What it does
NinjaFirewall is a WordPress-oriented WAF that filters requests before they reach WordPress or other PHP scripts in the protected installation.
NinjaFirewall's placement is the important detail: the vendor describes filtering requests before WordPress and its plugins execute. That differs from a plugin feature that only runs after an application action has begun. Review the hosting requirements and protected directory scope before deployment. Test legitimate uploads and integrations against the filtering policy. The official comparison distinguishes free WP and paid WP+ features, so one edition's controls should not be assumed to exist in the other.
The paid annual license does not automatically renew, according to the FAQ. It expires if not renewed. The listed minimums are WordPress 4.9 and PHP 7.1, but compatibility with the site's actual PHP setup still needs the hosting-specific installation guidance.
Strengths
- Request filtering before WordPress execution
Best for
- WordPress operators reviewing a PHP-level firewall layer