Features

Login Policy Free Premium
Email-only login
Block user enumeration
Block blacklisted usernames
XML-RPC Policy Free Premium
Block XML-RPC
    — Allow Jetpack
    — Allow trusted IPs
    — Allow pingbacks responsibly
Stop multicall brute-force attacks
Log raw requests
Comments, Pingbacks, Trackbacks Free Premium
Block repeated invalid comment attempts
Rate-limit accepted comments
Block spam
    — caught by Akismet
    — via Contact Form 7 [1]
    — via Gravity Forms [2]

 

WordPress-aware WAF Free Premium
Block SQL injection without signatures
Protect sensitive WordPress options
Prevent unauthorised user deletion
Miscellaneous Free Premium
WP fail2ban Blocklist
Block access by country
Cloudflare and proxy servers
Multisite support *
— Event hooks
Security events Free Premium
Configuration and monitoring Free Premium
— Configure via WordPress admin
— Configure via wp-config.php
— Event log
— Geographic Event map

Notes

1

Requires the WPf2b Contact Form 7 add-on.

2

Requires the WPf2b Gravity Forms add-on.

Requires modifying wp-config.php.

Read-only.

*

Requires Silver plan.