by
ironfang
0 (0 reviews)
Ironfang Security
Security configuration checks for WordPress, with clear evidence and guidance. Checks run on your site and do not send information to Ironfang.
Ironfang Security ranks #49,322 among WordPress.org plugins with 0+ active installations, is #3,855 of 5,058 in the Security category, and was last updated Oct 30, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Compatible with WP 7.1.4
v1.2.0
Current Version v1.2.0
Updated 2 days ago
Last Update on 30 Oct, 2026
Refreshed 2 days ago
Last Refreshed on
#3,855 of 5,058 in Security
Actively maintained
Rank
#49,322
—
No change
Active Installs
0+
—
No change
KW Avg Position
N/A
—
No change
Downloads
91
+2 today
Support Resolved
0%
—
No change
Rating
0%
Review 0 out of 5
0
(0 reviews)
Next Milestone 10
0+
10+
21,754
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 5 more installs to reach 10+
Rank Changes
Current
#49,322
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
0.0
0 reviews
Overall
0%
5
0
(0%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.2.0
- Last Updated
- Oct 30, 2026
- Requires WP
- 6.8+
- Tested Up To
- 7.1.4
- PHP Version
- 8.1 or higher
- Author
- ironfang
Support & Rating
- Rating
- ☆ ☆ ☆ ☆ ☆ 0
- Reviews
- 0
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
6K+ installs
#2,757
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#1,015
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#8
Wordfence Security – Firewall, Malware Scan, and Login Security
5M+ installs
#11
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
3M+ installs
#18
Hostinger Tools
3M+ installs
#20
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
WP Super Cache
1M+ installs
#36
Frequently Asked Questions
Common questions about Ironfang Security
No. It is not a firewall and does not block traffic. It is intended to identify configuration risks so you can act on them.
A check reports that when it cannot observe enough to give an answer: for example when WordPress has not stored recent update information, or when a scan started from WP-CLI cannot see the web server's PHP settings. Such a result is never counted as passed. Each one explains what is missing and what to do.
WordPress 6.8, 7.0 and 7.1, with PHP 8.1 to 8.5 (not every combination); Apache and nginx; a site behind an HTTPS reverse proxy; a site in a subdirectory; read-only site files; a Redis object cache; and alongside WooCommerce, WP Super Cache and Wordfence. Other set-ups have not been tested.
Email hello@ironfang.com. If a check fails to run, include the reason it shows.
Email security@ironfang.com, privately, not in the support forum. Include the plugin, WordPress and PHP versions, steps to reproduce and the access an attacker needs. We acknowledge reports within 3 business days and give an assessment within 7 days. We aim to fix critical and high severity issues within 14 days of confirming them, and others within 90 days. We coordinate disclosure with you, publish an advisory once the fix is released, and credit you unless you prefer not to be. There is no paid bug bounty.
Yes, if you ask it to. On the "Dashboard file editor" check's page, choose "Turn off the file editors". Nobody, administrators included, can then edit theme or plugin code from the dashboard, as with DISALLOW_FILE_EDIT. Installing and updating plugins and themes keeps working. The check runs again to confirm it, and you can turn the editors back on there. It works only while the plugin is active: deactivating or deleting the plugin turns the editors back on. For a permanent change, add DISALLOW_FILE_EDIT to wp-config.php. If something already turns the editors off, the plugin says so and does not offer the change. From WP-CLI, run wp ironfang-security hardening apply file_editor --user=<administrator>, or undo to turn them back on. wp ironfang-security hardening list shows the current state, and log shows who changed it and when.
Deactivating stops any running scan and keeps the plugin's stored data. If you turned the file editors off with the plugin, they turn back on while it is deactivated, and off again if you reactivate it. Deleting the plugin removes the data it created and nothing else. To keep the results, download a report from Ironfang Security › Settings before deleting it; a deactivated plugin cannot make a report, so reactivate it first if needed.
