Van We do not employ web application firewalls (WAFs) on customers' apps by default, so using a plugin like Wordfence as an extra layer of security is definitely a good idea. Regardless of the security plugin you're using, keeping your WordPress core and all third-party plugins/themes at their latest versions at all times is critically important to prevent security breaches.