| Block | Free | Premium |
|---|---|---|
| — ’bots, preemptively [1] | ◆ | ◆ |
| — user enumeration | ◈† | ◆ |
| — logins with blacklisted usernames | ◈† | ◆ |
| — logins with usernames | ◈† | ◆ |
| — Countries | ◇ | ◆ |
| — XML-RPC | ◇ | ◆ |
| — and allow Jetpack | ◇ | ◆ |
| — and allow Pingbacks | ◇ | ◆ |
| Spam | Free | Premium |
|---|---|---|
| — caught by Akismet | ◇ | ◆ |
| — marked Comments | ◈† | ◆ |
| — via Contact Form 7 [2] | ◆ | ◆ |
| — via Gravity Forms [3] | ◆ | ◆ |
| Zero-Day Protection (WAF) | Free | Premium |
|---|---|---|
| — Stop SQL Injecction | ◇ | ◆ |
| — Protect Core options | ◇ | ◆ |
| — Prevent User deletion | ◇ | ◆ |
| Management | Free | Premium |
|---|---|---|
| — Configuration UI | ◈‡ | ◆ |
| — Event log | ◇ | ◆ |
| — Geographic Event map | ◇ | ◆ |
| Other | Free | Premium |
|---|---|---|
| — Multisite support | ◆ | ◆* |
| — Cloudflare and proxy servers | ◈† | ◆ |
| — IP lists cached for performance | ◇ | ◆ |
| — Event hooks | ◇ | ◆ |