Plugin
Updated
Defender Pro
Defender Pro by WPMU DEV is a WordPress security plugin that guards your site against hackers, malware and bots. It combines scheduled malware scans, firewall rules, login protection and security recommendations so you can find and fix weak spots from one place.
- Version
- 6.3.0
- Released
- Sep 22, 2026
- Developer
- WPMU DEV
- Type
- WordPress plugin
- Licence
- GPL
- Included in
- Every plan, or $0.79 a year on its own
- Topics
- Security Plugins
What’s new in Defender Pro 6.3.0
Version 6.3.0 · Sep 22, 2026
Latest
- ImprovedUpdate malware signatures
- ImprovedMake Scan settings uneditable while scanning is in progress
- ImprovedUpgrade node packages
- ImprovedDisplay country name tooltip on country flag hover in Firewall Logs
- ImprovedReduce the plugin archive size by removing legacy code in some files
- ImprovedTranslation improvements
- ImprovedDisplay scan details of issue with a suspicious code with automatic scrolling
- ImprovedUpdate support and product roadmap links
What it does
Keeping a WordPress site secure usually means juggling several tools: one for scanning, one for login protection, another for blocking bad traffic. This plugin brings those jobs together. It runs scheduled malware scans, checks for known vulnerabilities using Patchstack data, and lets you repair or replace suspicious files when something looks wrong. It also watches the Google Blocklist so you hear about problems early, and it gives security recommendations you can act on, including bulk fixes when several issues turn up at once.
On the access side, you get two-factor authentication, login page masking, brute-force defense, Google reCAPTCHA for forms and logins, and session protection. The AntiBot Global Firewall blocks known malicious IPs, and you can block traffic by country or by individual address, with allow and block lists managed across multiple sites. Audit logs record security events and admin actions, scheduled reports keep you informed, and white label branding lets agencies present the tool under their own name to clients.
Best for
- Site owners who want malware scanning and login security together
- Agencies managing security across many client sites
- Freelancers who need white label security tools
Features
Scheduled malware scanning
Scans run on a schedule to detect malware, and scan results point you to suspicious code so you can review the affected files and respond quickly.
Safe file repair
Repair or replace suspicious and compromised files with one click, which helps you restore a site after malicious code has been found.
Patchstack vulnerability detection
Uses Patchstack vulnerability intelligence to identify security risks on your site, and bulk fixes let you resolve several issues at the same time.
AntiBot Global Firewall
Blocks known malicious IP addresses in advance, cutting down spam and attacks from harmful visitors before they reach your site.
Geolocation and IP blocking
Block access from specific countries or suspicious IP addresses, and manage allowed and blocked IP lists centrally across multiple sites.
Login protection and 2FA
Hide your WordPress login page, defend against brute-force attempts, and add two-factor authentication through an authenticator app or biometric method.
Audit logging and reports
Track security events and admin actions in detailed logs, and receive scheduled security reports that summarize your site's status.
White label branding
Agencies and freelancers can customize the plugin with their own branding when managing security for client websites.
Defender Pro older versions
- 6.2.4Sep 23 fixes
- 6.2.3Sep 13 improvements, 5 fixes
- 6.2.0Aug 191 new, 10 improvements, 20 fixes
- 6.1.0Jul 23
- 6.0.1Jul 9
- 6.0.0Jul 8
- 5.11.0Mar 31
- 5.10.0Feb 27
- 5.9.0Jan 27
- 5.8.0Dec 25, 2025
Members and buyers of this product can download older versions.
57 older versions in all. If you need one that is not listed, ask support.
Questions about Defender Pro
Can it help me clean up a site that already has malware?
Yes. The scheduled scanner detects malware and flags suspicious code, and the safe repair option lets you repair or replace compromised files with one click. It also offers automatic backups with restore options to help you recover after an incident.
How does it stop brute-force login attacks?
You can mask your WordPress login page so it is harder to find, enable brute-force defense, add Google reCAPTCHA to login pages, and require two-factor authentication. Session protection also guards logged-in users against hijacking.
Can I block visitors from certain countries?
Yes. Geolocation blocking lets you restrict access from specific countries, and you can also block individual suspicious IP addresses. Firewall logs show country flags with the country name on hover, so you can see where traffic comes from.
Is it practical for agencies with many client sites?
It is built with that in mind. You can manage allowed and blocked IP lists across multiple sites, send scheduled security reports, review audit logs, and apply white label branding so clients see your brand.
Is Defender Pro free?
The code of Defender Pro is licensed under the GPL, so anyone may use, change and share it. GPL Feast is a paid service: a plan or a single purchase gives you the download and automatic updates. The developer's own support, licence key and online services are not included.
Which version of Defender Pro is this?
Version 6.3.0, released Sep 22, 2026. New versions appear here when the developer publishes them, and members get them as automatic updates.
How do I update Defender Pro?
Install the free GPL Feast Updater on your site and connect it with your API key. It installs new versions of Defender Pro automatically and keeps a backup, so you can roll back.
More from WPMU DEV
