Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Free
3M+ installs 4.9★ (8,862)
RSFirewall!
Based on the success of the most popular firewall for Joomla!, RSFirewall! is now available to protect your WordPress website as well.
The facts
- Rating
- 5★ from 5
- Active installs
- 4k+
- Price
- Free
- Last updated
- 20 Aug 2026
- Added
- Jul 2019
- Requires WP
- 4.5.15
- Tested up to
- WP 7.1
- Requires PHP
- 5.4
- Downloads
- 37,219
Our analysis
AI-assistedRSFirewall! is a WordPress plugin designed to enhance the security of your website against various threats. It provides features such as active protections against file inclusion attacks, SQL injection, and malware monitoring. The plugin is suitable for users looking to safeguard their sites from malicious activities and maintain the integrity of their WordPress installations.
The plugin includes functionalities like email notifications for detected threats, blocking of repeated offenders' IP addresses, and the ability to change the wp-admin slug. It is developed by RSJoomla!, a team with experience in website security, ensuring that users have access to up-to-date protection methods.
Best for: This plugin is best for WordPress site owners seeking to improve their site's security.
What it does well
- ✓Free WordPress firewall solution
- ✓Active protection against various security threats
- ✓Email notifications for detected threats
- ✓Monitoring of WordPress core files integrity
- ✓Customisation options for wp-admin access
Where it falls short
- •Limited information on the paid version features
- •No details on specific compatibility with other plugins
Verdict
RSFirewall! provides a solid set of security features for WordPress users. It is a practical choice for those wanting to enhance their website's protection without incurring costs.
From the developer
RSJoomla!'s own description of RSFirewall!, lightly tidied.
The RSFirewall! WordPress plugin is the optimal solution for securing your website, helping you stay one step ahead of malicious users that wish to harm your website. The plugin is backed by a team of professionals with a long history in website security that are up to date with the latest known vulnerabilities and security updates.
RSFIREWALL FREE VERSION FEATURES:
- Free WordPress Firewall for your website
- Active protections against local file and remote file inclusion attacks
- SQL injection protections
- ReCAPTCHA for registration, login and commenting forms
- Filter uploaded files for possible malware and improper extensions
- Active monitoring WordPress core files integrity
- Active monitoring for your own files
- XML-RPC blocking
- REST API blocking with proper exceptions that you can define
- Protect the wp-admin/ slug with an extra password
- Change the wp-admin/ slug into a custom one
- Disallow direct access to PHP files in (wp-content, wp-content/uploads, wp-includes) with proper exceptions that you can define
- Receive email notifications on detected threats
- Automatically block repeated offenders IP addresses
- Perform a System check (WordPress and server configuration checks)
- Disable the creation of new Administrator accounts
RSFIREWALL PAID VERSION FEATURES:
- Two Factor Authentication
- Country blocking
- Convert email addresses to images
- Protect forms from abusive IPs
- File integrity check
- Convert email addresses from plain text to images
- More control over the system check
- Whitelist blocked PHP files
- Protect admin users from changes
3rd Party services
RSFirewall! will compare the MD5 hash of files with the original ones from the WordPress installation package. If differences are found (ie files have been modified) RSFirewall! upon request can download the original files from the GitHub synchronised repository of WordPress:
https://github.com/WordPress/WordPress/
All connections are made with wp_remote_get and the following information will be sent along with the request:
– WordPress version
– WordPress user agent along with your WordPress website address
– Your server’s IP address
Tagged as
purpose
Security & Malware Protection
quality
Security
Alternatives
Other plugins for securing a site.
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....
Free
5M+ installs 4.7★ (4,983)
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Loginizer
93Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
Free
1M+ installs 4.8★ (1,030)
Safe SVG
93Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
Free
1M+ installs 4.9★ (79)
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...
Free
1M+ installs 4.7★ (1,715)