
Security Ninja (Premium)
New versions delivered weekly. Install instantly from your WordPress dashboard — no ZIP uploads.
✓ Same as wp.orgPush directly to any site from your dashboard. Zero downloads, zero FTP, zero manual steps.
✓ Unlimited sitesAbout this plugin
Security Ninja (Premium) is a comprehensive WordPress security plugin built for site owners, developers, and agencies who want to keep their websites safe without the headache.
It runs over 50 automated security tests to uncover vulnerabilities, weak passwords, and outdated files across your site. The built-in firewall blocks malicious traffic before it causes damage, while the Core Scanner checks your WordPress files against the official repository to detect any unauthorised changes. A solid choice for anyone serious about WordPress security.
Version 5.307
Latest- Two-Factor Authentication - Repeated wrong codes now use the same limit as failed logins (default 5 tries in 5 minutes). The wait stays in place until that window ends. With the firewall on, those tries count the same way a wrong password does.
- Events Logger - An incorrect 2FA code is saved in the events log with the account name. With the firewall on, the same try is also listed as a failed login.
- Two-Factor Authentication - Authenticator app secrets now follow your WordPress salts. The update re-encrypts existing secrets the next time you open wp-admin. Email codes are unchanged. If you later change AUTH_KEY or SECURE_AUTH_KEY, those users set up the app again.
- Core Scanner ignores HTML challenge pages when it downloads official file content for a diff or restore.
- Firewall IP Management shows Unblock for temporary local bans and 404 Guard bans.
- Visitor Log stays on the current page after you ban an IP from the log.
- MainWP - The child connection is available whenever MainWP Child is active on the site.
- Core Scanner - WordPress 7 files under wp-includes/php-ai-client/ that were saved with a shortened name are no longer listed as critical unknown files. When the file matches the official checksum, the scan explains the shortened name and can rename it back. Those files are left out of "Delete critical & warning unknowns".
- Firewall - A saved coupon limit of 3 (the minimum is now 5) no longer blocks saving the other firewall tabs. The field sits on the Store tab in the same form, and the browser was refusing to submit it. Thank you Chris.
- Early Firewall - Block events waiting to be logged are stored as data files. An event that had not been written to the log yet may be missing once after this update.
- Login Protection - The hidden wp-admin check now confirms the login cookie is valid. A normal login is unchanged.
- Core Scanner - "Delete critical and warning unknowns" leaves files in the site root alone, including wp-config.php. You can still remove one of those files from its own row.
- 2026-10-25
- Login, firewall, and scan updates. Your saved settings stay as they are.
Key features
- 8G Firewall: Blocks common malicious requests using the 8G ruleset.
- Security Checks: Runs 50+ security checks to find common attacks and security mistakes.
- Vulnerability Scanner: Scans your site for vulnerabilities.
- Core Integrity Scanner: Detects risky settings and unexpected file changes.
- Events Logging: Records security events in a basic events log.
- Ai Security Advisor: Provides AI security reports on WordPress 7.
- Scanned with ClamAV 1.4.6
- Scanned on 29 Oct 2026
- Signatures from 29 Oct 2026
Billed monthly · cancel anytime
Billed $139.00 yearly · cancel anytime
Unlock full access Billed $8.95/mo · 6,000+ resources Unlock full access Billed $139.00/yr · 6,000+ resources- 6,000+ GPL resources
- 30+ genuine WP licenses (special purchase)
- Daily auto-updates via Auto Updater
- Use on unlimited domains
