Imunify Security is a protection tool that Web Hosting Canada (WHC) added to every WordPress site on our Web Hosting and Managed WordPress plans. WHC installed it for you. It is not something you added, and it is not a sign that your site was hacked.
Where you'll see Imunify Security
Open your WordPress dashboard and go to your Plugins list. Imunify Security appears there by name. Your WordPress dashboard also shows a security widget with your site's current protection status.
Good to know: WHC installed Imunify Security directly, so it does not appear in the WordPress plugin directory. You won't find it by searching under "Add New" plugins.
What Imunify Security does
Imunify Security protects your WordPress site in three ways:
Blocks exploit attempts. It stops attempts to abuse known security holes in your plugins, themes, and WordPress itself, which buys you time until you apply the real update.
Scans for malware and cleans it up. It checks your site's files for malicious code and removes what it finds. You can also review detected malware from cPanel — see Manage Security with Imunify360 in cPanel.
Limits abusive bots. It slows down automated traffic, such as scrapers and aggressive bots, that can overload your site, while leaving your real visitors alone.
Do you need to do anything?
No. Imunify Security works automatically once it is installed. The habit that matters most is still keeping WordPress — along with your plugins and themes — up to date. Imunify Security blocks attacks against known flaws; updating removes those flaws at the source.
On rare occasions, this kind of protection can block something legitimate — for example an API call, a plugin's automated request, or part of your own site — usually shown as an "Access denied" (403) or "Too many requests" (429) error. If that happens, see [Article B — troubleshooting, insert link once published].
Can you remove Imunify Security?
Yes, Imunify Security can be removed. WHC recommends keeping it on, because it protects your site even when an update hasn't been applied yet. Turning it off removes that layer of protection. If Imunify Security is blocking something and you want to adjust it rather than remove it, see Imunify Security is blocking something on my site — what should I do?