Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Free
3M+ installs 4.9★ (8,862)
Anti-Malware Security and Brute-Force Firewall
This Anti-Malware scanner searches for Malware, Viruses, and other security threats and vulnerabilities on your server and it helps you fix them.
The facts
- Rating
- 4.9★ from 783
- Active installs
- 100k+
- Price
- Free
- Last updated
- 29 Jun 2026
- Added
- Mar 2012
- Requires WP
- 3.3
- Tested up to
- WP 7.0.4
- Requires PHP
- 5.6
- Downloads
- 7,900,398
Our analysis
AI-assistedAnti-Malware Security and Brute-Force Firewall is a WordPress plugin designed to protect websites from security threats and malware. It offers features like complete scans to identify and remove known threats, as well as a firewall to block specific malware from exploiting vulnerabilities in plugins. Users can register for additional features, including automatic removal of threats and updates for known vulnerabilities.
This plugin is suitable for WordPress site owners looking for a way to enhance their site's security. It is particularly useful for those who want to regularly scan their site for potential threats and keep their plugins updated against known vulnerabilities.
Best for: This plugin suits WordPress site owners seeking to improve their site's security against malware and brute-force attacks.
What it does well
- ✓Free to use from the WordPress.org directory
- ✓High rating of 4.9 out of 5 from 783 ratings
- ✓Active installs count of 100,000
- ✓Includes features for scanning and removing known security threats
- ✓Provides firewall protection against specific malware
Where it falls short
- •Premium features require registration at GOTMLS.NET
- •May not automatically remove threats without registration
- •Calls to GOTMLS.NET for updates may not suit all users
Verdict
Anti-Malware Security and Brute-Force Firewall offers solid protection features for WordPress users. However, some functionalities depend on registration, which may limit its effectiveness for unregistered users.
From the developer
Eli's own description of Anti-Malware Security and Brute-Force Firewall, lightly tidied.
Features:
- Download Definition Updates to protect against new threats.
- Run a Complete Scan to automatically remove known security threats, backdoor scripts, and database injections.
- Firewall block SoakSoak and other malware from exploiting Revolution Slider and other plugins with known vulnerabilites.
- Upgrade vulnerable versions of timthumb scripts.
Premium Features:
- Patch your wp-login and XMLRPC to block Brute-Force and DDoS attacks.
- Check the integrity of your WordPress Core files.
- Automatically download new Definition Updates when running a Complete Scan.
Register this plugin at GOTMLS.NET and get access to new definitions of “Known Threats” and added features like Automatic Removal, plus patches for specific security vulnerabilities like old versions of timthumb. Updated definition files can be downloaded automatically within the admin once your Key is registered. Otherwise, this plugin just scans for “Potential Threats” and leaves it up to you to identify and remove the malicious ones.
NOTICE: This plugin makes calls to GOTMLS.NET to check for updates not unlike what WordPress does when checking your plugins and themes for new versions. Staying up-to-date is an essential part of any security plugin and this plugin can let you know when there are new plugin and definition update available. If you’re allergic to “phone home” scripts then don’t use this plugin (or WordPress at all for that matter).
Special thanks to:
- Clarus Dignus for design suggestions and graphic design work on the banner image.
- Jelena Kovacevic and Andrew Kurtis of webhostinghub.com for providing the Spanish translation.
- Marcelo Guernieri for the Brazilian Portuguese translation.
- Umut Can Alparslan for the Turkish translation.
- Micha Cassola for the German translation.
- Robi Erwin Setiawan for the Indonesian translation.
Tagged as
quality
Security
Alternatives
Other plugins for securing a site.
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....
Free
5M+ installs 4.7★ (4,983)
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Loginizer
93Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
Free
1M+ installs 4.8★ (1,030)
Safe SVG
93Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
Free
1M+ installs 4.9★ (79)
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...
Free
1M+ installs 4.7★ (1,715)