Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner…
by Fernando Tellado · Security
Also makes 21 other plugins · 28.2K+ installs across the portfolio →
Premium WordPress Security - 100% FREE: Firewall, 2FA, Security Headers, Login and Malware Protection, File Monitor, Security Audit & more
97 health vs 64 average across 997 Security plugins
Directory ranking optimization
How it's scored →How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.
Excellent listing optimization
Well tuned across the board
Daily downloads
Since 2026-02-12 · 199 days · wp.org + Plugin Pulse archive
30-day downloads
Rolling 30-day volume · peaks are release surges
8.7K
now · peak 8.7K
Directory rank vs rivals
wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you
Update activity
How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.
Release cadence
Actively maintainedHow often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.
61
releases in the last 12 months
2mo ago
latest release · v2.9.3
61
tagged releases on record
Recent releases
What its installed base runs
via wordpress.orgShare of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.
Estimated active installs
The public count shows “2K+”. Our estimate pins where the real number sits.
Modeled within the band wp.org reports; tightens as we track daily.
At the current install trend, crossing 3K+ in roughly 111 days.
Install history · since 2026-02-11 · 193 observations
Estimated value
What this plugin might earn a year, and what it might sell for. Modeled from public signals; we don't see anyone's books.
Est. annual revenue
Est. acquisition value
A small install base leaves thin data to model from. The recent download trend is too spiky to read. The range spans more than 10x because wp.org publishes install counts as broad bands, and conversion and price compound on top. Read the midpoint as an order of magnitude, not a valuation.
How we estimate this
Assumptions
- Free → paid conversion. 0.5%–2% of active installs pay for the pro tier. Typical for freemium WordPress plugins; the real rate varies a lot by product.
- Annual price per customer. $99–$199 a year, typical for Security plugins rather than this plugin's own pricing.
- Acquisition multiple. 2x–4x annual revenue, the going range for small WordPress-plugin businesses, the typical range for a steady plugin.
- Install base. 2K–3K active installs, from our install estimate (wp.org only publishes the floor).
Inputs
- Active installs
- 2K–3K
- Category
- Security
- Pro tier
- detected (description mentions a Pro or Premium version)
- Download trend
- volatile (a recent download spike, likely a release)
- Reviews
- 18
- Last updated
- 1 days ago
Revenue is installs × conversion × price; value is revenue × a typical acquisition multiple. Every factor is an assumption band, so the output is a wide range on purpose. If you're buying or selling, treat this as a starting point for due diligence.
Details
Latest updates
via wp.org changelogRecent releases and news for this plugin
- — Version 2.9.5 Improved: the daily password expiry cron no longer runs one database query per user. Asking WordPress for user IDs alone leaves the usermeta cache empty, so every reminder check went back to the database; the whole set i 2.9.5
- — Version 2.9.4 Fix: with a custom login URL active, blocking access to the hidden wp-admin no longer renders the theme’s 404 template from inside the ‘init’ hook. Every blocked request was paying for a full page render before WordPress 2.9.4
- — Version 2.9.3 Improved: the firewall IP and User-Agent whitelists now also cover the .htaccess-level protections (Block Bad Bots, bad query strings, HTTP method limits). They only exempted the PHP firewall before, so a legitimate craw 2.9.3
- — Version 2.9.2 Improved: the proxy/CDN detection notice is now dismissible and no longer shows up on local development environments. 2.9.2
- — Version 2.9.1 Fix: the file integrity scanner no longer raises false “suspicious code” or “injected file” alerts on legitimate themes and plugins (for example the Astra theme). It now requires a real unserialize() call sitting next to 2.9.1
- — Version 2.9.0 New: Vigilant now verifies any plugin or theme against the official WordPress.org files the moment it finishes updating, instead of waiting for the next scheduled scan. If an update has been tampered with, the mismatch i 2.9.0
Behavioral tests
via WP HiveAutomated install-time checks, tested on PHP 8.1.12 · WP 7.0.1
Languages
via translate.wordpress.orgTranslated into 3 languages, 2 at 90% or more
Growth timeline
Install-tier crossings we have observed, and how long each tier took to outgrow
- 2026-08-16 1K+ → 2K+ up after 73 days in tier
- 2026-06-04 900+ → 1K+ up after 8 days in tier
- 2026-05-27 800+ → 900+ up after 1 days in tier
- 2026-05-26 900+ → 800+ down after 1 days in tier
- 2026-05-25 800+ → 900+ up after 4 days in tier
- 2026-05-21 700+ → 800+ up after 7 days in tier
- 2026-05-14 600+ → 700+ up after 4 days in tier
- 2026-05-10 500+ → 600+ up after 10 days in tier
Competes with
The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).
-
Wordfence Security – Firewall, Malware Scan, and Login Security 5M+ installs · 4.7★ · 5 shared tags A -
Atomic Edge Security – Firewall, Malware Scan and Login Security 700+ installs · 4.2★ · 5 shared tags A -
Security Plugin, Firewall & Malware Scanner with Auto Removal 40K+ installs · 4.7★ · 4 shared tags A -
Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention 1M+ installs · 4.8★ · 3 shared tags A -
Sucuri Security – Auditing, Malware Scanner and Security Hardening 600K+ installs · 4.2★ · 3 shared tags A -
Anti-Malware Security and Brute-Force Firewall 100K+ installs · 4.9★ · 3 shared tags A
Embed this report card
Drop a live Pulse card for Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… into a readme, a review or a deck. It updates itself.
<iframe src="https://plugins.wpmayor.com/embed/vigilante" width="480" height="300" style="border:0" loading="lazy" title="Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… — Plugin Pulse"></iframe> Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner…: 2K+ active installs, 5.0★ (18 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/vigilante