- IP rangefrom the bot’s published address blocks
- Reverse DNSforward-confirmed, not just a claim
- ASN ownershipthe network truly belongs to the operator
Real bot verified · fake bot blocked
VMP arcade
Pick your fight
4Games
0Top score
0Best stack
Interactive — stack the bytes
Byte stack
Height 0
Best —
Interactive · 3D parkour
City Runner
Free-run the city rooftops to the finish line. A 3D engine and character (~4 MB) load only when you press play.
Could not load the 3D engine. Check your connection and try again.
Interactive — break the wall
Firewall breaker
Level 1
Score 0
Best —
Live threat intelligence
The numbers behind your protection
Every VMP-protected site draws on the same threat-intelligence engine. Here is what it tracks and blocks, updated continuously.
0
Total Attacks Blocked
Malicious requests our firewall has stopped before they reached a protected site.
0
Active Firewall Rules
Live rules working in real time to block attacks the moment they happen.
0
Malware Signatures
Known malware fingerprints we match against, so infections get caught on sight.
0
Threat Intel IPs
Addresses on our threat watchlist, refreshed continuously from live attack data.
0
High-Risk Threat IPs
Repeat-offender IPs blocked automatically before they can reach your login.
0
WordPress Vulnerabilities
Plugin and core weaknesses we track and shield, so a known hole cannot be used on you.
Works seamlessly with your WordPress stack
WordPress
WooCommerce
Cloudflare
Apache & NGINX
PHP 7.4–8.3
Available free on WordPress.org — installs on any self-hosted WordPress site, whatever your host, theme, or page builder.
Start free. Upgrade when you want real-time defense.
VMP™ Security
FREE
Core firewall and malware scanning, free on WordPress.org. The same detection engine as Premium — just without the real-time updates.
$0/forever
Get the free plugin
VMP™ Security
PREMIUM
Real-time updates in threat defense rules. Real-time Firewall and Malware Scan updates protect you. Country Blocking, and direct access to our WordPress security engineers.
$149/year
Get Premium
New
Custom bot allowlist
Trust the real bots. Catch the fakes.
Allowlist the bots you trust — start from a built-in preset list of known crawlers, or add your own in a few clicks. VMP™ Security then verifies each one by IP range, reverse DNS, or ASN — any one is enough to confirm it, so genuine bots pass and spoofed ones get blocked. A level of control few WordPress security plugins offer.
Hover or tap to compare
VMP™ verification
User-Agent only
A request says User-Agent: Googlebot. Most plugins believe it — but anyone can
fake that string in a single line.
Impostor walks straight in
What happens to each request
How VMP protects you
Three layers, working together – around the clock
Real-time firewall
Blocks SQL injection, XSS, brute-force, malicious bots, and known-bad IPs before they reach your site. Rules update continuously from our threat network – no manual patching.
Malware scan & removal
Deep scanning against an always-current signature set finds infected files, backdoors, and injected spam – then helps you clean and restore them.
24/7 monitoring & intel
Every protected site feeds shared threat intelligence, so a new attack seen on one site hardens every other. Vulnerability alerts reach you the moment they matter.
New v2.3.9 · Jul 30, 2026
Smarter blocks that expire and forgive
Automated IP blocks are no longer permanent -- offenders get an escalating, time-limited block (1 hour up to 7 days) and their reputation decays over about 30 days.
New v2.3.9 · Jul 30, 2026
The firewall now judges behavior, not just single requests
It scores how each IP behaves -- repeated 404s and path-scanning patterns -- and acts on the pattern, not a single request. Allowlisted IPs and trusted bots stay exempt.
New v2.3.9 · Jul 30, 2026
Catch reconnaissance before it becomes an attack
An opt-in signature set spots reconnaissance and probe requests -- scans for exposed .env files, backups, and known-vulnerable paths -- and blocks them before they reach WordPress.
22 probe signatures
Performance
Built to be invisible.
It won’t slow your site down.
The heavy lifting – malware analysis and threat correlation – runs in the VMP cloud, not on your server. The plugin on your site stays thin: it forwards data, applies decisions, and gets out of the way.
Cloud-offloaded scanning. Intensive analysis happens on our infrastructure, sparing your host’s CPU and memory.
Cached, lightweight rules. Firewall rules are served pre-compiled and cached, so request checks stay fast.
Async & scheduled. Scans run in the background on a schedule – never blocking a page load for your visitors.
CDN- and cache-friendly. Works alongside Cloudflare and your caching plugin without fighting them.
Search rankings
VMP protects your SEO – it doesn’t risk it
The fastest way to lose rankings isn’t a security plugin – it’s getting hacked. VMP prevents the things Google actually penalizes.
What actually hurts SEO
- Malware that gets your site flagged on Google Safe Browsing
- Hacked spam pages and pharma/cloaked links injected into your content
- Defacement and redirects that destroy trust signals
- Downtime from attacks that interrupts crawling and indexing
What VMP does about it
- Blocks and removes malware before a blocklisting can happen
- Stops the injections that create hacked spam in the first place
- Adds no markup, redirects, or cloaking that could harm crawling
- Verifies and allows legitimate crawlers like Googlebot – never blocks them
VMP™ Portal
Every site you protect, in one dashboard
Run one site or a hundred — Portal puts every install’s security in a single view. Watch events as they happen, manage protection remotely, and check the health of each domain and server — whether it runs VMP™ Firewall or not. Free to start.
Breaking news from our blog
Questions, answered
Everything you’re wondering before you install
Will VMP slow down my website?
No. The intensive work – malware analysis and threat correlation – runs in the VMP cloud, not on your server. The plugin stays thin: it forwards data, applies decisions, and serves cached, pre-compiled firewall rules. Scans run in the background on a schedule, so they never block a page load for your visitors.
Will VMP affect my SEO or Google rankings?
It protects them. VMP adds no markup, redirects, or cloaking that could harm crawling, and it verifies and allows legitimate crawlers like Googlebot rather than blocking them. What it prevents – malware blocklisting, hacked spam, defacement, and downtime – are the things that actually sink rankings.
Do I need technical skills to set it up?
No. Install the free plugin from WordPress.org, activate it, and protection starts with sensible defaults – most sites are protected in a couple of minutes. Start with the free plugin →
What’s the difference between Free and Premium?
Free gives you the core firewall and malware scanner. Premium adds real-time firewall and signature updates, country blocking, and direct access to our WordPress security engineers. Compare all features →
Does it work with WooCommerce, my host, and my CDN?
Yes. VMP installs on any self-hosted WordPress site regardless of host, theme, or page builder, and works alongside WooCommerce, Cloudflare, and your caching plugin (PHP 7.4–8.3) without fighting them.
My site is already hacked – can VMP help?
Yes. VMP’s scanner finds infected files, backdoors, and injected spam so you can clean and restore your site, then keeps the firewall watching to stop reinfection. If you need urgent help, reach our team →
Is my data private?
VMP sends only the data needed to detect threats – things like file hashes and request metadata – to its cloud for analysis, and applies the results on your site. See our privacy policy for exactly what’s collected and how long it’s kept.
Will it conflict with my caching or other security plugins?
VMP is built to coexist with caching and CDN layers. Running two full firewalls isn’t recommended – they can double-process requests – but VMP works cleanly alongside performance and backup plugins.
Get protected
Secure your WordPress site today
Start free in two minutes, or unlock real-time defense and expert support with Premium.
Get the free plugin
Installs in 2 minutes
Free plan forever
No measurable slowdown