It'd be nice to see some of what Wordfence does built-in to WordPress. Until then, it is a great tool for making WordPress safer and does the job of what might otherwise take several plugins. The free version is high value and the Premium version even higher for the time it can save through things like country blocking.
We host WordPress sites for a specific niche market and won't let clients run without Wordfence.
Powerful and easy to use.
We are using the free version of WordFence but will be upgrading soon due to the impressive results we have obtained with the free version and because the features provided by the full version look quite valuable. It's been installed on four sites for the last six months with no problems either with the software itself or with hackers. Love this plugin!
We're using WordPress temporarily until we return to Drupal. We had a temporary site build by a vendor. Our initial experience of WordPress security was very poor so we locked the site down in every way we could, including locking admin screens to our office/VPN. Our initial issues left me feeling really unsure of just how secure the site was and a little research suggested I add one of two security plugins, and WordFence got more recommendations. It duplicates a number of things that we also do on the server side, but when it comes to security I'm just fine with redundancy.
It seems a very solid plugin, though I haven't delved into all the code. However it's not all perfect. Our Sysadmin is very dubious about the country blocking because that is an ever moving target that he hasn't seen anyone do well, but he and our manager both like most of the rest. While pretty the reports are sometimes not so useful, being more to tell you that things are happening than to provide actual useful/actionable info. Who the top blocked IP addresses are and what countries is mildly interesting but not actually useful. Some of the activity reports also focus more on what's been blocked, rather than something more useful. For example I think top consumers should exclude spam bots, but because it doesn't it's really just a list of top spammers. Top 404 shows the worst spammer IPs rather than a more useful list of which URLs are attempted most. And so on.
Though I do see room for improvement, all of these things I comment on in passing because I get them from our server software. I'd want them if this was my personal site, but that said you get a remarkable amount of functionality for free here.
They did a very professional job. The reports are very slick. It's put together well and has a lot of functionality. The free version is very good indeed and some of it should maybe be in core. I check out a few of the reports often and I feel a helluva lot better about maintaining a WordPress site because of this plugin. I think this plugin (or their rival) is a must for every WordPress site. They have useful timely security blog entries and their survey on the top hacks was super informative about what to watch for most. I also really like their security emails. I was really surprised to find out that there isn't an official WordPress security notification email list, so I was thrilled to find this one.
In summary there's just too much done well and for free to give this anything other than 5 stars. Lots of great work here that I very much appreciate. This is probably the only plugin I'm going to miss when I go back to Drupal. Thanks y'all.
Fantastic piece of software, makes my site secure from hackers. Easy to use, very user-friendly.
This plugin provides a good level of functionality with the Free version and adds useful incremental functionality for Premium.
I have used it for over 6 months now and no issues.
Best security plugin, no program conflicts, and it really made my website a lot faster, i didn't expect it from a security plugin!
How it is possibile that someone doesn't have it installed ? why going crazy with problem on already compromised site or prevents to be compromised ?
The newsletters are always interesting
the service/support is fast, gently and professional
None of us have time to waste, so it's great that there is a turn key plugin to deal with the web vandals.
You must log in to submit a review. You can also log in or register using the form near the top of this page.