Security Ninja Pro

Extend Security Ninja for ongoing WordPress security work

Security Ninja Pro adds firewall, scanning, login, hardening, and reporting controls to the Security Ninja dashboard. Site owners and administrators can review findings, configure protection, and set up recurring security checks.

The base extension includes an 8G-based firewall for common malicious requests, more than 50 security tests, vulnerability and core integrity scanners, and a basic events logger. On WordPress 7, the base add-on also includes an AI Security Advisor that uses an LLM provider the website owner connects. Pro adds the cloud firewall, malware scanning and cleanup, login controls, expanded logging, and scheduled scans and reports.

When you need broader firewall controls

The Pro cloud firewall and advanced Web Application Firewall controls can block known bad IP addresses using data covering more than 600 million known bad IPs. Country blocking and IP management give administrators additional ways to restrict traffic. The base plugin's 8G-based firewall remains available for common malicious requests and bot noise.

For malware and vulnerability reviews

The Advanced Malware Scanner can detect and clean malicious code and suspicious documents. The base plugin also includes vulnerability scanning for known issues in extensions and themes, plus core integrity checks that identify modified or unexpected files in WordPress core folders. Pro adds scheduled scans and reports for recurring reviews.

For login controls and WordPress hardening

Pro login protection can limit failed login attempts, rename the login URL, and add two-factor authentication. One-click fixes on the Fixes page include disabling XML-RPC, restricting file editing, and hiding PHP error messages. Review each setting before applying it, especially if a site depends on a particular process or integration.

For tracking security activity

The base plugin logs firewall events and successful or failed login attempts. Pro adds security log exports, scheduled email reports, webhooks such as Slack or Discord notifications, and deeper alerting. Scheduled scans can execute daily, weekly, or monthly, with reports sent by email.

Install and configure

1. Install and activate Security Ninja Pro on the WordPress site.
2. Open the Security Ninja dashboard and review security tests, scanner results, and current events.
3. Configure cloud firewall, IP or country controls, login protection, and two-factor authentication as needed.
4. Review one-click fixes before applying them, then configure scheduled scans, reports, exports, or webhooks.