Free HTTP & Slack/Discord Webhook Integration

Staying on top of the latest vulnerabilities is critical for ensuring the security of WordPress sites. While adequate security controls and our industry-leading web application firewall provide crucial protection for WordPress sites, it's still important to know when software on a site includes a known vulnerability so that plugin or theme can be updated or removed immediately. No security solution is perfect, so maintaining layers of security is critical. Site owners, enterprises, and organizations can set up Slack or Discord webhook integration to be notified of the latest vulnerabilities in a central location, and can also use our HTTP webhook integration to build a custom application to serve their customers and ensure they’re notified of vulnerabilities as soon as they are disclosed. No other WordPress vulnerability database on the market offers free access to webhook integrations.

Learn how to get started with webhooks here.

Free API Access to our Complete Database of High Quality WordPress Vulnerability Information

Access to high quality information about vulnerabilities in WordPress products has never been easier, or more cost-effective. Wordfence Intelligence provides access to two vulnerability data feeds formatted in JSON containing all relevant vulnerability data, including affected software name and slug, a concise title and description, affected version and patched version, CVSS Score, CWE ID, and recommended remediation. This information can easily be integrated into a variety of applications to better serve the security needs of site owners, organizations, and enterprises. We've seen hosting providers implement our data to run vulnerability scans for their customers, and we've seen independent researchers and site owners build integrations for tools like WP CLI and Nuclei.

No other WordPress vulnerability database on the market provides free access to their complete database of vulnerability information maintained by industry-leading security professionals, nor is there any other database that has the quality of information we do.

Review the documentation to get started using the vulnerability database API today.

Open Source Bug Bounty Program: Supporting Researchers Who Support the Security of the WordPress Ecosystem

Wordfence Intelligence has been designed by Security Researchers with Security Researchers in mind. Our bug bounty program is designed to reward researchers contributing valuable time to the security of WordPress by spending countless hours finding vulnerabilities and ensuring they get patched. In our program, vulnerabilities that take more time to find, are less common, or are highly impactful get rewarded the most, while those that are easy to find, more common, or are generally less impactful get rewarded the least. We've also made it easy for researchers to register profiles to showcase their work and achievements, all in a central location.

Learn more about the Bug Bounty Program and get started as a researcher here.

Real-Time Threat Intelligence Metrics

Wordfence Intelligence isn't just a high quality vulnerability database. On the dashboard, you can find statistics such as how many attacks we've blocked in the past 24 hours, 7 days, and 30 days, how many IPs are on our IP Threat Feed, the top 10 attacking IPs within a 24 hour period, the top 10 targeted WordPress vulnerabilities, and more. In addition, any vulnerabilities that warrant the release of it's own firewall rule display individual attack statistics below the vulnerability description so users can view attack volume if these vulnerabilities are being actively exploited.

Highly Flexible Search Engine for Vulnerabilities

One major benefit of the Wordfence Intelligence platform is the ability to conduct robust searches across our database of vulnerabilities. We are not aware of any competitors with a comparable vulnerability search engine. With our database it is possible to search by researcher, vulnerability type, vulnerability severity, title, date range, and more, making security research, journalism, and due diligence a breeze for anyone using the Wordfence Intelligence search engine.

Managed by Industry-Leading Professionals

Our vulnerability database isn't managed by a single person, or a bunch of interns. It's run and managed by some of the top WordPress vulnerability researchers in the industry. This means that all of the vulnerability data you see is reviewed and analyzed by industry professionals with numerous security certifications including CISSP, OSCP, OSWE, Security+, GWAPT, and more. You don’t need to worry about verifying whether a vulnerability is valid, or be concerned about whether the severity of the vulnerability is accurate. You can be assured that we put forth the best, most accurate information available to help site owners and organizations.

Integrated into Wordfence CLI for High-Performance Vulnerability Scanning

Wordfence Intelligence has integrated its datasets into the Wordfence CLI scanner so users have easy access to scan sites and networks for known vulnerabilities in WordPress plugins, themes, and core. This is completely free to use for commercial purposes, so hosting providers and enterprises can integrate this data as they see fit to conduct vulnerability scanning in a highly scalable and performant way for their clients.

You can learn more about Wordfence CLI and potential use cases here.