What is Blink Twice Security WP?

It is a WordPress security plugin that combines malware scanning, firewall protection, hardening, cleanup, quarantine, backups, safe migration, anti-spam, 2FA and monitoring in one dashboard.

Is the free plan real?

Yes. Free includes malware scanning, Hard Shield audit, basic WAF, honeypot anti-spam, SSL watcher, vulnerability checks, file change monitoring, threat feed and one lifetime cleanup.

Does it replace other security plugins?

It can be your main WordPress security plugin when the feature set matches your needs. We recommend avoiding several heavy security plugins that scan and block the same requests at the same time.

Freelancers, agencies, WooCommerce stores and serious site owners who need a clear security workflow, not just alerts.

Can I edit the website content?

Yes. Use Appearance, then Blink Twice Settings to edit the hero copy, CTA links, contact emails, default mode and waitlist. Use Customize, then Site Identity to change the logo.

Features

Everything needed to scan, harden, clean, back up and move WordPress safely.

A modern WordPress security suite for freelancers, agencies, WooCommerce stores and serious site owners.

Detection and triage

Malware scanner

On-demand scans across the database, uploads, plugin files, theme files and admin users, with signature and heuristic checks for WordPress malware.

Findings dashboard

Severity, confidence, evidence, file paths and plain risk reasons make it easier to explain what happened to a client.

File change monitor

Baseline and diff of important PHP, JS and htaccess files with reasons that help separate normal updates from suspicious edits.

Protection and hardening

Basic WAF

Request inspection for common SQL injection, XSS, LFI/RFI, traversal and noisy automated attacks.

Hard Shield audit

60 plus checks across directory listing, XML-RPC, REST access, security headers, login limits and sensitive file exposure.

Login security

Cleanup and recovery

One-click cleanup

Clean infected files, database entries, uploads and rogue admin users. Free includes one lifetime cleanup, paid plans unlock unlimited cleanups.

Quarantine vault

Removed files are recoverable, so a false positive does not become a bigger problem than the infection.

Clean export

Generate sanitized database and uploads backups after confirmed cleanup, then hand off a cleaner recovery package.

Backups, migration and monitoring

Scheduled backups

Daily or weekly database and uploads backups with retention controls.

S3 compatible remote storage

Push backups to AWS S3, Backblaze B2, Cloudflare R2, Wasabi, DigitalOcean Spaces or another S3 compatible bucket.

Clean migration

Export and import full sites with scan-on-import so malware is checked before restore, not after the new site goes live.

Vulnerability and uptime monitoring

Daily vulnerability matching, SSL expiry checks and uptime self-pings help agencies keep care-plan clients informed.

AI code analysis

Bring your own OpenAI, Anthropic or Gemini key to review suspicious snippets when local signatures are not enough.

Agency features

Agency tiers are planned for white-label branding, branded reports, external REST API, fleet view and WooGuard order risk scoring.