Product
Security
AI & SEO
Solutions
Compare
Resources
Get early access Talk to us
WordPress security with Sentinel

Help stop malicious requests before WordPress loads

A vulnerability alert tells you what to fix. A firewall helps turn attacks away while you do it. Sentinel brings website firewall activity and protection status into the same WPCentrify dashboard you use to maintain your sites.

For connected WordPress websites. Review current availability on plans and features.

Updated

The quick answer

What does a WordPress firewall protect against?

A WordPress web application firewall checks incoming requests for attack patterns and can refuse malicious traffic. Sentinel includes rules for SQL injection, script and command injection, and attempts to access private files. Each website starts in watch mode before eligible sites move to blocking.

What you get

WordPress firewall in WPCentrify

Refuse common attack patterns

Help block requests associated with database attacks, injected scripts, command execution and attempts to read private files.

Check before blocking

Each website initially counts matching requests without refusing them. Review activity during the initial watch period.

See the state of every website

Distinguish websites that are blocking from websites that are watching, switched off or unable to run the firewall.

A firewall and a malware scanner solve different problems

A firewall examines incoming traffic. A WordPress malware scanner looks for signs that harmful code or an infection is already present. A vulnerability scan identifies known weaknesses in installed versions. None replaces the others.

Sentinel combines these views so you can respond to an attack and address its cause. Keep vulnerable plugins updated even when a firewall is enabled. A rule set cannot promise to stop every exploit, and a server or hosting-account compromise can happen outside the requests this firewall checks.

Understand watch mode before you rely on blocking

The Sentinel firewall begins with a watch period on each website. During that period, it records activity without blocking. Review the reported mode and investigate compatibility questions before relying on active protection.

Sentinel also stays in watch mode alongside recognized firewall plugins such as Wordfence. Existing firewall protection remains responsible for refusing requests. Read the website status instead of treating the workspace switch as proof that two firewalls are blocking together.

Review attacks across all your connected websites

The firewall view summarizes recent activity and attack categories across the workspace. You can review individual websites and turn the firewall off for a site that needs an exception, subject to your permissions.

Supported versions also refuse persistent attacking addresses and participate in WPCentrify network protection. Pair this with brute force protection for password guessing and vulnerability scanning to find the components you still need to patch.

Your next steps

How to use wordpress firewall

  1. Use a supported WPCentrify plugin

    Use the current WPCentrify plugin and review firewall availability for each connected website.

  2. Review the watch period

    Inspect the reported mode and activity. The initial watch period records activity without blocking.

  3. Confirm protection on each site

    Check which sites block, which remain in watch mode and which need a compatibility review.

Common questions

WordPress firewall questions answered

Does WPCentrify include a WordPress firewall?

Yes. Sentinel includes a website firewall on supported WPCentrify plugin versions. Its dashboard shows the reported mode and recent attack activity for connected websites.

Does Sentinel block attacks as soon as I connect a site?

The firewall begins in watch mode, which records activity without blocking. Eligible websites can then block; websites alongside recognized firewall plugins remain in watch mode. Check the reported mode for your site.

Can I use Sentinel with Wordfence?

Yes. When a recognized firewall such as Wordfence is present, the Sentinel firewall watches and counts instead of competing to block the same requests.

Will a WordPress firewall remove existing malware?

No. Blocking malicious requests does not remove an infection already on the website. Scan the site, investigate confirmed findings and clean or restore it as appropriate.

Does the firewall replace plugin updates?

No. Updates fix known weaknesses in the components you run. Firewall protection reduces exposure to covered request patterns while vulnerability scanning helps identify what needs patching.

Is this a replacement for hosting or network DDoS protection?

No. The Sentinel website firewall is an application protection layer. Your host or network provider is responsible for controls against traffic floods and attacks outside its coverage.

WPCentrify Sentinel

Give every website a security review you can act on

Bring security findings, protection status and website maintenance into the same dashboard.