The Installation Wizard walks you through a short setup after install. It usually opens automatically the first time.
Free and Pro: Free covers firewall, events, and vulnerabilities. Pro adds an optional Early Firewall step, login protection, default Fixes, and store protection for WooCommerce and SureCart. Security tests start in the background when the wizard begins.
Wizard steps
Welcome
Explains what the wizard covers. Start the steps, or skip to the dashboard and come back later.
Firewall
Activate Firewall Protection turns on firewall protection with global rules and 8G query filtering.
On Pro it also enables Cloud Firewall, the global ban network, and 404 Guard defaults (10 requests in 5 minutes triggers a 10-minute block). Pro shows an unblock URL if you lock yourself out. Save that URL, or use the copy emailed to the admin address.
Early Firewall (Pro, first run)
After Activate Firewall, the first-time Pro wizard can offer Early Firewall. It blocks bad requests before WordPress loads. Skip leaves you on the normal WordPress-hooks firewall. The step is not shown again after you finish the wizard, or if Early Firewall is already active.
Your current IP is whitelisted before it is enabled. Save the unblock URL the firewall step showed you. Full guide: Early Firewall.
Events Logger
Activate Events Logger turns on an audit trail with standard modules: logins, user and role changes, plugin and theme updates, settings changes, content edits, and WooCommerce activity when WooCommerce is active. Turn modules on or off later under Events Logger settings. Checkout rate limits and coupon bans for WooCommerce and SureCart are firewall events. They show up in Events when store protection is on, separate from the WooCommerce activity module.
Vulnerabilities
Activate Vulnerability Scanner checks installed plugins and themes against known issues and notifies you in admin when something needs attention.
Login Protection (Pro)
Login Protection blocks repeated failed logins from the same IP and works with Events Logger to record suspicious login activity. Configure 2FA or a custom login URL later when you are ready.
Default fixes (Pro)
Activate Default Security Measures applies recommended hardening in one click: hide version info, disable username enumeration, XML-RPC, and application passwords, remove unneeded files, set security headers, and enable secure cookie flags. Details: Activate Default Security Measures.
Store protection (Pro)
The wizard offers checkout, add-to-cart, and order rate limits, plus coupon protection, for WooCommerce and SureCart. If either plugin is active, the step says so and can turn the defaults on. If neither is active yet, continue and enable it later under Security Ninja → Firewall → Store.
Tune the numbers afterward: WooCommerce and SureCart store protection.
Done
Confirms your baseline and points to next steps: run security tests, review vulnerability results, run the core file scanner, browse Events Logger, and explore Login Protection options.
Reopen the wizard later
Open Security Ninja → Wizard in wp-admin. Rerunning can overwrite settings for modules you activate again. Use Skip or Continue on steps you do not want to change.
Marketing overview: Install Wizard.
