

That real-time rule feed is part of what we call the Wordfence Threat Defense Feed. We needed this data to learn about new kinds of attacks, create new rules to protect against them and deploy them in real-time. That was released as Wordfence 6.1.1 in April of last year.Īs part of the WordPress firewall release, we also put business processes in place and created a forensic division in the organization to gather the attack data. We embarked on a 9 month project to create a full-featured rule based firewall for Wordfence. One of our criteria was that it needed to be updated in real-time with new kinds of protection.

So we picked the best features that were also feasible for a two person team to implement and ended up with the list of features above.Īs Wordfence grew and we brought on board senior developers and experienced security professionals, we made the decision in 2015 to add a full-featured rule based firewall to Wordfence. We were a two person company at the time and we wanted to provide something that significantly improved WordPress security. I started writing the first version of Wordfence back in 2011 and I finished it in 2012. Wordfence included several other useful security functions, but it never included a rule based WordPress firewall that filtered attacks as they arrived in real-time.

The very first version of Wordfence improved your WordPress security by providing functions like: For the sake of this post, I’m going to just refer to it as the Wordfence firewall. Wordfence is a firewall that protects the WordPress web application and anything else installed in your WordPress subdirectories. The term WAF is just an acronym that is short for “web application firewall”, which means a firewall that protects web applications. In this post I’m going to describe exactly how the firewall works.įirstly you should know that the Wordfence firewall is also sometimes called the Wordfence WAF. If you’re not a security professional it may not be clear what the Wordfence firewall does or how it works. Since then we have released improvements that make Wordfence faster and better at blocking attacks. In April of 2016 Wordfence launched a full featured WordPress firewall.
