WPMU Dev Devender or Wordfence

Awesome reply from WordFence. I post this if someone also want to know more about this. It is a bit off topic but still security.

.............

1. Is the free version of Wordfence less secure? The basic Website Protection like the firewall
The free version still includes the same malware scanner and the same firewall as the premium version. The only difference is that Premium users get updates for the firewall faster. This allows us to mitigate the cost of bandwidth and prioritize premium customers for them. Free users have a 30 day delay. There are a few other features that are unlocked by the premium key as well. Most of these are aimed at prevention.

There is a nice chart over at wordfence.com that shows the differences between our free and premium version. I have included it here for you. Visit http://docs.wordfence.com to see descriptions, information, etc.




2. Is wordfence on the same security standard as securi?

I'll try my best to help clarify the differences between Wordfence and Sucuri for you. They really are two different things. Sucuri doesn't really have a true security plugin, but rather additional services you can sign up for which you can access via their plugin, such as their cloud based web application firewall. Same for their malware scans. Those that are done through their plugin do not actually directly check your files for malicious content, it uses and API call to their sitecheck.sucuri.net (this is the same malware scan that iThemes uses) which only checks your public facing site for signs of malware. This will not detect backdoors or other malicious code injections like wordfence does. I do not know if their premium services include any type of file system check or not since I have never used them but it may. That is something you would probably need to ask them about.

One thing that Sucuri is really popular for is their cloud based web application firewall and virtual patching. Although this is a very nice service it's important to note that these types of security measures can be bypassed so if you don't keep your site up to date, it's like temporary band aid to help keep it clean. If someone finds their way around the WAF, they can still exploit it. Our WAF is different in that it runs on the web server and executes before wordpress. That means if you visit the server, the waf has the ability to stop you. No circumventing it.

.....

There are more but the rest is on the WordFence websit.

Hope this help someone

30 days sounds like too much time. And honestly... website firewalls don't seem to be something you should get through a plugin. At least I don't think plugins like those two are comparable to proper services like Sucuri or Cloudbric. Aren't automatic updates also the standard now? Signatures can only exist for known attacks, but new attacks are found an average of once a week in 2015. Machine learning and automatic updates should be necessary in all modern website security deployments

I would prefer using Wordfence. It is one of the best security plugin for WordPress and have some great features.