• Protects from brute force attacks by limiting login attempts.
• Checks core files, themes and plugins for malware, bad URLs, backdoors, SEO spam, malicious redirects and code injections.
• Compares your core files, themes and plugins with what is in the WordPress.org repository, checking their integrity and reporting any changes to you.
• Checks your site for known security vulnerabilities and alerts you to any issues. Checks your content safety by scanning file contents, posts and comments for dangerous URLs and suspicious content.

One of the most secure forms of remote system authentication available via any TOTP-based authenticator app or service.

Highly configurable alerts can be delivered via email. Improves the signal to noise ratio by leveraging severity level options and a daily digest option.

Tracks and alert on important security events including administrator logins, breached password usage and surges in attack activity.

Monitors visits and hack attempts not shown in other analytics packages in real time; including origin, their IP address, the time of day and time spent on your site.

Blocks attackers by IP or build advanced rules based on IP Range, Hostname, User Agent and Referrer.