Other Plugins with Wordfence

Hello Rickard,
I don’t think you necessarily need any additional security plugin. Are you familiar with all the features of Wordfence? I would suggest you go through all the settings and configure your site with Wordfence according to your needs. If after that you feel Wordfence is lacking some feature you can make a feature request here in the support forum and/or you can choose to install an extra plugin.

Hi Rickard, I’ve got years of experience with this and want to echo wfasa, I’d try just running one fully features security plugin and spending time learning about it and configuring it carefully. Running a bunch of the same purpose plugins will cause you a world of hurt. The only extra security plugin I run with Wordfence is WPS Hide Login.

Delete all unused or de-activated plugins, run a minimum of plugins, get all plugins from WordPress repository, and only run plugins that announce they are compatible with your version of WordPress. Plugins will hurt you if you’re not careful. They’re a total mess and definitely the achilles heel of WordPress. I’ve heard more than one person report that their worst security compromises have been caused by security plugins! So be careful.

MTN

Thank you for your replay.
It is difficult to know if Wordfence is using same security that Block Bad Queries do or WordPress Firewall 2. I just need to know if Wordfence is good enough or if it is good to use something more?

/Rickard Svard

Hello Svard,
Wordfence has similar functionality to “Block Bad Queries” but not identical. Wordfence will block malicious URLs but it’s not using the exact same method of doing it. I can’t tell you which one will work best for you or if you need both. It depends on how you work with security, which type of traffic you want to restrict and so on.

“WordPress Firewall 2” has not been updated for 5 years so unless you know exactly what code it contains I would not recommend using it.

Svard, you asked. So, in my opinion, Wordfence is good enough (provided you study every setting like you are studying to become a nuclear physicist), though any WordPress security plugin should be combined with hands-on do-it-yourself tweaks of .htaccess files, as well as proper settings of your server software. On top of that, you should have a backup system that is redundant and that you feel confident could restore your entire site if you deleted everything. Running a reasonably secure WordPress site is not trivial. That’s why hackers are making a ton of money.

MTN

Just to chime in here about Block Bad Queries (BBQ), it does one thing and does it well: protects your site against malicious requests. BBQ uses very few lines of code, requires absolutely no configuration (or time studying a bunch of settings), and it is *blazing fast*. Plus it works 100% fine with “Wordfence” and other plugins, so you can run them both at the same time. Full disclosure I am the lead developer of BBQ, just want to share the info.

That you have tested it and it works with Wordfence is good news. Thanks Jeff!

Jeff is the man. Check his linked website. Nice to see him chiming in here. MTN