Features

Login Policy Free Premium
— Email-only login ◈† ◆
— Block user enumeration ◈† ◆
— Block blacklisted usernames ◈† ◆
XML-RPC Policy Free Premium
— Block XML-RPC ◇ ◆
    — Allow Jetpack ◇ ◆
    — Allow trusted IPs ◇ ◆
    — Allow pingbacks responsibly ◇ ◆
— Stop multicall brute-force attacks ◆ ◆
— Log raw requests ◇ ◆
Comments, Pingbacks, Trackbacks Free Premium
— Block repeated invalid comment attempts ◈† ◆
— Rate-limit accepted comments ◈† ◆
— Block spam ◈† ◆
    — caught by Akismet ◇ ◆
    — via Contact Form 7 [1] ◈† ◆
    — via Gravity Forms [2] ◈† ◆

 

WordPress-aware WAF Free Premium
— Block SQL injection without signatures ◇ ◆
— Protect sensitive WordPress options ◇ ◆
— Prevent unauthorised user deletion ◇ ◆
Miscellaneous Free Premium
— WP fail2ban Blocklist ◆ ◆
— Block access by country ◇ ◆
— Cloudflare and proxy servers ◈† ◆
— Multisite support ◆ ◆*
— Event hooks ◇ ◆
Security events Free Premium
Configuration and monitoring Free Premium
— Configure via WordPress admin ◇ ◆
— Configure via wp-config.php ◆ ◆
— Event log ◇ ◆
— Geographic Event map ◇ ◆

Notes

1

Requires the WPf2b Contact Form 7 add-on.

2

Requires the WPf2b Gravity Forms add-on.

†

Requires modifying wp-config.php.

‡

Read-only.

*

Requires Silver plan.