BitFire Security — WordPress Security Plugin
BitFire Security – Firewall, Malware Scanner, Bot Blocker, Login Protection
by Cory Marsh · WordPress.org page · Website
BitFire Security has 300+ active installs on WordPress.org and 17,389 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on August 14, 2026, tested up to WordPress 7.0.4.
BitFire Security at a glance
Is BitFire Security well maintained?
Features
The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.
- Added traffic percent blocking for large sites to sample blocking behavior before fully commiting
- Increased free AI usage credits from 10 to 12
- Improved bot/browser verification compatibility with ModSecurity
- Added buttons for allowing traffic on the dashboard
- Fixed an issue that was blocking obviously malicious bots even when bot whitelist setting was not enabled
- Added reasonable limit for max malware file size to prevent resource exchaustion on servers with very large files
- Expanded bot source and threat intel data
- Older versions could label some woocommerce user-agents that were completely random as
- Improved detection of when to load wordpress vs when to inspect early
- Bots can be configured directly from the dahboard by clicking on their link to the bot control page
- False positives can now have execptions added on the dashboard with a single button click
- AI Malware change for OpenAI compliance – previous versions will no longer support AI analysis
BitFire Security reviews and ratings
8 reviews on WordPress.org, with the most recent ones as their authors posted them.
8 reviews
- 5★
-
8
- 4★
-
0
- 3★
-
0
- 2★
-
0
- 1★
-
0
-
BitFire and Cory Marsh fixed our website security properly
Our website was hit with a security problem a few weeks ago. We found some strange activity on the site and knew we needed real help, not just another plugin that flags problems without fixing them. We contacted BitFire and worked with Cory Marsh. He checked the site properly and found backdoor vulnerabilities that were letting attackers get into the site without us knowing. He patched these backdoors and fixed other weak spots we didn't know about. Cory kept us informed the whole time and explained things in a way that was easy to understand, not full of technical terms we didn't need. We are happy with the service and would recommend BitFire and Cory Marsh to anyone who wants their website properly checked and looked after, not just scanned.
zappit -
Geat Firewall an bots plugin
It is only one thing to say: It works! and this is the only firewall realy do the job.In the pro version you get all you need.
trondandre1962 -
This is a total game-changer
I don't know where to start. A friend's website had been hacked, was spewing spam and after hours of tech support with his host we were pressured to get into contracts to be able to remove the bots that got him locked out of his own email. Then, I searched for alternatives and found BitFire. What a difference! As it turns out, BitFire is highly advanced technology and far beyond what this little website needed, but I didn't fully realize this until I contacted Cory Marsh, the developer of this genius product, and talked it out. AND, instead of turning me away with apologies and legitimate reasons why the typical BitFire install would be complete overkill, he talked me through how to use it, explained all the details and inner workings very patiently, cheerfully waiting on the line while I tried to grasp and respond to what was clearly over my pay grade, and then went ahead and removed the existing bots for me in the process. He used hours of his time trying to help me, and I am overwhelmingly grateful for his patience and incredible talent in developing this product. Cory is the real deal. I still can't believe the help I received.
monahowell -
Thank you!
This is an excellent plugin. Given that most recent attacks are from bots, focusing on bot protection makes perfect sense. We have been able to eliminate most malicious bots with it. We are deeply grateful to the plugin developer.
bear2000 -
Absolute Best Plugin and Support
Cory has gone above and beyond any plugin creator I have ever dealt with. He walked me through my own website and showed me things that I was not even aware of. We had a zoom meeting and he spent over an hour helping me. If I could give more than 5 stars I would. You will not be disappointed with this plugin. The Full Protection option is the way to go. Thank you so much Cory!
findrarecoins -
WAF and RASP are Pro features
Updated Review: BitFire Pro is the best I know for WordPress - no doubt. In my earlier tests, it (the free version) defeated WordFence Pro and all the other WAF plugins. With the 4.0 version update, the WAF which was present in the free version just disappeared and became part of the Pro version. As for the RASP, it is again a Pro feature and that was the case earlier too - RASP is a great Pro feature that a serious person would upgrade to. I tested the latest free version(4.0) and found it to be not qualified to be on my WP stack anymore as it doesn't have WAF as it did before. I do know that BitFire "Pro" is good and much better than the WordFence Pro, so I don't want to take away the 5-star rating from my review - this is my gratitude for your hard work, you absolutely deserve it. Any day I would suggest anybody use the BitFire Pro version in any of their serious web projects - it really works great! Anyways, BitFire free version isn't for me. Good wishes.
JimJam
Details
Stop hackers, bots, and malware before they touch your site. AI-powered security with real human support when you need it.
The full description, screenshots and every review live on the WordPress.org page.
Rankings BitFire Security competes in
Tags
- bot blocker
- firewall
- malware scanner
- security
- WAF
- Version
- 5.1.5
- Last updated
- Aug 14, 2026
- First published
- Jun 22, 2022
- Requires WordPress
- 6.1
- Tested up to
- 7.0.4
- Requires PHP
- 7.4
- Pricing
- Free on WordPress.org
BitFire Security FAQ
What does BitFire Security do?
According to its WordPress.org readme, BitFire Security offers Added traffic percent blocking for large sites to sample blocking behavior before fully commiting, Increased free AI usage credits from 10 to 12, Improved bot/browser verification compatibility with ModSecurity, Added buttons for allowing traffic on the dashboard and Fixed an issue that was blocking obviously malicious bots even when bot whitelist setting was not enabled.
How many active installs does BitFire Security have?
WordPress.org reports 300+ active installs for BitFire Security as of September 7, 2026.
Is BitFire Security still maintained?
Yes. The last release was on August 14, 2026 and it is tested up to WordPress 7.0.4.
Does BitFire Security have good support?
On the WordPress.org forum, 0 of 1 recent support threads for BitFire Security are marked resolved. That is the developer's free support; a paid version usually comes with its own channel.
Is BitFire Security free?
BitFire Security is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.