Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Free
3M+ installs 4.9★ (8,862)
BBQ Firewall
The fastest firewall plugin for WordPress. Protect against a wide range of threats with minimal performance impact.
The facts
- Rating
- 4.9★ from 160
- Active installs
- 100k+
- Price
- Free
- Last updated
- 9 Aug 2026
- Added
- Mar 2010
- Requires WP
- 4.7
- Tested up to
- WP 7.1
- Requires PHP
- 5.6.20
- Downloads
- 3,472,900
Our analysis
AI-assistedBBQ Firewall is a WordPress plugin designed to provide security by protecting your site from various online threats. It checks incoming traffic and blocks harmful requests, making it suitable for users who cannot implement a more complex firewall solution. The plugin is lightweight and operates without requiring extensive configuration, allowing for straightforward installation and use.
This plugin is aimed at WordPress site owners looking for an easy-to-use security measure against threats like SQL injection, XSS, and bad bots. It is particularly beneficial for those who want a fast and efficient firewall without the need for technical expertise.
Best for: WordPress site owners seeking a simple and effective security solution.
What it does well
- ✓Lightweight and fast, under 10 kilobytes
- ✓Blocks a wide range of malicious requests
- ✓No configuration needed for installation
- ✓Compatible with all WordPress plugins and themes
- ✓Regularly updated and tested for performance
Where it falls short
- •Limited information on advanced features without a pro version
- •No details on specific user support options
Verdict
BBQ Firewall offers a straightforward approach to website security, making it a suitable choice for those wanting to protect their site without complex setups.
From the developer
Jeff Starr's own description of BBQ Firewall, lightly tidied.
🔥 Install, activate, and done!
🔥 Powerful protection from WP’s fastest firewall plugin.
BBQ Firewall is a lightweight, blazing-fast firewall plugin that protects your site against a wide range of threats. BBQ checks all incoming traffic and quietly blocks bad requests containing nasty stuff like eval(, base64_, and excessively long request-strings. This is a simple yet solid solution for sites that are unable to use a strong Apache/.htaccess firewall.
🔥 Adds a strong firewall to ANY WordPress site
🔥 Works with all WordPress plugins and themes
Powerful Protection
BBQ protects your site against many threats:
- SQL injection attacks
- Executable file uploads
- Directory traversal attacks
- Unsafe character requests
- Excessively long requests
- PHP remote/file execution
- XSS, XXE, and related attacks
- Protects against bad bots
- Protects against bad referrers
- Protects against bad POST content
- Protects against many other bad requests
Awesome Features
BBQ provides all the best firewall features:
- Rated 5 stars at WordPress.org
- 100% plug-&-play, zero configuration
- 100% focused on security and performance
- Blocks a wide range of malicious URL requests
- Fastest Web Application Firewall (WAF) for WordPress
- Based on the 7G/8G Firewall
- Scans all incoming traffic and blocks bad requests
- Scans all types of requests: GET, POST, PUT, DELETE, etc.
- Protects against known bad bots and referrers
- Works silently behind the scenes to protect your site
- Hassle-free security plugin that’s easy to use
- Thoroughly tested, error-free performance
- Extremely low rate of false positives
- Compatible with other security plugins
- Regularly updated and “future proof”
- Firewall < 10 kilobytes in size
- Lightweight, fast and flexible
Exclusive Pro Features
- Customize firewall via plugin settings
- Easily add or remove firewall patterns
- Easily add Jeff Starr’s AI Block List
- Send Email Alerts for blocked requests
- Quickly enable/disable firewall rules
- Disable firewall for logged-in users
- Block excessively long URI requests
- Protect against XML-RPC exploits
- Block any individual IP address
- Block entire ranges of IP addresses
- Protect against user-ID phishing
- Redirect all blocked requests
- Display a custom “blocked” message
- Set your own response status code
- Complete inline documentation
- Statistics for blocked requests
- Tools to reset options and patterns
- Import and Export firewall patterns
- One-click pattern testing
- Whitelist IP addresses
..plus everything the free version can do and more.
Privacy
Tagged as
quality
Security
Alternatives
Other plugins for securing a site.
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....
Free
5M+ installs 4.7★ (4,983)
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Loginizer
93Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
Free
1M+ installs 4.8★ (1,030)
Safe SVG
93Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
Free
1M+ installs 4.9★ (79)
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...
Free
1M+ installs 4.7★ (1,715)