Plugin
Updated
Security Ninja (Premium)
Security Ninja (Premium) is a WordPress security plugin that checks your site for weak spots and helps protect it. It runs over 50 vulnerability tests and adds firewall protection, malware scanning, login hardening and core file monitoring in one place.
- Version
- 5.305
- Released
- Oct 11, 2026
- Type
- WordPress plugin
- Licence
- GPL
- Included in
- Every plan, or $3.99 a year on its own
- Topics
- Security Plugins
What’s new in Security Ninja (Premium) 5.305
Version 5.305 · Oct 11, 2026
Latest
- ImprovedGerman - The bundled translation now uses Du, the same terms throughout (Schwachstelle, Core-Scanner, Malware-Scanner, Korrekturen, Anmeldung), and the strings that were still English are translated.
- FixedTests - A wp-config.php moved one level above the WordPress root now scores as a pass. A file still in the root stays a warning.
- ImprovedUpdated Freemius SDK to the latest version.
- NewAgent skill - SKILL.md in the plugin folder tells Cursor and Claude-style agents how to configure Security Ninja, read scan results, and work through a harden checklist. This is separate from the WordPress Abilities API.
- ImprovedVulnerability Scanner - When vulnerabilities are found, the warning is the only headline. "Vulnerability Scanner" stays when the scan is clean or still running. Collapsed Details no longer leaves an empty white bar.
- FixedAuto Fixer - File backups are stored as .wfbkp data files again (not .php), so the Malware Scanner no longer flags our own backups. Existing .wfbkp.php backups are migrated automatically.
- ImprovedTests - Permissions-Policy example now uses current header syntax and a shorter default that leaves fullscreen, autoplay, and encrypted media alone so embedded video keeps working.
- ImprovedTests - Permissions-Policy default no longer disables payment, so Apple Pay and Google Pay checkouts keep working.
What it does
Most WordPress sites collect small security gaps over time: weak login settings, changed core files, leftover code that should not be there. This plugin gathers the checks for those problems into a single dashboard. Its over 50 vulnerability tests inspect your setup and point out loopholes, and the malware scanner looks for harmful code. Scheduled scans repeat these checks on a regular basis, so you do not have to remember to run them by hand.
Beyond testing, it adds active protection. A real-time firewall filters malicious traffic, and there is an optional mode that can run the firewall before WordPress loads. Login hardening includes two-factor authentication and IP blocking to resist brute force attempts. An events logger records security activity, and the log can be exported as a CSV file. Agencies managing client sites can use the white-label options to apply their own branding.
Best for
- WordPress site owners wanting security checks in one plugin
- Agencies managing and branding security for client sites
- Beginners who need guided setup for firewall and logins
Features
Over 50 vulnerability tests
Runs more than 50 tests against your WordPress setup to find security loopholes and show you which issues need attention.
Real-time firewall
Blocks malicious traffic as it arrives, with an optional early mode that can run the firewall before WordPress itself loads.
Malware scanning and cleanup
Scans your site for harmful code and offers advanced cleanup tools to help remove what it finds.
Login hardening
Adds two-factor authentication and IP blocking to defend against brute force attacks and unauthorized access to your admin area.
Core file monitoring
Watches your WordPress core files and flags unauthorized changes, helping you confirm the integrity of your site's foundation.
Event logging with CSV export
Tracks security-related activity, lets you set how many records to keep, and exports the event log as a CSV file.
Scheduled scans and automated fixes
Runs security scans on a schedule and can apply automated fixes to resolve detected issues without manual steps.
White-label options
Lets agencies replace the plugin branding with their own, so client dashboards reflect the agency rather than the plugin.
Security Ninja (Premium) older versions
- 5.304Oct 105 new, 21 improvements, 5 fixes
- 5.303Sep 91 new, 10 improvements
- 5.302Sep 26 fixes
- 5.297Aug 20
- 5.295Aug 10
- 5.294Aug 3
- 5.293Jul 23
- 5.291Jul 14
- 5.290Jul 1
- 5.289Jun 23
Members and buyers of this product can download older versions.
40 older versions in all. If you need one that is not listed, ask support.
Questions about Security Ninja (Premium)
Does it include a firewall, or only scanning?
It includes both. A real-time firewall blocks malicious traffic, and an optional early firewall mode can run before WordPress loads. The malware scanner and vulnerability tests work alongside it to find problems already on the site.
Can it help stop brute force login attempts?
Yes. Login hardening includes two-factor authentication and IP blocking, which together make it harder for attackers to guess passwords or keep retrying logins from the same addresses.
Can I review what security events happened on my site?
The events logger records security-related activity on your site. You can choose how many records to keep, retain selected firewall and block events longer for investigations, and export the log as a CSV file.
Is it suitable for agencies with client sites?
Yes. The white-label options let agencies customize the plugin with their own branding, and scheduled scans keep regular checks running on each site without manual work.
Is Security Ninja (Premium) free?
The code of Security Ninja (Premium) is licensed under the GPL, so anyone may use, change and share it. GPL Feast is a paid service: a plan or a single purchase gives you the download and automatic updates. The developer's own support, licence key and online services are not included.
Which version of Security Ninja (Premium) is this?
Version 5.305, released Oct 11, 2026. New versions appear here when the developer publishes them, and members get them as automatic updates.
How do I update Security Ninja (Premium)?
Install the free GPL Feast Updater on your site and connect it with your API key. It installs new versions of Security Ninja (Premium) automatically and keeps a backup, so you can roll back.
You might also like
