Security maintenance tools for WordPress

Update manager

Outdated plugins are the top infection route, but blind auto-updates break sites. The update manager gives you the middle path: per-type update policies for plugins, themes and core, update windows on the days and hours you choose, optional delay days before a new release is applied, freeze periods for launch weeks, email notifications, and an optional maintenance mode while updates run.

Settings backup, test mode and migration

Your whole security configuration exports as JSON and imports with a dry-run mode that validates before it touches anything. Move a proven setup between sites in a minute. Test mode simulates blocks for the roles you pick instead of enforcing them, logging what would have happened, so you can trial aggressive settings without locking anyone out.

Coming from Wordfence Login Security? The one-click migration moves users' two-factor secrets and settings across so nobody has to re-enroll their authenticator app.

• JSON export/import with validation and dry-run
• Test mode: simulate, log, then enforce
• One-click migration from Wordfence Login Security
• Site Health panel: server, database, filesystem, media, plugin and theme diagnostics
• Security key rotation with scheduling (own page)

Free today, deeper with Pro

Pro adds database cleanup with retention policies and comment management on top of the free toolkit.