Plugin
Updated
SecuPress Pro
SecuPress Pro is a WordPress security plugin that guards your site against common threats. It combines a firewall, malware scanning, brute force protection and security event logging, all managed from one dashboard that does not demand deep technical knowledge.
- Version
- 2.7.1
- Released
- Sep 25, 2026
- Type
- WordPress plugin
- Licence
- GPL
- Included in
- Every plan, or $5.59 a year on its own
- Topics
- Security Plugins
What’s new in SecuPress Pro 2.7.1
Version 2.7.1 · Sep 25, 2026
Latest
- NewFirewall Learning Mode for 8G (observe signatures, review hits, allow globally or per URL prefix, auto-calibrate).
- ImprovedWAF revamp: 8G signatures are now optional per filter, with local exceptions.
- ImprovedBlock Bad Referers is now available in Free.
- ImprovedHide WP, WooCommerce and PHP session cookies from the Support ID.
- ImprovedMalware scanner still lists malware files when WP core checksums are missing, and matches "file" signatures on the filename.
- ImprovedDeactivating a wp-config module no longer leaves the file or the setting in a bad state.
- ImprovedAnti-spam comment delay now finds the comment form via the WordPress core field, so custom theme form IDs no longer break the timer.
- FixedMixed content replacement now handles namespaced XML/SVG.
What it does
WordPress sites attract a steady stream of hacking attempts, from bots guessing passwords to requests carrying malicious code. This plugin gathers several defenses in one place so you are not stitching together separate tools. A firewall filters harmful traffic, with signature filters you can turn on individually and a learning mode that observes hits so you can review them and allow requests globally or per URL prefix. A malware scanner looks for suspicious code and files, and login protections limit attempts and block suspicious IP addresses.
Beyond blocking attacks, the plugin keeps a record of what happens on your site. Security events are monitored and logged, with reports and alerts that help you respond and analyze incidents. Account safety gets attention too, through two-factor authentication and detection of weak passwords that prompts users to change them. There is also an anti-spam delay for comments and a tool that fixes mixed content. It suits anyone running a WordPress site, from a personal blog to an online store, who wants these controls in one dashboard.
Best for
- Bloggers who want login and malware protection in one place
- Online stores that need firewall filtering and activity logs
- Agencies managing security across several client sites
Features
Configurable firewall
Blocks malicious traffic and hacking attempts, with 8G signature filters you can enable one at a time and local exceptions where a rule causes trouble.
Firewall learning mode
Observes signature hits so you can review them, allow requests globally or per URL prefix, and let the firewall calibrate itself to your site.
Malware scanning
Detects malware and suspicious code, lists infected files even when WordPress core checksums are missing, and matches file signatures by filename.
Brute force protection
Limits login attempts and blocks suspicious IP addresses to keep unauthorized visitors out of your admin area.
Two-factor authentication
Adds a second verification step to logins, so a stolen or guessed password alone is not enough to get into an account.
Weak password detection
Identifies users with weak passwords and requires them to update, raising the baseline security of every account on the site.
Event monitoring and logging
Records security incidents and provides detailed reports and alerts, giving you the information you need to respond and investigate.
Comment spam delay
Applies a timing delay to the comment form, located through the WordPress core field so custom theme form IDs still work.
SecuPress Pro older versions
- 2.7Sep 15
- 2.6.3Jul 21
- 2.6.2Jul 5
- 2.6.1Apr 14
- 2.6Jan 19
- 2.5Dec 3, 2025
- 2.4Oct 15, 2025
- 2.3.20.1Jul 4, 2025
- 2.3.19.1Jun 29, 2025
- 2.3.19Jun 25, 2025
Members and buyers of this product can download older versions.
12 older versions in all. If you need one that is not listed, ask support.
Questions about SecuPress Pro
Can I adjust the firewall if it blocks legitimate requests?
Yes. The 8G signature filters can be switched on individually, and you can add local exceptions. Learning mode lets you review signature hits and allow requests globally or for a specific URL prefix before enforcing the rules.
Does it help protect user accounts beyond a password?
It does. You can turn on two-factor authentication, which asks for a second verification step at login. The plugin also detects weak passwords and makes users update them, and it limits login attempts while blocking suspicious IP addresses.
Will I be able to see what security events happened on my site?
Yes. The plugin monitors and logs security events and provides detailed reports and alerts. This gives you a record of incidents so you can react quickly and look into what happened.
Do I need to be a security expert to use it?
No. Settings and monitoring are handled through a dashboard designed for everyday site owners, and several features are automated, so you can protect your site without deep technical knowledge.
Is SecuPress Pro free?
The code of SecuPress Pro is licensed under the GPL, so anyone may use, change and share it. GPL Feast is a paid service: a plan or a single purchase gives you the download and automatic updates. The developer's own support, licence key and online services are not included.
Which version of SecuPress Pro is this?
Version 2.7.1, released Sep 25, 2026. New versions appear here when the developer publishes them, and members get them as automatic updates.
How do I update SecuPress Pro?
Install the free GPL Feast Updater on your site and connect it with your API key. It installs new versions of SecuPress Pro automatically and keeps a backup, so you can roll back.
You might also like
