by securewpteam
5 (4 reviews)
SiteFort - Advanced Security, Firewall & Malware Scanner
Secure WordPress with firewall protection, 2FA login security, hardening, vulnerability scanning, bot blocking, and fast cloud-assisted malware scans.
Compatible with WP 7
v1.6.3
Current Version v1.6.3
Updated 4 weeks ago
Last Update on 21 Jun, 2026
Refreshed 10 hours ago
Last Refreshed on
Rank
#22,410
—
No change
Active Installs
10+
—
No change
KW Avg Position
84.3
+5.3 better
Downloads
1.7K
+4 today
Support Resolved
0%
—
No change
Rating
100%
Review 5 out of 5
5
(4 reviews)
Next Milestone 20
10+
20+
11,781
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 4 more installs to reach 20+
Rank Changes
Current
#22,410
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
5.0
4 reviews
Overall
100%
5
4
(100%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Tracked Keywords
Showing 4 of 4| Keyword | Position | Change | Type | Updated |
|---|---|---|---|---|
| malware scanner | 40 | — | Tag | 2 days ago |
| 2FA | 84 | — | Tag | 2 days ago |
| firewall | 102 | — | Tag | 2 days ago |
| vulnerability | 111 | — | Tag | 2 days ago |
Unlock Keyword Analytics
Track keyword rankings, search positions, and discover new ranking opportunities with a Pro subscription.
- Full keyword position tracking
- Historical ranking data
- Competitor keyword analysis
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.6.3
- Last Updated
- Jun 21, 2026
- Requires WP
- 6.0+
- Tested Up To
- 7
- PHP Version
- 7.4 or higher
- Author
- securewpteam
Support & Rating
- Rating
- ★ ★ ★ ★ ★ 5
- Reviews
- 4
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
7K+ installs
#2,742
Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits
30K+ installs
#989
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#7
Wordfence Security - Firewall, Malware Scan, and Login Security
5M+ installs
#11
Frequently Asked Questions
Common questions about SiteFort - Advanced Security, Firewall & Malware Scanner
Yes. You can explore the full SiteFort security dashboard in a live, disposable WordPress demo with no signup or install required. Launch it at https://demo.securewp.net/. The demo opens a private WordPress site with SiteFort preinstalled, drops you straight into wp-admin to try the scanner, firewall, login security, and hardening, and resets automatically when the session ends.
SiteFort adds practical protection layers for WordPress: firewall rules, bad-bot blocking, country controls, login security, 2FA, CAPTCHA, password protection, vulnerability checks, security hardening, audit logs, and cloud-assisted malware scanning. It is built to help you close weak points, reduce automated abuse, detect malware, and monitor security risks from your WordPress dashboard.
SiteFort checks for malware, backdoors, web shells, malicious PHP scripts, injected scripts, SEO spam, suspicious redirects, exposed sensitive files, hidden administrator risks, weak or breached passwords, vulnerable plugins and themes, reputation issues, unsafe database/content indicators, and weak hardening rules.
SiteFort uses hash-first file checks so known files can be resolved quickly. Only unknown or suspicious files may be sent for deeper cloud analysis when needed. Database and content checks run on your own website, and scan results are cached where possible so unchanged files do not need the same work again.
No. Database and content safety checks run on your own website. Your database content never leaves your site. For file scanning, SiteFort sends file hashes first. Only files that cannot be verified by hash alone may be uploaded for deeper malware analysis. If wp-config.php requires analysis, sensitive configuration values are removed before upload.
Yes. SiteFort includes firewall rules for IP addresses, CIDR ranges, countries, bots, crawlers, user agents, rate limits, suspicious requests, and bots looking for exposed files or weak points. SiteFort also supports community threat intelligence and optional Cloudflare Sync for supported firewall rules.
Yes. Country blocking supports both block-selected and allow-only modes. Country detection can use Cloudflare country data for proxied sites, Cloudflare integration when configured in SiteFort, or a local MaxMind GeoLite2 database when a free MaxMind license is configured. SiteFort can also sync supported IP, country, and user-agent firewall rules to Cloudflare when the domain is proxied through Cloudflare and a scoped API token is configured.
SiteFort’s easy bot filter policy is designed to block unwanted automation while allowing trusted search engines, social previews, and major crawlers. You can choose Basic, Balanced, or Maximum protection depending on how aggressively you want to filter bots, scraping tools, automated scripts, and traffic looking for vulnerable files. Google and Bing crawlers are confirmed by reverse DNS, so genuine search bots are always allowed while requests that fake their identity can be blocked.
Yes. SiteFort includes an optional control to block AI training crawlers that collect site content for model training, such as GPTBot, ClaudeBot, CCBot, and Bytespider. AI assistants that fetch a page on a visitor's request, and AI search crawlers that can send referral traffic, stay allowed, so you keep useful AI visibility while limiting bulk content scraping.
Yes. SiteFort includes login security controls such as role-based 2FA, authenticator app codes, email codes, recovery codes, brute-force lockouts, CAPTCHA, custom login URL, generic login errors, weak-password detection, role-based strong-password enforcement, breached-password checks, and password expiration policies.