VMP Security Free
Overview of VMP Security Free — endpoint firewall, security scanner, login security, centralized management, and more.
Free Support
Support for users of the free version of the plugin is available on our support forums. The majority of features shown are available in the free version of VMP™ Security which helps protect millions of sites around the world.
Go to support forumsAccess Upgraded Support Now
Our support engineers, equipped in Premium tickets within a few hours on weekdays, will be pleased to help you with advanced topics, provide comprehensive answers to your questions, and respond to all others in 24 hours or less.
Premium SupportHelp Documentation
Welcome to the official documentation for VMP Security.
VMP Security Premium
Real-time firewall protection, real-time scan signatures, IP blocklist, country blocking, and Premium support.
VMP Security Portal Tool
Manage many WordPress sites from a single dashboard — site overview, configuration templates, scan findings, audit log, and alert routing.
Connecting your sites to VMP Security Portal
Learn how to connect multiple WordPress sites to VMP Security Portal so you can manage them from one place.
Setting up two-factor authentication
Enable two-factor authentication on your VMP Security account from the My Account page.
Using VMP Security plugin options Templates
Create reusable templates of VMP Security plugin options and apply them to any of your connected sites.
Using the Configuration page
Manage VMP Security plugin options for one or more connected sites from a single page in Portal.
Using the Dashboard page
See your websites and licenses at a glance after signing in to VMP Security Portal.
Using the Settings page
Configure Portal-side alert preferences — Scan Findings, Daily Digest, Other Security Events, and the delivery channels (Email, SMS, Slack/Discord).
Viewing scan Findings
Review scan findings for a connected site directly from VMP Security Portal.
VMP Security Reseller Program
An overview of the VMP Security Reseller program: what it is, who it is for, and how the day-to-day workflow looks.
Using the reseller audit log
What the audit log records, how to filter it, and when to use it for compliance or troubleshooting.
Working with reseller alerts
How alerts are raised across your fleet, how to filter them, and what to do when one fires.
Allocating and revoking licenses
How license pools work, how to allocate slots to clients, and what happens when you revoke.
Managing clients
How to add new clients, find existing ones, and suspend, reactivate, or delete a client.
Using the reseller Dashboard
How to read the reseller Dashboard so you can spot client issues without opening every page.
Choosing and purchasing a reseller plan
How reseller plans are sized and priced, and what happens when you complete a purchase.
License Key
VMP Security has two license tiers — free and Premium. This article explains how each is installed and managed.
Account and Billing History
Manage your VMP Security account — profile, password, 2FA, payment methods, billing address, and invoices.
Dashboard
Understand the VMP Security Dashboard — protection status, notifications, Portal connection, toolbar, and firewall statistics.
All Options
Configure global VMP Security plugin options that apply across the dashboard.
Email Alerts
Configure which security events generate email alerts and where they are sent — all from the All Options page.
VMP Security Web Application Firewall (WAF)
A PHP-based application-level firewall that filters out malicious requests — what it protects against, status, optimization, and disabling.
Statistics
View firewall statistics including blocked attacks, top attackers, and traffic trends.
Optimizing The Firewall
Move the firewall to Extended Protection so it loads before WordPress and blocks a wider range of attacks.
Allowlisting URLs and Handling False Positives
How to allowlist legitimate requests that the firewall blocked by mistake — from the block page, Live Traffic, or Firewall Options.
Firewall Options
Configure firewall mode, rules, advanced blocking, and per-rule behavior.
WAF storage engine (MySQLi vs default)
How VMP Security stores firewall data and how to set the storage engine via the VMPFENCE_WAF_STORAGE_ENGINE constant.
Brute Force Protection
Protect WordPress login forms from automated password-guessing attacks.
Rate Limiting
Limit how aggressively a single visitor can hit your site, with separate rules for crawlers and humans.
Troubleshooting
Resolve common firewall issues, false positives, and configuration errors.
Blocking
Block IP addresses, countries, and custom patterns in VMP Security — including hostnames, browser User-Agents, and referers.
Country Blocking
Block traffic from specific countries based on geo-IP lookup — included in the free version.
Blocking Troubleshooting
Diagnose unintended blocks and resolve issues where legitimate visitors or admins are being blocked.
Scan
How VMP Security scans your site for malware, backdoors, malicious URLs, and infections — scan types, stages, results, and troubleshooting.
Scan Options
Configure what the VMP Security scanner checks, including file integrity, malware, and reputation checks.
Scan Results
Understand and act on the issues reported by a VMP Security scan.
Scan Scheduling
Schedule when VMP Security runs scans on your site.
Scan Troubleshooting
Resolve common scan failures and timeouts.
Tools
VMP Security Tools — Live Traffic, Audit Log, Whois Lookup, Import/Export Options, and Diagnostics.
Real-Time Live Traffic
Watch real-time traffic on your site, including humans, bots, and security events.
WHOIS Lookup
Look up the registered owner and ISP for an IP address or domain.
Import/Export
Export your VMP Security configuration and re-import it on another site or after a reinstall.
Diagnostics
Inspect your installation and server configuration to help diagnose issues.
Two-Factor Authentication
Add a second authentication factor to your WordPress login using TOTP authenticator apps.
Audit Log
Free audit log that records security and admin events on your site so you have a chronological record to consult during incident response.
Login Security Options
Settings for two-factor authentication (2FA), reCAPTCHA, WooCommerce integration, and general login-security options.
Basic Plugin Settings
Minimal recommended settings to configure once you have installed and activated VMP Security.
Advanced information and configuration
Technical details about VMP Security — automatic updates, cloud servers, infrastructure IP addresses, and allowlisting.
System requirements
PHP, WordPress, MySQL, and server resource requirements for VMP Security.
Changelog
Version history of the VMP Security plugin.
Technical Details
Technical details about how the VMP Security plugin operates.
Constants
PHP constants you can define in wp-config.php to override or fine-tune VMP Security behavior.
Remove or Reset
Cleanly remove VMP Security or reset its data without leaving stale files behind.
VMP Security PHP API
Public PHP classes, hooks, and shortcodes that VMP Security exposes for developers extending or integrating with the plugin.
Compatibility
Compatibility notes for popular plugins, themes, and hosting environments.
Troubleshooting
General troubleshooting steps for VMP Security issues that don't fit elsewhere.
Plugin / Theme Conflicts
Diagnose and resolve conflicts between VMP Security and other plugins or themes.
API Callbacks
Learn how to identify callbacks made from VMP Security servers to your site.
Login Security inside VMP Security
How the Login Security page works in the main VMP Security plugin — 2FA, reCAPTCHA, and where Brute Force lives.
VMP Security and GDPR - General Data Protection Regulation
How VMP Security complies with GDPR — terms, standard contractual clauses, and the cookies set by the plugin.