanner works
- How to use the vulnerability scanner
- Problems with the vulnerability scanner
- What does “plugin closed” mean?
Show all 7
Troubleshooting
Errors, conflicts, and how to get unstuck.
- Finding errors and solutions
- Deactivate the plugin via FTP
- Disable the firewall for troubleshooting
- Fix Mixed Content Errors in WordPress Admin
- Fixing "Failed to connect to api.freemius.com" error
- How to Create a Temporary Admin Account in WordPress
Show all 18
- How to Fix WordPress Errors Showing on the Frontend
- How to locate JavaScript conflicts
- How to Safely Increase Maximum File Upload Size in WordPress
- How to Share WordPress Server & Site Info for Debugging
- How WP-Cron works in WordPress (and how to fix scheduling issues)
- Increase WordPress Memory Limit: A How-To Guide
- Jetpack compatibility (XML-RPC)
- Many admin-ajax.php requests
- Reinstall WordPress core
- Resolve Issues: Plugin Conflict Troubleshooting Guide
- Virus detected in plugin
- YouTube embed error 153
Developers
Filters, hooks, and advanced customization.
- Customize User Agent Filtering
- Customize WooCommerce Login Message with Filter
- Customizing firewall filter rules
- Customizing the whitelist: a guide
- Filter secnin_cf_check_blocked_hosts
- Filter wf_sn_client_ip
Show all 14
- Filter: securityninja_ignored_file_extensions
- Filter: securityninja_is_temporary_login_link
- Filter: securityninja_malware_scannable_extensions
- Filter: securityninja_temporary_login_params
- Filter: securityninja_visitorlog_filter_url
- How to Modify Blocked Hosts List
- securityninja_malware_exclude_paths Filter for Malware Scans
- securityninja_social_crawler_user_agents Filter for WordPress
Account & license
Billing, licenses, refunds, and white label.
- Licenses
- Automated license activation (license_key.txt)
- Cancel subscription
- Change account
- Change your license key on a site
- Custom name and logo
Show all 37
- Delete account
- Early license renewal coupon
- Early license renewal proration
- First time logging in
- Forgotten password
- Hide on client websites
- How to get a refund
- How to get an invoice
- How to renew manually
- How to transfer billing to a client
- How to upgrade your license
- How to whitelabel the plugin
- Join the beta program
- Keeps getting logged out
- License Activation Is Not Authorized: Whitelist Your Site
- License activation problems
- Military and veteran discounts
- My account page
- My profile
- Plugin and account FAQ
- Problems logging in
- Recover your license key
- Remove a website from a license
- Reselling or transferring licenses
- Transfer site to another account
- Update payment method
- Upgrade to lifetime
- Websites
- Where to download
- Whitelist sites
- WordPress Multisite
More
Affiliates and other miscellaneous guides.
Show all 23
- Event Logger
- Filters and hooks
- Firewall
- Installation and usage
- License
- MainWP
- Malware Scanner
- Non-sensitive diagnostic data
- Scheduled Scanner
- Security Fixes
- Security Tests
- Troubleshoot Common Affiliate Link Problems
- Troubleshooting and debugging
- Visitor Log
- Vulnerabilities
- White label
- WP Security Ninja
