Pro only. Use Copy settings (Security Ninja) on the MainWP Sites table to push allowlisted Security Ninja options from one synced Pro child onto many selected targets.
Requirements
- Security Ninja for MainWP Pro on the Dashboard
- Security Ninja Pro on the source child and on each target
- Child sites at Security Ninja 5.285 or newer for remote settings apply
- 5.297 or newer on a child if you need array settings such as blocked countries, malware whitelist paths, or Core Scanner ignore paths
- Source site must already be synced so MainWP has its settings cache
Children below 5.285 are skipped with a per-site message. On children between 5.285 and 5.296, array-typed keys are omitted so the rest of the allowlisted settings can still apply.
How to run it
- Sync the source site (and ideally the targets) in MainWP.
- Go to Sites → Manage Sites, select the target sites, and choose Copy settings (Security Ninja).
- Pick the synced Pro child that should be the settings source.
- Preview the per-site diffs. Only allowlisted keys that differ are applied.
- Optionally enable lockout-prone keys (see below). They stay unchecked by default.
- Confirm and apply.
- Run MainWP Sync on the same selection so the dashboard shows the new settings.
Lockout-prone settings
These stay off unless you explicitly check them in the dialog:
- Blocked countries
- Rename login URL (toggle)
- New login URL value
- Two-factor authentication
- 2FA backup codes
Leaving them off reduces the chance of locking yourself or clients out of a site when you copy a hardened source configuration.
Per-site Settings editor
You can also edit allowlisted options for a single child from that site’s Security Ninja tabs in MainWP (Settings). Preview changed keys, then apply. Blocked countries and path lists need 5.297+ on the child to apply remotely. Same rule as bulk copy: sync afterward.
The settings list scrolls inside its own panel. Use the search box to jump to a key, or scroll to reach later modules such as blocked countries.