Cloud Firewall
Block 600M+ known bad IPs and shut out whole countries before attacks reach WordPress.
Security advisorywp2shell: WordPress core vulnerability. Updated August 7, 2026.
Read the advisoryFor Free plugin users
You’re already protecting your site with Security Ninja Free. Upgrade to Pro for cloud blocking, malware scanning, login security, and automated scans, without starting over.
14-day free trial · 30-day money-back · Annual billing
Already on Free
The free plugin on WordPress.org gives you real visibility and a solid security foundation. Free shows the risk. Pro closes it.
Unlock with Pro
Active protection, scanning, and alerts so you are not babysitting the security dashboard.
Block 600M+ known bad IPs and shut out whole countries before attacks reach WordPress.
Find suspicious code and known malware patterns before a small issue turns into a full cleanup job.
Stop brute-force attempts, rename the login URL, and require a second factor for admins.
Turn security test results into actions instead of a manual to-do list.
Run checks automatically and get email alerts when something changes.
See who did what across the site - filterable audit history for troubleshooting and accountability.
Cut aggressive bots, spam checkouts, coupon abuse, and noisy 404 scanners.
Get help from people who know WordPress security when something looks wrong.
Compare
Same plugin family. Pro adds the protection layer most site owners need day to day.
| Feature | Free | Pro |
|---|---|---|
| Vulnerability scanner | ✓ | ✓ |
| Vulnerability database updates | Weekly | Daily |
| 50+ security tests | ✓ | ✓ |
| One-click hardening fixes | Not available | ✓ |
| Core file integrity scanner | ✓ | ✓ |
| Basic firewall (8G ruleset) | ✓ | ✓ |
| Cloud bad-IP firewall (600M+) | Not available | ✓ |
| Login protection, rename URL & 2FA | Not available | ✓ |
| Malware scanner | Not available | ✓ |
| Scheduled scans & email reports | Not available | ✓ |
| Events logger | Basic | Full audit log |
| 404 Guard | Not available | ✓ |
| WooCommerce protection | Not available | ✓ |
| Priority email support | Not available | ✓ |
| White-label branding | Not available | 25+ site plans |
Free vs Pro
Free gives you real visibility and hardening. Pro is the complete protection layer most site owners need.
Forever free
A strong starting point for every WordPress site.
Recommended
Everything in Free, plus the tools that actively protect your site.
Full protection for one site or a whole agency portfolio, same product, better per-site price as you grow.
White-label unlocks at 25 sites
Billed annually as $119.00
What you get with Pro:
For agencies (25+):
Risk-free
Yes, we offer a full refund within 30 days of your purchase, no questions asked. Try Pro with confidence; if it isn’t right for you, contact support through your account and we’ll refund you in full.
4.9 / 5 from 256 reviews
★★★★★
Works well as a base security plugin
“WP Security Ninja stands out with a balanced and clear mix of features. It works well as an all-in-one solution but remains simple enough to combine with tools like Patchstack without feeling overwhelming.”
★★★★★
Amazingly user-friendly security plugin
“Thank you, Security Ninja! Your plugin is easy to use, provides clear reports of activity, and includes built-in tools that make security a lightweight task. I look forward to incorporating this into future websites.”
★★★★★
“I love the WP Security Ninja product. As a startup agency, it has made my entry into the market and my ability to stand out in my offerings much easier. Keep up the good work.”
★★★★★
“I've tried most of the security plugins out there. Some are good but Security Ninja beats them all! Easy (like in REALLY easy) setup, comprehensive protection and perfect access to log files. My absolute recommendation!”
★★★★★
A Complete Security Powerhouse with White Label Flexibility and Outstanding Support
“I’ve been using WP Security Ninja with the 3-tier white label option, and I couldn’t be more impressed.”
★★★★★
Very helpful
“Security Ninja is part of my arsenal that I offer to my clients. It helps make sure their websites are security and scans them for malware. It’s simple to implement and easy to understand.”
Free gives you visibility and hardening basics - firewall ruleset, vulnerability checks, 50+ security tests, core integrity, and a security score. Pro adds active protection: cloud bad-IP blocking, malware scanning, login protection and 2FA, one-click fixes, scheduled scans, a full events logger, and priority support.
Start a free trial with the same site count you plan to buy. You get full Pro features for 14 days. If you continue, billing starts after the trial; cancel anytime before then and you will not be charged.
Yes. One Pro license covers the number of sites you choose at checkout, from a single site up to unlimited. Pick the site count that matches your portfolio; you can upgrade later if you add more sites.
Yes. Cancel renewal anytime from your account. You keep Pro access until the end of the current billing period.
Within 30 days of purchase, if an issue makes the plugin unusable and we cannot fix it, we will refund you in full. We may ask what went wrong so we can improve, your refund still goes through either way. Contact support through your Freemius account or our help desk.