Find out how we want to help you as a developer, and plant trees here
WordFence is a WordPress security plugin that focuses on providing enhanced protection, emphasizing its endpoint firewall.
WordFence offers a server-side endpoint firewall that claims it can protect sites more than those using cloud-based firewalls. Whether this claim holds water is a matter of debate.
They also have a regularly updated “Threat Defense Feed,” with a team of security analysts maintaining the plugin’s real-time IP blocklist.
WordFence offers a free-to-use version accessible through WordPress.org with limited functionality and a selection of premium options with enhanced features and protections. However they do provide their firewall as a part of the free version (which Sucuri does not), it just has a 30 day delay on the Threat Defence Feed updates.
iThemes Security Pro offers several security-based options that allow users to protect their websites from malicious attacks.
The plugin offers protective features like two-factor authentication and integration with services like Google Authenticator and Authy. It also markets itself on its effectiveness in protecting against brute force attacks with its “Brute Force Protections Network,” which features several websites tracking malicious IPs and websites.
Additionally they feature different options for protecting a user’s access point, including designating trusted devices.
iThemes Security Pro only features a selection of premium packages, starting at $80 per year for a single website, with no free version available.
All-in-One WP Security is a free WordPress security plugin aimed at users of all experience levels.
The plugin gears itself towards ease of use, providing customizable functionality and simple, functional categorization.
Users can freely customize different aspects of their site’s security while displaying visual representations of how safe a user’s website is in different areas.
All-in-One is really a counterpart to the Sucuri free WordPress plugin if you ignore the paid cloud base plans offered by Sucuri.
All-in-One does however still feature a firewall, although this is pretty basic compared to that offered by Sucuri. However All-in-One does not offer a malware scanner whereas the Sucuri plugin does (albeit a remote service).
MalCare markets itself on the speed of its Malware scanner and detection, claiming to be the only plugin to feature “Instant WordPress Malware Removal.”
MalCare features a scanner that offloads it's more CPU intensive operations to the MalCare's servers, and sweeps its users’ websites for Malware and offers the ability to clean compromised websites in under a minute.
Their scanner does not require any files to be deleted to clean its users’ sites, allowing users to maintain their site’s condition without any interruption.
The plugin is unique because it offers emergency services provided to users whose sites have already been suspended or blacklisted. MalCare’s premium plans start at $99 per year, and higher price points include multiple sites and dedicated team members to assist users, among other features.
Sucuri Wordpress Security & Scanner