Security Ninja Pro: WordPress Security Tools

Control traffic with cloud firewall rules

Security Ninja Pro adds a cloud firewall and advanced Web Application Firewall controls to Security Ninja. The cloud firewall can block IP addresses from a database of more than 600 million known bad IPs. Country blocking and IP Management let administrators restrict traffic by location or manage specific IP addresses and CIDR ranges. Built-in lists of known service IPs help reduce the chance of blocking remote maintenance, optimization, and monitoring tools.

The free edition already includes an 8G-based firewall for common malicious requests and bot noise. Pro adds cloud-based IP blocking and further firewall controls.

Connect scan findings to follow-up

The base extension includes more than 50 security tests, a vulnerability scanner for known issues in extensions and themes, a core scanner for modified or unexpected files, and a basic Events Logger. The core scanner can show flagged files in the dashboard and offers settings to restore altered core files or remove suspicious unknown files.

Pro adds an Advanced Malware Scanner that detects and cleans malicious code and suspicious files. Scheduled scans can run daily, weekly, or monthly, with reports sent by email. Findings help administrators identify issues for review; scans do not establish that every threat has been found.

Manage login and hardening options

Login protection can limit failed attempts, rename the login URL, and add two-factor authentication. One-click fixes on the Fixes page include options such as disabling XML-RPC, restricting file editing, and hiding PHP error messages. Review each change before applying it, since a site workflow or integration may depend on a setting.

Review security activity over time

The basic Events Logger entries firewall events and successful or failed login attempts. Pro adds a full logger with log exports, scheduled email reports, webhooks such as Slack or Discord notifications, and deeper alerting. Together with scheduled scans, these records give administrators a recurring way to review firewall activity, logins, and scan findings.

Installation and first steps

1. Install and activate Security Ninja Pro on the WordPress site.
2. Open the Security Ninja dashboard and review security tests, scanner results, and current events.
3. Configure the cloud firewall, IP or country controls, login protection, and two-factor authentication as needed.
4. Review one-click fixes before applying them, then set up scheduled scans, reports, log exports, or webhooks.