Getting Started

Install ArmorPro free and configure core security features.

Last updated Feb 21, 2026

Installation

ArmorPro is installed like any WordPress plugin. There is nothing to buy and no key to enter.

From the WordPress plugin directory (easiest):

  1. In your WordPress dashboard, go to Plugins → Add New
  2. Search for ArmorPro
  3. Click Install Now, then Activate

From a ZIP file:

  1. Download ArmorPro from srworks.co
  2. In your WordPress dashboard, go to Plugins → Add New → Upload Plugin
  3. Select the ZIP file and click Install Now
  4. Click Activate Plugin

After activation, you will find the ArmorPro menu in your WordPress admin sidebar. The plugin begins protecting your site immediately with sensible defaults.

No licence key needed

ArmorPro is free, with every feature switched on, on as many sites as you like. There is no key to enter, no trial to start, and no part of the plugin that stays locked. ArmorPro has no AI features, so it is never affected by an SR WORKS AI subscription either.

Admin tabs overview

ArmorPro organizes its features across seven tabs in the WordPress admin. Here is what each one does:

TabPurpose
DashboardOverview stats (total blocks, lockouts, blocked logins, country blocks), 7/14/30/90-day activity chart, feature status grid, and health checks
Brute ForceLogin attempt monitoring, lockout settings, bot protection, auto-blacklist for repeat offenders, XML-RPC/REST API controls, and login activity log
FirewallPattern manager with 600+ built-in patterns, custom patterns, per-pattern toggles, hit tracking, firewall log, and Enhanced WAF controls
Access ControlIP whitelist, permanent blacklist with optional expiry, and country-based blocking with GeoIP lookup
SettingsLogin security (two-factor authentication, passkeys, custom login URL), security headers, obfuscation and hardening, and email notifications
ToolsHealth checks, database repair, settings export/import, cleanup utilities, factory reset, and demo data
LicenseNot used in this version. ArmorPro is free with no licence-gated features; the tab is reserved for future AI features.

Dashboard overview

The Dashboard tab is your security command center. At the top, you will see summary cards showing total blocks, lockouts, blocked logins, and country blocks. These stats update in real time as ArmorPro works.

Below the stats, an activity chart visualizes security events over your chosen time range: 7, 14, 30, or 90 days. The feature status grid shows which protections are currently active, making it easy to spot anything that needs attention.

Health checks at the bottom of the dashboard verify that ArmorPro's database tables, settings, and file permissions are all in order.

Quick start checklist

Follow these steps in order to secure your site right away:

  1. Whitelist your IP in ArmorPro → Access Control to avoid locking yourself out
  2. Review brute force defaults in the Brute Force tab (3 failed attempts, 15-minute lockout)
  3. Check the firewall is enabled in the Firewall tab
  4. Enable security headers in ArmorPro → Settings for additional hardening
  5. Verify on the Dashboard that all features show active status

Important

Always whitelist your own IP address before tightening security settings. This ensures you will not accidentally lock yourself out of your own site.

Emergency disable

If you are locked out and cannot access the WordPress admin, you can temporarily disable all ArmorPro protections by adding the following line to your wp-config.php file:

define('ARMOR_DISABLE', true);

This bypasses all firewall rules, brute force protection, and access controls so you can log in and adjust your settings. Remove this line once you have regained access and corrected the issue.

Next steps

With the basics in place, explore these features to maximize your site security: