WP Cerber Security, Anti-spam & Malware Scan is a comprehensive WordPress security plugin designed to protect your website from hacker attacks, spam, malware, brute-force login attempts, and other malicious activity. It combines firewall rules, anti-spam protection, malware scanning, login hardening, IP access controls, and activity logging into one tool — giving you greater visibility and defense against a wide range of threats. WP Cerber +1
Note: The plugin has faced security and repository availability issues in the past, so always ensure you are installing the latest version from the official source and updating it regularly. WPScan
Core Security & Protection Features
Firewall & Request Inspection
Cerber’s firewall inspects all incoming requests to your WordPress site and blocks suspicious or harmful traffic — protecting against intrusions, automated attacks, and probing attempts. WP Cerber
Malware Scanner & Integrity Checker
The plugin can automatically scan your files for malware, backdoors, trojans, and suspicious code patterns. Scheduled scans help you maintain continuous protection and detect infections before they spread. WP Cerber
Brute-Force Login Protection
Limit and monitor login attempts on standard WordPress login pages, XML-RPC, and REST API endpoints to help prevent brute-force attacks. You can also configure custom login URLs and block unauthenticated login attempts. WP Cerber
Anti-spam Protection
Cerber’s anti-spam engine protects contact forms, registration forms, comment forms, and other POST-based inputs from spam and bot submissions. It can work with Google reCAPTCHA or other systems to stop unwanted submissions. WP Cerber
IP Access Controls & GEO Rules
Block or restrict access by IP address, subnet, or geographic location, helping you prevent attacks from high-risk regions or known bad actors. WP Cerber
Activity Logging & Monitoring
Track user and bot activity — including blocked requests, login attempts, and changes — with logs that help you identify patterns, troubleshoot security events, and spot potential threats. G2
Notifications & Reports
Configure alerts and reports to be sent via email or mobile for critical security events like repeated login failures or malware detections (often available in premium versions). G2
Advanced Tools (Typically in Pro / Paid Versions)
In the Pro edition, you can unlock additional capabilities such as:
Automated Malware Cleanup & Scheduled Scans — scheduled and recurring scans with automatic removal and reporting. WP Cerber
Two-Factor Authentication (2FA) — add an extra layer of login security. WP Cerber
Enhanced IP Lists & Geo-blocking Logic — more flexible blocking and access policies. WP Cerber
Session Management & REST API Controls — limit concurrent sessions and secure API access for improved hardening. WP Cerber
Why Use WP Cerber Security?
Multi-layer protection — Combines firewall, malware scanning, anti-spam, and login hardening in one plugin. WP Cerber
Active threat defense — Recognizes and blocks malicious traffic in real time. WP Cerber
Strong anti-spam engine — Helps protect forms and reduce spam submissions. WP Cerber
User & bot activity monitoring — Logs security-related events to help you understand what’s happening on your site. G2
IP control & access rules — Offers fine-grained control over who can access your site’s entry points. WP Cerber