Basic — included
Active on every site hosted with us. Blocks known attackers and the most common attacks on websites. Nothing to install, nothing to order, no extra cost.
If the site is hosted with us, it is already protected
Every website on our hosting gets the baseline protection automatically, without anyone having to install or order anything. If a site needs more, there are two stronger levels.
Three levels
The difference lies in how broad the protection is, how quickly it reacts, and how much we do about it on your behalf.
Premium
A broader rule set and faster threat data updates. The site is connected to WF Central, where we see what is being stopped and can step in and adjust.
Ultra
Everything in Premium, plus recurring security scans, monitoring of vulnerabilities in themes and plugins, and us managing the protection for you on an ongoing basis.
WF Central — our security operations centre
WF Central is the system we work in ourselves. It shows blocks from every connected site in real time, with which rule triggered, what the attacker was trying to do and how serious it is judged to be.
For every blocked address an assessment is fetched: threat level, whether the address belongs to a data centre or an ordinary operator, which network it sits in, and how many others have reported it. That is the evidence behind deciding whether a block should apply to one site or all of them.
- Blocks in real time, per site or across all of them
- Which rule matched and what the attempt was after
- An assessment of the attacker's address with threat level and network details
- A global block list applying to every connected site
- Whitelisting when something is stopped by mistake
- Alerts when something deviates
Vulnerabilities, not just attacks
Blocking attacks is half the work. The other half is knowing which weaknesses are there to be attacked in the first place.
On Ultra the site is scanned repeatedly. Themes, plugins and the core installation are compared against known vulnerabilities, referencing CVE identifiers where they exist, and rated by how serious and how exploitable the weakness is.
The result is a list you can work through in priority order, rather than a feeling that something ought to be done.
What each level includes
| Basic | Premium | Ultra | |
|---|---|---|---|
| Blocking of known attackers | ✓ | ✓ | ✓ |
| Protection against common web attacks | ✓ | ✓ | ✓ |
| Brute-force protection for logins | ✓ | ✓ | ✓ |
| Extended rule set | – | ✓ | ✓ |
| Faster threat data updates | – | ✓ | ✓ |
| Connected to WF Central | – | ✓ | ✓ |
| We watch and act for you | – | As needed | Ongoing |
| Recurring security scans | – | – | ✓ |
| Vulnerability monitoring with CVE references | – | – | ✓ |
| Cost | Included | Optional | Optional |
Hosting your site somewhere else?
Then the WordPress plugin is the way in. It gives the same site-level protection wherever the site is hosted, and draws on the same licences as the other products.
Want to know which level fits?
Tell us what the site is used for and how sensitive it is, and we will suggest a level. We would rather sell the right thing than more.