Defender Pro v6.1.0

Defender Pro is a premium, comprehensive WordPress security plugin developed by WPMU DEV, designed around a “set it and forget it” philosophy. Unlike many complex security tools, Defender Pro features a minimalist, modern interface and places a strong emphasis on automating defensive layers to protect websites against malware, hackers, and malicious bots.

Key Features

• Automated Deep Scanning: Schedule automatic scans of WordPress source code, themes, and plugins to detect malware or suspicious activity without slowing down the server.
• Patchstack Vulnerability Data: Direct integration with Patchstack’s data system enables rapid detection of components containing vulnerabilities or unpatched security flaws.
• 1-Click Safe Repair: If the WordPress Core is found to be altered or compromised, the plugin allows for immediate restoration to a clean state with just a single click.
• AntiBot Global Firewall: A cloud-based firewall system that filters and blocks malicious traffic before it reaches your website.
• Brute-Force Protection: Automatically blocks IP addresses or User-Agents that attempt to guess admin passwords after a certain number of failed attempts.
• Bot Trap (Honeypot): Sets traps for automated spam bots by using methods such as `robots.txt` exclusions or mimicking the crawling behavior of major search engines.
• Two-Factor Authentication (2FA) & Passkeys: Supports enabling 2FA via Google Authenticator or Authy, setting up biometric security (fingerprint, facial recognition), or using hardware security keys.
• Login URL Masking: Allows changing the default admin page path (e.g., /wp-admin or /wp-login.php) to a custom URL.
• Password screening: prevents users or members from registering accounts with weak passwords or passwords that appear on lists of credentials previously leaked online.
• Detailed Activity Log: Tracks and records all user actions on the system—ranging from logins and plugin installations to post edits and configuration code changes.
• Blocklist Monitor: Automatically checks whether your domain has been flagged as malicious by Google and issues timely alerts.