iThemes Solid Security Pro is a comprehensive and robust WordPress security plugin designed to safeguard your website, business, and valuable data from the most common and dangerous vulnerabilities.
This plugin doesn’t just react to threats—it actively prevents them by enforcing strong user login security, monitoring suspicious activity, and providing real-time alerts.
iThemes Solid Security Pro Trusted Devices feature enhances access control while simplifying login processes with biometric compatibility and passkey technologies across multiple browsers and devices.
- Custom User Login Security Requirements: Enforce strong passwords, two-factor authentication, and passkeys to protect against weak login credentials and unauthorized access.
- Brute Force Protection: Defend your site with local and network-based IP banning systems that proactively block malicious login attempts, customizable to your needs.
- Two-Factor Authentication & Passkeys: Simplify and strengthen authentication with support for biometric logins compatible with Face ID, Touch ID, Windows Hello, and major browsers like Chrome and Safari.
- Patchstack Integration: Identify and automatically patch vulnerabilities in plugins and themes to keep your site up to date and secure without manual intervention.
- Vulnerability Scanning & Management: Schedule automatic scans to detect vulnerable software and apply virtual patches when updates aren’t yet available.
- Real-Time Security Dashboard: Monitor your site’s security activity around the clock with customizable dashboards and alerts tailored for different users and stakeholders.
- Trusted Devices & Session Hijacking Protection: Approve familiar devices to log in securely and receive notifications for logins from unrecognized devices to prevent unauthorized access.
- Temporary Privilege Escalation: Safely grant external developers or support technicians temporary admin access without creating new user accounts, controlling duration and permissions easily.
- User Activity Logging & WP-CLI Integration: Keep detailed logs of user actions and streamline security management via command-line tools designed for developers.
- Automatic Plugin & Theme Updates: Customize update delay periods and automatically install updates for plugins and themes that fix security issues to minimize risk.
- Comprehensive Brute Force Network: Benefit from a community-powered network that shares IP threat intelligence from over 1 million sites for enhanced protection.
What's new in Version 8.6.5
Tweak: The Solid Security Basic and Solid Security Pro plugins can no longer be active at the same time.
Tweak: Config files now show "Solid Security" instead of "iThemes Security".
Tweak: Improved Database Backups dashboard widget when the feature is disabled.
Tweak: Clarify the 2FA onboarding email confirmation message.
Tweak: Improve Passwordless Login styling.
Tweak: All Gutenberg blocks use API version 3.
Tweak: Show the plugin changelog in the plugin information pop-up.
Security: Update the "tmp" npm package.
Security: Don't include package.json in zip.
Bug Fix: Vulnerable Software dashboard card didn't render properly.
Bug Fix: Firewall rules that depend on HTTP headers didn't work correctly in all cases.
Bug Fix: PHP Warning: Undefined array key 1 core/admin-pages/logs-list-table.php.
Bug Fix: Logs will appear in the correct order regardless of database version.
Bug Fix: PHP Warning: Array offset on value of type null core/modules/security-check-pro/class-itsec-security-check-pro.php.
Update: The lib/updater library has been updated to 1.9.3.
Tweak: Config files now show "Solid Security" instead of "iThemes Security".
Tweak: Improved Database Backups dashboard widget when the feature is disabled.
Tweak: Clarify the 2FA onboarding email confirmation message.
Tweak: Improve Passwordless Login styling.
Tweak: All Gutenberg blocks use API version 3.
Tweak: Show the plugin changelog in the plugin information pop-up.
Security: Update the "tmp" npm package.
Security: Don't include package.json in zip.
Bug Fix: Vulnerable Software dashboard card didn't render properly.
Bug Fix: Firewall rules that depend on HTTP headers didn't work correctly in all cases.
Bug Fix: PHP Warning: Undefined array key 1 core/admin-pages/logs-list-table.php.
Bug Fix: Logs will appear in the correct order regardless of database version.
Bug Fix: PHP Warning: Array offset on value of type null core/modules/security-check-pro/class-itsec-security-check-pro.php.
Update: The lib/updater library has been updated to 1.9.3.
What's new in Version 8.6.4
-Enhancement: Send notification about new vulnerabilities found during manual scan.
-Tweak: Site Scan page: show mitigated vulnerabilities, ensure all unresolved vulnerabilities are visible.
-Tweak: Site Scan page: show mitigated vulnerabilities, ensure all unresolved vulnerabilities are visible.