Security software that tells the truth

Why we exist

Most WordPress break-ins are not sophisticated. They are password guessing, an outdated plugin, or a bot that found a login page. Stopping them does not require magic: it requires the basics, done well, switched on.

So that is what we build: two-factor authentication, login protection, CAPTCHA, edge WAF rules and scanning that you can set up in minutes with a guided wizard.

How we think about free

The free plugin is real protection, not bait. Two-factor authentication, CAPTCHA, brute-force protection and all 5 Cloudflare WAF rule groups ship free, forever. Pro exists for teams that need depth: audit trails, incident detection, compliance reports and passwordless logins at scale.

What we promise

• We only market features that ship. Every claim on this site is verified against the code.
• Telemetry is opt-in, anonymous and off by default.
• We name the external services features talk to, and when a feature needs your own account or API key, we say so.
• Safety nets everywhere: recovery URLs, settings backups, dry-runs and rollbacks.

What we don't claim

No security tool prevents every attack. Ultimate Security hardens your defenses and makes your site a harder target, but your overall security depends on your hosting environment, your passwords, keeping everything updated, and maintaining off-site backups. We provide the tools. You remain responsible for your site.