A firewall blocks the attack.BitFire blocks the damage.

BitFire Pro stops exploited plugins from changing your files, database, or administrator accounts - even when the vulnerability is brand new.

Protect my site free

Typical setup: 5 minutes · No credit card required · View Pro runtime controls

Protection at every layer

Application Filesystem Database

See what is protected before you enforce it.

BitFire Pro checks protected file, database, and administrator operations inside WordPress, helping stop plugin and theme vulnerabilities before they become site damage.

Explorez les contrôles d'exécution BitFire Pro →
BitFire · Protection coverage
  1. Scores de couverture summarize assessed configuration controls.
  2. Prointerrupteurs de détection show which controls are enabled.
Développer la capture d'écran

Filter requests. Enforce outcomes.

Start with the edge. Add runtime controls where compromise actually happens.

Opérations Protect avec Pro

Check authorization for protected PHP writes, database operations, and administrator changes. Coverage depends on enabled controls.

Examiner les contrôles d'exécution →

Trouver un code suspect

Behavioral scanning flags potentially malicious code. AI-assisted analysis helps you review what to allow, repair, or remove. A flag is not proof of infection, and AI analysis can be mistaken. Review evidence and back up files before changes.

Comprendre pourquoi il a été signalé →
BitFire · Request activity

Faites glisser ou faites défiler l'image ; développez pour obtenir des détails en taille réelle.

Comprendre le trafic de votre siteSearch blocked and allowed requests to see what reached your site, what BitFire stopped, and why.
  1. Filtrer les demandes to narrow the activity you review.
  2. Lire la décision alongside the request and rule.
  3. Vérifiez la source alongside client and network information.
Développer la capture d'écran

Real vulnerabilities, protected.

BitFire helps stop real WordPress attack paths before they become file changes, database damage, or administrator takeover.

Recent security vulnerabilities: 0-day protected
Protected by BitFire
Composant CVE and install base CNA CVSS 3.1 Contrôles BitFire évalués
CleanTalk Anti-Spam CVE-2026-1490 Install base: 200000 9.8 · Critique Secure with BitFire PRO RASP + BitFire Bot Protection

BitFire stops CVE-2026-1490 twice: FREE Bot Protection blocks the scripted exploit delivery and BitFire PRO RASP blocks the unauthorized plugin install.
WP User Manager CVE-2025-13320 Install base: 10000 6.8 · Moyen Protected by BitFire Bot Protection

BitFire FREE Bot Protection stops the authenticated profile-form exploit behind WP User Manager CVE-2025-13320 before it can delete server files.
CleanTalk Anti-Spam CVE-2024-10542 Install base: 200000 9.8 · Critique Secure with BitFire PRO RASP

BitFire PRO RASP blocks CVE-2024-10542, an unauthenticated plugin-installation flaw in CleanTalk Anti-Spam, at runtime. Update to 6.44 and investigate.
Showing 3 of 52 protection records. Index rebuilt Octobre 9, 2026. Official CVE records provide vulnerability details for each BitFire protection assessment. No reproduced exploit test is claimed here. Afficher tous les enregistrements de protection
Trond André BitFire customer
“there is only one thing to say: It works! And this is the only firewall [to] realy do the job. In the pro version you [will] get all you need.”
Extrait de l'avis du client.
Mark Sullivan BitFire customer
“The team at BitFire walked us through the entire install process, removed all the malware, and fully protected all our sites. I’ll never run a site without it again.”

Start free. Upgrade when runtime enforcement matters.

Free covers the baseline. Pro is recommended for commercial sites that need protected file, database, and administrator operations checked inside WordPress.

Gratuit

Essential firewall, bot, and malware scan tools for sites that need a simple protection baseline.

  • Blocage/vérification du pare-feu et des robots
  • Analyse manuelle des logiciels malveillants
  • 12 crédits IA pour la durée de vie du domaine
  • Self-managed setup with a fast path to protection
Protect my site free

Pro

Recommended for commercial and business-critical sites that need runtime enforcement, scheduled scanning, and deeper security visibility.

  • Pare-feu et protection contre les robots, plus Always-On Protection
  • Protection des fichiers d'exécution, des bases de données et des administrateurs
  • Analyses planifiées des logiciels malveillants et Threat Hunter
  • 1 000 crédits d’analyse des logiciels malveillants IA ; autogéré par défaut
Voir Pro

Questions before installing.

BitFire filters requests, Pro adds runtime checks, and no layer replaces patching, access control, backups, or recovery planning.

Comment le pare-feu et les contrôles d'exécution de BitFire fonctionnent-ils ensemble ?
The firewall evaluates incoming requests. BitFire Pro also checks authorization when WordPress attempts protected file, database, or administrator operations. These are complementary controls; capabilities vary across security products and configurations.
Does BitFire only work with WordPress?
The current product is for WordPress and its PHP runtime. For a standalone PHP application, contact the team to confirm availability and compatibility before planning a deployment.
Can BitFire help with an already hacked website?
The scanner can help you investigate suspicious files. For cleanup or incident-response assistance, contact a security engineer to confirm the work and service scope. Installing a firewall does not by itself remove an existing compromise.
How does BitFire handle legitimate bots?
BitFire can allow a bot from anywhere, authenticate it by source network, or block it completely. Network validation makes it harder for an attacker to bypass controls using a spoofed user-agent string.
Comment devrions-nous mesurer les frais généraux de protection ?

Overhead depends on hosting, PHP and plugin activity, enabled controls, traffic, and cache state.

Recommended measurement procedure, not a published test result: use an isolated staging copy, record versions and enabled controls, run the same representative requests, and compare baseline, firewall/bot controls, and Pro runtime controls separately.

Commencez à protéger votre site.

Install the free baseline now, or send your site context for a focused technical walkthrough.

Protect my site free

Running a commercial site? You can start free, but we recommend Pro for runtime controls.

Protéger mon site gratuitement â†'