iThemes Solid Security Pro

WordPress sites can face risks from weak login credentials, repeated login attempts, and vulnerable plugins or themes. iThemes Solid Security Pro addresses these areas with login requirements, two-factor authentication, passkeys, and brute force protection. Site owners can set password and authentication requirements for users, while local and network-based IP bans help block malicious login attempts.

The plugin also includes vulnerability scanning and management, a security dashboard with customizable alerts, and notifications about logins from unrecognized devices. Trusted Devices can help control access from familiar devices. For site administration, user activity logging records actions, WP-CLI support provides command-line management, and temporary privilege escalation lets administrators grant outside developers or technicians limited access for a set duration.

Features

• Login security requirements: Set requirements for strong passwords, two-factor authentication, and passkeys to help protect user accounts from weak credentials and unauthorized access.
• Brute force protection: Use local and network-based IP banning to block malicious login attempts, with settings that can be adjusted to your needs.
• Passkeys and two-factor authentication: Strengthen sign-ins with passkeys and two-factor authentication, including biometric login compatibility across supported browsers and devices.
• Vulnerability scanning: Schedule scans to find vulnerable software and manage virtual patches when updates for the affected software are not yet available.
• Trusted device controls: Approve familiar devices for secure sign-ins and receive notifications when users log in from unrecognized devices.
• Temporary admin access: Grant developers or support technicians temporary administrative access without creating new accounts, and set the access duration and permissions.
• Activity logs and WP-CLI: Review detailed records of user actions and manage security tasks through command-line tools designed for developers.

Best for

• WordPress business websites
• WordPress store administrators
• Developers managing client sites