The Leader in WordPress Security

Protect Your Investment

  • Join over 5 million secure WordPress site owners using Wordfence Free. Block attacks with the basic tools you need to keep your site safe. 30-day delay on firewall rules and malware signatures.

    Industry Leading Firewall
    Protect, Detect, and Secure
  • $119USDper yearBuy Now

    Get real-time firewall rules, malware signatures, country blocking, and block over 40,000 malicious IPs with our dynamically-updated IP blocklist. Includes Premium customer support.

    Real-Time Threat Intelligence
    Premium Support
  • Recommended
    $490USDper yearBuy Now

    For business owners who value their time. We install, configure, optimize, and monitor Wordfence for you. If there's an incident, we take care of it. Unlimited incident response and hands-on support.

    We Install, Configure & Optimize Wordfence
    Monitoring & Hands-on Support
  • $950USDper yearBuy Now

    For mission-critical websites where downtime has a financial impact. 24 hours a day, 7 days a week, and 365 days a year incident response with a 1-hour response time and 24-hour time to resolution.

    Available 24/7/365
What makes Wordfence different is that our software is powered by our threat intelligence platform and our team. We continually publish groundbreaking research, which is widely covered in the press. This research is turned into threat intelligence in the form of firewall rules, malware signatures, and IP blocklists that are released in real-time to our paid customers.

Wordfence Free

$0

Wordfence Premium

$119USDper year

Wordfence Care

$490USDper year

Wordfence Response

$950USDper year
Recommended For Entry-Level Sites that Need Basic WordPress Security Self-Administered Websites that Need the Best Protection Against Existing and Emerging Threats Busy Business Owners Who Need Hands-on Support From a Dedicated Security Analyst Mission-Critical Sites that Require 24/7/365 Incident Response with a 1-Hour Response Time
The Wordfence Firewall Rules delayed 30 days Real-time rules Real-time rules Real-time rules
The Wordfence Malware Scanner Signatures delayed 30 days Real-time signatures Real-time signatures Real-time signatures
Real-Time IP Blocklist
Country Blocking
Customer Support Level Volunteer forums Ticket based Priority ticket based 1-hour response time
Hands-on Support from a Dedicated Analyst
We Install Wordfence
We Configure Wordfence
We Optimize Wordfence for Performance & Security
We Provide a Security Audit & Recommendations Once yearly Once yearly + optional second audit
Cleanup if We Find Malware During the Audit
Security Audit Follow-up with Customer Q&A
We Monitor your Site Security
Investigation and Malware Removal
Post-incident Blocklist Removal
Post-incident Search Engine Security Cleanup
Detailed After-action Reports
24/7/365 Incident Response
1-Hour Response Time
Additional Wordfence Features:

Wordfence Free

$0

Wordfence Premium

$119USDper year

Wordfence Care

$490USDper year

Wordfence Response

$950USDper year
Scheduled Security Scans Every 3 Days Unlimited Unlimited Unlimited
Plugin/Theme Vulnerability Monitoring
File Change Detection
Intrusion Alerts
Rate Limiting
Brute Force Protection
Login Security - 2FA & RECAPTCHA

FAQ

You don't need to reinstall Wordfence when upgrading from Free to Premium, Premium to Care, or from Care to Response. You can simply sign into Wordfence.com, purchase an upgrade, and complete the process by installing a new license key (if required) or it will complete automatically.
When you upgrade from Free to any of our paid options for the first time, you will need to install a license key on your site. However, if your free site has been added to Wordfence Central, you can upgrade without having to copy and paste a license key.

You do not need to install a new license key when upgrading from a paid option like Wordfence Premium to another paid option, such as Wordfence Care. The upgrade happens automatically.
The Wordfence plugin is powered by data and services from our servers. This data is delayed by 30 days for our free customers. When you upgrade to a paid option, you receive real-time threat intelligence. In other words, as we roll out protection against the newest threats, we update your firewall rules, malware detection, and IP blocklist as new threats emerge. Please see our product comparison table above for details.
Wordfence Premium is for self-administered websites that need protection against the newest threats via our real-time threat intelligence feed.

Wordfence Care is for busy business owners. In addition to the benefits of Wordfence Premium, we install, configure, and optimize Wordfence for you, along with providing an initial security audit and an annual security audit. Wordfence Care includes continuous security monitoring by our team.

Wordfence Response includes all the benefits of Wordfence Care, with a 1-hour response time, 24 hours a day and 365 days a year. Please see our product comparison table above for more information.
Wordfence Premium, Care, and Response receive the same real-time threat intelligence against the newest threats. Wordfence Premium is for self-administered WordPress sites that want the newest threat protection.

Wordfence Care is designed for busy business owners who need help from our team installing, configuring, optimizing, and monitoring their WordPress security. We provide hands-on support with Wordfence Care and will sign in to your website, with your permission, to provide support.

Wordfence Response provides the benefits of Care, with a 1-hour response time, 24 hours a day and 365 days a year. Wordfence Response is designed for mission-critical websites that cannot afford downtime due to a security issue.

Please see our product comparison table above for more information.
Please reach out to us via email at billing@wordfence.com and we'll be happy to help.
We do a lot more than "virtual patching". This term is used by some vendors to describe updating firewall rules. The paid versions of Wordfence receive real-time updates to firewall rules in addition to real-time updates to malware detection and an IP blocklist. This goes far beyond what most people consider "virtual patching" to be.
This is one of our most basic functions, and while some vendors charge for this service, you can get this feature completely free with the free version of Wordfence.
Wordfence has the largest install base of any dedicated WordPress security product. That means we collect more data on WordPress attacks and have better telemetry on who is attacking WordPress, how they're doing it, and how to block them than anyone else.

Our threat intelligence team uses an internal threat intelligence platform called Wordfence Threat Intelligence, or WTI, to distill that data into the threat intelligence that we deploy to your WordPress website to block attacks and detect indicators of compromise.

Our threat researchers lead the industry in finding the newest and most dangerous WordPress vulnerabilities, protecting your site against them, working confidentially with vendors to fix those vulnerabilities, and then we publish our research.

We also provide the best and most comprehensive service and support available for WordPress to customers who need to secure their production WordPress websites against even the most advanced attacks.

Wordfence includes a range of products from an entry-level free tier to Wordfence Response for mission-critical websites.
Wordfence is headquartered in Seattle in the United States, and we are incorporated in Delaware as Defiant Inc. Our team is approximately 40 people with most of us based in the United States along with several in the United Kingdom, Europe, and Australia.
To get a 1-hour response as a Wordfence Response license holder, sign in to Wordfence Central and visit the page where you view your licenses. Click "Get Help" on the site you need help with. A form will appear where you can request assistance. If you have a valid Response license for this site, you will receive a response within 1 hour from our 24/7/365 incident response team, and your security issue will be resolved within 24 hours. Product issues not related to a security incident may need the assistance of the Customer Support Team and take longer than 24 hours to resolve.

This 1-hour response time applies 365 days per year, including weekends and holidays. The team that monitors this inbox is a 24-hour team of security analysts that actually perform the work if you have experienced a security incident. They are not "first-line support", and they will start work immediately if you have had a security incident and require hands-on support from an expert.
With a Care or Response license, our team will work with you to clean and restore your site quickly. You can see the full details on the types of sites we clean by going to Wordfence Care and Wordfence Response in our Services Subscription Agreement.
Each installation of the Wordfence plugin requires a unique Wordfence license key. For Care and Response licenses, this means that each site would require the same type of license to be eligible for their services.

A Premium license that is valid for a specific production site can also be used on corresponding staging and development sites. For Care and Response licenses, if you have a staging site present, you can add it to the audit for $199. Alternatively, you can remove it until the audit is complete, and then rebuild it from the audited version of the site. At that point, you can protect the staging site with your Wordfence Care or Response license.

Visit our help documentation for additional information on the use of license keys.
Wordfence Care and Wordfence Response licenses cover one site per license. If you have multiple separate sites that are not isolated on your server, due to the potential for cross-infection, they will all need to have the same license type or be isolated to be eligible for Wordfence Care or Response. If you have non-WordPress applications or custom applications present, they may need to be removed.
Wordfence Care and Response licenses can be used on a multisite instance with a maximum of 5 total sites.