Solid Security Pro (formerly iThemes Security Pro) is a comprehensive WordPress security plugin designed to protect websites against unauthorized access, malware, brute-force attacks, and plugin vulnerabilities. It automates site hardening and threat prevention without requiring complex manual configurations.
Key Features
- Patchstack Powered Firewall & Virtual Patching: Automatically applies security rules to patch known vulnerabilities in plugins and themes before official patches are updated.
- Advanced Authentication & Passwordless Login: Supports Passkeys, biometrics, reCAPTCHA, and multi-factor authentication (TOTP apps, email, backup codes).
- Brute-Force Protection: Restricts login attempts, bans aggressive IP addresses, and allows hiding or customizing the WordPress admin login URL.
- Site & Vulnerability Scanner: Performs automated scans for core, theme, and plugin vulnerabilities, detecting file modifications and malware.
- Trusted Devices Management: Identifies unrecognized devices attempting admin login and restricts access accordingly.
- User Activity Logs & Security Dashboard: Tracks real-time security events, monitor user behavior, and enforce strong password policies across roles.