Security Ninja

Security Ninja is a lightweight WordPress security plugin that helps protect your site from common attacks and security mistakes – without turning your dashboard into a cockpit.

Web Application Firewall (WAF) (based on the 8G ruleset) to block common malicious requests, plus 50+ security checks, a full vulnerability scanner, and a core integrity scanner to spot risky settings and unexpected file changes.

Upgrade to Pro for Cloud Firewall, malware scanning/cleanup, login brute-force protection and 2FA, export/webhooks, and scheduled scans.

This plugin can be downloaded for free without any paid subscription from the official WordPress repository.

Included for free
– Basic Firewall (8G-based) – Blocks common malicious requests and bot noise before it becomes a problem.
– 50+ Security Tests – Fast audit of common WordPress security misconfigurations.
– Vulnerability Scanner – Highlights known issues in plugins/themes so you can patch faster.
– Core Scanner – Detect modified or unexpected files in WordPress core folders.
– Basic Events Logger – Logs firewall events and login attempts (successful/failed).
– AI Security Advisor (WordPress 7) – AI-generated audit summaries and guided follow-ups from your scans, using WordPress AI Connectors (you choose the LLM provider). Optional WordPress Abilities let other AI tools on your site read test summaries, attack activity, and your latest saved report.

Pro adds
– Cloud Firewall & advanced WAF – Block 600+ million known bad IPs, country blocking, IP management, and stronger firewall controls (free includes the 8G-based firewall).
– Advanced Malware Scanner – Detect and clean malicious code and suspicious files.
– Login protection & 2FA – Limit failed logins, rename the login URL, and add two-factor authentication.
– One-click Fixes – Harden WordPress from the Fixes page (XML-RPC, file editor, headers, and more).
– Full Events Logger – Export logs, scheduled email reports, webhooks (e.g. Slack/Discord), and deeper alerting.
– Scheduled scans & reporting – Automated security scans and reports.

Key Features

Security Ninja is a lightweight WordPress firewall plugin and security toolkit designed to help you find misconfigurations, block common attacks, and stay ahead of known vulnerabilities – without slowing your site down.

Comprehensive WordPress Security Testing

Security Ninja performs 50+ advanced security tests to identify issues before attackers exploit them. This includes:

• Login and password checks – Audits weak passwords and related settings (Pro adds failed-login limits, rename login, and 2FA).
• File integrity monitoring – Detects unauthorized changes to WordPress core files, themes, and plugins.
• Database security checks – Identifies weak database permissions and potential SQL injection threats.
• User role audits – Ensures no unauthorized administrator accounts exist.
• Security misconfiguration scans – Identifies and fixes weak settings that could compromise security.

Enhanced Vulnerability Scanner

Proactively alerts you to known vulnerabilities in plugins and themes so you can patch before they are exploited.

Core Scanner – WordPress Installation Integrity

Ensures your WordPress installation remains untampered and free of unauthorized files.

• Full core file integrity check – Scans every file in core WordPress folders for modifications.
• Unknown file detection – Flags extra or unexpected files in core directories.
• Built-in file viewer – Review flagged files in the dashboard.
• Restore or delete – Restore altered core files with one click, or remove suspicious unknowns.

Read the full description on the official page →