by Cory Marsh 5 (8 reviews)

BitFire Security - Firewall, Malware Scanner, Bot Blocker, Login Protection

Name: BitFire Security - Firewall, Malware Scanner, Bot Blocker, Login Protection
Rating: 5.0 (8 reviews)
Author: Cory Marsh

Free WordPress firewall, bot blocking, login protection, and malware scanning. See suspicious traffic and investigate threats from your dashboard.

BitFire Security ranks #10,320 among WordPress.org plugins with 300+ active installations, is #640 of 4,547 in the Security category, a 5/5 rating from 8 reviews, and was last updated Sep 19, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1

v5.2.1 Current Version v5.2.1

Updated 1 day ago Last Update on 19 Sep, 2026

Refreshed 6 hours ago Last Refreshed on

#640 of 4,547 in Security Top 25% by installs Downloads +189.7% this week Actively maintained

View on WordPress.org

Rank

#10,320

+19 this week

Active Installs

300+

-20.8%

KW Avg Position

24.8 better

Downloads

13.9K

+199 today

Support Resolved

100%

— No change

Rating

100%

Review 5 out of 5

5 (8 reviews)

Next Milestone 400

Total Progress 76%

300+ 400+

304

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 24 more installs to reach 400+

Rank Changes

Current #10,320

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

5.0

8 reviews

Overall 100%

8 (100%)

0 (0%)

Support Threads Overview

Resolved

Unresolved

Total Threads

Resolved

Unresolved

100%

Resolution Rate

Security History

Source: WPVulnerability

2 known vulnerabilities on record · 2 in the last 24 months · checked 1 month ago

Jun 23, 2026

BitFire Security – Firewall, Malware Scanner, Bot Blocker, Login Protection [bitfire] < 5.0.4

CVE-2026-56035 · Fixed in v5.0.4
Aug 1, 2025

BitFire Security – Firewall, Malware Scanner, Bot Blocker, Login Protection [bitfire] < 4.6

CVE-2025-6722 · Fixed in v4.6

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 5.2.1
Last Updated: Sep 19, 2026
Requires WP: 6.1+
Tested Up To: 7.1
PHP Version: 7.4 or higher
Author: Cory Marsh

Support & Rating

Rating: ★ ★ ★ ★ ★ 5
Reviews: 8
Support Threads: 1
Resolved: 100%

Keywords

WAF bot blocker firewall malware scanner security

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,759

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

Akismet Anti-spam: Spam Protection

5M+ installs

Wordfence Security – Firewall, Malware Scan, and Login Security

5M+ installs

#11

Really Simple Security - Simple and Performant Security (formerly Really Simple SSL)

Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention

View all Security-and-spam-protection plugins

TL;DR

AI summary of the plugin's readme

BitFire is for WordPress site owners who want protection from hackers, bots, and malware without becoming security experts themselves. It solves this by blocking threats before they reach the site, rather than cleaning up infections after the fact, and pairs the plugin with real human support.

Blocks spam bots and scrapers
Scans files for malware
Real-time traffic monitoring
Login page brute-force protection
Bot vs human visitor detection
Blocks known malicious IPs
Runtime Application Self Protection (RASP)
AI-powered malware analysis

Frequently Asked Questions

Common questions about BitFire Security - Firewall, Malware Scanner, Bot Blocker, Login Protection

Yes. BitFire Free includes the web application firewall, bot blocking, login protection, manual malware scanning, traffic monitoring, and 12 AI analysis credits for the lifetime of the domain. Pro adds Always-On Protection, RASP, Threat Hunter, scheduled malware scanning, and an expanded allowance of 1,000 AI analysis credits.

Free includes the firewall as a WordPress plugin. Pro Always-On Protection loads BitFire before WordPress, extending inspection to PHP requests that bypass normal plugin loading. It puts your security layer earlier in the path of an attack.

The firewall evaluates incoming requests. RASP checks whether selected operations inside the application are authorized, such as writing PHP files or creating an administrator account. They are complementary layers. An exploit that is unfamiliar to request filtering may still be blocked when it attempts an unauthorized operation covered by RASP.

Yes. Pro runtime protection can block an unknown exploit when it attempts an unauthorized PHP file write, administrator privilege change, or administrator impersonation. It checks authorization rather than waiting for a signature that identifies the specific exploit.

Yes. Review blocked requests in your dashboard, see why they were flagged, and approve legitimate traffic. Manage exceptions for your forms, store, and integrations from the same place you investigate suspicious activity.

BitFire provides configurable bot policies. You can allow a bot, authenticate it using source-network information, or block it. Review your crawler policies during setup so the search engines and services your site relies on have the access they need.

Yes. Keep your CDN and add protection inside WordPress. Pro RASP adds checks on unauthorized file writes and administrator changes, complementing the filtering at your site's edge.

Start with a malware scan to find suspicious files. Then use Pro Threat Hunter to investigate what could bring the infection back: scheduled tasks, hidden administrator access, database content, startup files, and background processes. Need expert help? Talk to BitFire about cleanup and incident response.

Submit suspicious code to BitFire's AI analysis service for help understanding what it does and why it was flagged. Use the assessment alongside scan evidence to decide what to allow, repair, or remove. Free includes 12 AI analysis credits for the lifetime of the domain. Pro includes 1,000 credits. See the malware scanning guide for workflow and usage details.

Pro is billed annually, with discounts for multiple sites. Optional paid Managed Protection and Priority Support packages add hands-on help. Find your plan and current pricing.