When a new threat to WordPress sites emerges, the first hours matter most.
Today we’re introducing the Wordfence Threat Response Team, led by Alex Thomas and made up of some of our most experienced researchers and threat analysts. It’s a small, hands-on team focused on turning rapidly emerging threats into protection for Wordfence users and clear guidance for site owners.
The Threat Response Team owns the urgent period from initial signal through stabilization, normally the first 72 hours. The Threat Intelligence Team retains responsibility for deeper and longer-horizon vulnerability research, vulnerability records, routine disclosure work, strategic intelligence, and research that does not require an emergency response.
If you see an active threat, you can now report it directly to the team:
Emails to this address alert Threat Response Team members directly. They don’t wait in a general support queue.
When to email the Threat Response Team
- A plugin or theme being actively exploited in the wild
- A supply-chain compromise, such as a tampered plugin or theme update
- An attack campaign hitting many WordPress sites at once
What to include
- What you’re seeing, and when it started
- The affected plugin, theme or software, with versions if you know them
- Any indicators: suspicious files, unknown admin accounts, IP addresses, log entries
- How we can reach you
Email the Threat Response Team →
Where to send other reports
Found malware that Wordfence doesn’t detect?
Send a sample to samples@wordfence.com.
Found a new vulnerability in a plugin or theme?
Submit it through our vulnerability submission form, where our Threat Intelligence Team handles it. Valid reports may be eligible for the Wordfence Bug Bounty Program and may receive a CVE ID.
Found a security issue in a Wordfence product?
Email security@wordfence.com, as described in our Vulnerability Disclosure Policy.
Is your own site hacked?
Wordfence Care and Wordfence Response include full malware cleanup and incident response. Response customers get a 1-hour response time, 24/7/365.
Product questions?
Paid customers can sign in and click “Get Help” on the Licenses page. Free users can post on the WordPress.org support forum.
What happens next
The Threat Response Team reviews reports of active threats as they come in. When a report points to an emerging threat, the team works to get protection in place for Wordfence users and publishes clear guidance on what site owners should do, through our blog, security alerts, and our WordPress Security Newsletter.
Thank you to everyone in the WordPress community who reports threats to us. Your reports help keep millions of sites safe.
The post Introducing the Wordfence Threat Response Team: A New Way to Report Active Threats in the WordPress Ecosystem appeared first on Wordfence.
