WordSec
All-in-one WordPress security: WAF, scanner, 2FA & more.
A startup from Turkey that is founded by Ahmet.
All-in-one WordPress security: WAF, scanner, 2FA & more.
A startup from Turkey that is founded by Ahmet.
This page is designed to help you find out whether WordSec is good and if it is the right choice for you.
WordSec is a complete WordPress security suite. The firewall blocks exploits, malicious bots and brute-force attempts with ready-made presets and custom rules. The malware scanner checks file integrity and repairs infected files in one click. Login security adds 2FA, captcha and lockouts; block attackers by IP or country and watch your traffic live. CVE alerts cover plugins and themes, every action lands in the audit log, and alarms reach you by email, Telegram or Slack. Eight modules replace eight separate plugins, and everything runs locally on your own server.
Listed in
Firewall
Inspect every request, write your own rules, and harden WordPress with one-click toggles. - Multi-condition custom rule builder with regex and wildcard matching - Built-in rules across the major attack categories (SQL injection, XSS, path traversal, PHP and command injection, and more) - WAF learning and active modes, bot blocking and security headers - 25+ one-click hardening toggles for wp-config access, author enumeration, REST API and more - Optional Extended Protection: pre-WordPress request inspection via an auto_prepend_file bootstrap - Endpoint rate limiting, XML-RPC protection and detailed firewall logs
Scanner
A seven-stage scanning system that examines files, the database and scheduled tasks. - Malware detection rules (synced from the WordSec service) based content scanning - WordPress core, plugin and theme file-integrity verification (via the WordPress.org API) - Scheduled scans with batch processing to avoid timeouts - One-click quarantine and restore, with complete scan history
Login Security
- Role-based two-factor authentication (RFC 6238 TOTP), no external library required - Three CAPTCHA providers (reCAPTCHA, hCaptcha, Cloudflare Turnstile) plus a built-in math CAPTCHA - Brute-force protection with progressive lockout and honeypot traps - Leaked-password checking (Have I Been Pwned, k-anonymity) and Argon2 password enforcement - Session management and a custom login page designer
Live Traffic
- Real-time request logging (IP, URI, method, status, response time) - Safe request and response inspection with automatic bot detection - Exclusion filtering by role, IP, country or URI, with CSV export
Blocking
- Country and continent allow or block lists - Single IP and CIDR range blocking, temporary or permanent, with allow-list support - Automatic abuse protection and endpoint rate limiting - Custom block messages
Supply Chain
- Reputation scoring for every installed plugin and theme - Known-vulnerability alerts (data from the WordSec service) for core, plugins, themes and PHP - Abandoned plugin and theme detection - Update-integrity verification with automatic backups and a full SBOM inventory
Audit Log
- Complete activity tracking across 11 object types and 14 actions - Content, plugin, theme and setting changes - Fast filtering and one-click export
Alarm
- 36 event types across six categories - Delivery by Email, Telegram or Slack - Basic, Advanced and Full alert modes
We have collected here some useful links to help you find out if WordSec is good.
Check the traffic stats of WordSec on SimilarWeb. The key metrics to look for are: monthly visits, average visit duration, pages per visit, and traffic by country. Moreoever, check the traffic sources. For example "Direct" traffic is a good sign.
Check the "Domain Rating" of WordSec on Ahrefs. The domain rating is a measure of the strength of a website's backlink profile on a scale from 0 to 100. It shows the strength of WordSec's backlink profile compared to the other websites. In most cases a domain rating of 60+ is considered good and 70+ is considered very good.
Check the "Domain Authority" of WordSec on MOZ. A website's domain authority (DA) is a search engine ranking score that predicts how well a website will rank on search engine result pages (SERPs). It is based on a 100-point logarithmic scale, with higher scores corresponding to a greater likelihood of ranking. This is another useful metric to check if a website is good.
The latest comments about WordSec on Reddit. This can help you find out how popualr the product is and what people think about it.
Do you know an article comparing WordSec to other products?
Suggest a link to a post with product alternatives.
Is WordSec good? This is an informative page that will help you find out. Moreover, you can review and discuss WordSec here. The primary details have been verified within the last quarter. So they could be considered up to date. If you think we are missing something, please use the means on this page to comment or suggest changes. All reviews and comments are highly encouranged and appreciated as they help everyone in the community to make an informed choice. Please always be kind and objective when evaluating a product and sharing your opinion.
