Defender Security – Malware Scanner, Login Security & Firewall

Hackers and bot attacks are not the only security threats to your site. No matter what security plugin or service you use, always be prepared with a secure backup stored in a safe location away from your live site. Security does not protect from hosting outages, server errors and accidentally lost or damaged data. We recommend Snapshot. Defender with scheduled managed backups is the best way to keep your site safe.

Yes! Defender’s Firewall gives you robust site protection and security by allowing you to block bad bot IPs and use geographical IP blocking

You can. Just make sure not to enable the same security features in the third-party plugin that you also have enabled in Defender, as this might cause conflicts, such as malware scanners, firewall, and login security features.

Yes! All of Defender’s security features are fully compatible with a multisite installation. It can be network enabled and managed from the network admin.

Yes, Defender provides multiple layers of spam protection and security. A large percentage of Trackbacks and Pingbacks are spam, and Defender allows you to easily disable both to reduce spam and improve site security. Additionally, Defender includes the AntiBot Global Firewall, which blocks known malicious IPs and bots before they even reach your site, offering proactive protection against common attacks and spam bots.

Yes. Defender’s IP banning, IP lockout, and 404 detection security features can identify DDoS attacks and block bad IPs.

If you’re the administrator and you’ve been locked out due to multiple failed login attempts, Defender offers two options:

Option #1: Use the “Unlock Me” feature:

Click the Unlock Me button on the login page and enter your username or the email address linked to your site. You’ll receive an email with a secure link to unlock your account and regain access — no technical steps needed.

Option #2: Use the manual method (if email doesn’t work):

Add the following code to your theme’s functions.php file, located in the main directory of your active theme.

add_filter( 'ip_lockout_default_whitelist_ip', function ( $ips ) {   $ip    = 'YOUR IP HERE';   $ips[] = $ip;   return $ips; } ); 

Replace “YOUR IP HERE” with your actual IP address (you can use a tool like whatsmyip to find it.)

WPMU DEV’s expert support can advise you on how to clean up your site if it’s been hacked. Create a new thread in our support forum, or Defender Pro gives you access to 24/7 live support.

We take plugin security incredibly seriously; if you have a bug or vulnerability to report, you can do so through the Patchstack Vulnerability Disclosure Program. It’s fast, easy, and you will be notified when the issue is fixed. Report a vulnerability.

Please open a new thread in Defender’s support forum. Our support team is always happy to help!