I haven't had any issues with the free version. I would give it a shot and see what you think. Other things to do is to harden WordPress by hiding the admin login and disabling things like xmlrpc since it is rarely needed. Plugins like WPS Hide Login are great and this is something you can use/tweak to add to your .htaccess file:. Source: about 1 year ago

WordPress with a Web Application Firewall (WAF) is super secure. I use the free version of Ninja Firewall. Https://wordpress.org/plugins/ninjafirewall/. Source: about 1 year ago

We provide a competing plugin, but in our testing, the best free firewall option has been NinjaFirewall. It has been shown to provide more protection than Wordfence Security without creating the same performance penalty. Source: over 1 year ago

While what you are saying is partially true with Wordfence, it isn't true for WordPress firewall plugins that are well developed. With both NinjaFirewalland our Plugin Vulnerabilities Firewall provide protection that Cloudflare can't provide, as they hook into WordPress and take actions based on information that Cloudflare and other security systems that don't hook in to it, don't have access to. Source: about 2 years ago

If someone wants a firewall plugin, then our testing has shown that the best free option is NinjaFirewall and our Plugin Vulnerabilities Firewall is the best overall. Source: about 2 years ago

Wordfence Security actually does provide some protection against those types of vulnerabilities. The problem is that, as our testing has shown, it provides much less than the NinjaFirewall plguin and our Plugin Vulnerabilities Firewall plugin. That might have to do with them selling access to firewall rules, as providing better general protection would reduce the need for firewall rules, but it would provide much... Source: about 2 years ago