Securewp & SiteFort FAQs
Answers about SiteFort security, Securewp Console, malware removal, plans, billing, and warranty coverage.
WordPress Security
Protection, scanning, performance, and Cloudflare integration.
SiteFort protects WordPress with firewall controls, login security, 2FA, hardening, vulnerability monitoring, activity logging, and cloud malware scanning. Core protection works directly inside WordPress, while cloud services handle security analysis that would otherwise place additional load on the server.
SiteFort Free includes firewall protection, country blocking, login security, 2FA, CAPTCHA, WordPress hardening, vulnerability monitoring, activity logging, cloud malware scanning with monthly scan credits, Cloudflare sync, and access to Securewp Console.
Not for the core firewall and hardening features. A free Securewp account and SiteFort license are required for cloud malware scanning, vulnerability services, and Securewp Console.
SiteFort is designed to minimize server load. Malware analysis runs through Securewp cloud infrastructure rather than performing intensive file analysis entirely on the WordPress server.
Yes. SiteFort can sync supported IP blocks, country rules, and rate-limiting controls to Cloudflare so selected traffic can be blocked at the edge. SiteFort firewall and hardening controls continue to protect WordPress locally.
Site Management
Connect sites, review security status, and manage supported controls from one dashboard.
Securewp Console is a central dashboard for SiteFort-connected WordPress sites. Review security status, scan activity, vulnerabilities, uptime, alerts, and supported SiteFort settings without opening each site's wp-admin.
No. SiteFort can protect a WordPress site without Console. Console adds centralized visibility and management when you want to work across one or more connected sites.
Install SiteFort, register it with your Securewp account, and connect the site from the SiteFort settings in WordPress. No server-level configuration or file editing is required.
Yes. Console supports team access and roles so agencies and internal teams can give users the permissions they need without sharing one account.
Yes. You can connect multiple WordPress sites to the same Console, including sites running different SiteFort plans. Agencies with five or more paid sites can use volume pricing on Pro and Managed plans.
WordPress Malware Removal
Hands-on investigation, cleanup, remediation, and recovery for compromised sites.
Use the service when a WordPress site is compromised or showing signs such as redirects, injected content, malicious files, blacklisting, unknown administrator accounts, or hosting suspension. A Securewp specialist investigates the site, removes the compromise, and addresses the likely entry point.
A Securewp security specialist is assigned within 30 minutes of order confirmation. You can communicate with the assigned specialist through the secure case messaging system during the cleanup.
The service includes investigation of site files and the database, malware and backdoor removal, remediation of the likely entry point, security hardening, post-cleanup verification, a written summary, and a 12-month reinfection warranty. Blacklist removal requests are submitted when applicable.
Yes. After the compromise is removed and the site is verified, we can help provide the information your hosting provider needs to review the suspension. Temporary hosting access may be required to complete the cleanup.
We handle common WordPress compromises including malicious redirects, backdoors, web shells, SEO spam, injected links, phishing content, malicious administrator accounts, compromised plugins or themes, and site defacement. We can also assist with Cloudflare configuration when attack traffic needs to be filtered at the edge.
After ordering, use the secure credentials form inside your Securewp account to provide the access required by your specialist. Credentials can be updated or revoked from your account when needed.
Plans & Pricing
Free protection, paid automation, and managed security options.
Free: Core WordPress protection plus cloud malware scanning with monthly scan credits.
Pro: Adds unlimited cloud malware scanning, scheduled scans, monitoring, alerts, one-click file repair, and discounted expert malware removal.
Managed: Adds hands-on security management, daily scans, WordPress updates, priority vulnerability remediation, monitoring and response, and expert malware removal.
Expert malware removal is not included automatically with Pro, but Pro customers receive 50% off the service. SiteFort Managed includes expert malware removal while the Managed plan is active.
Yes. Volume pricing applies when purchasing Pro or Managed for five or more sites. See the pricing page for current per-site rates and plan details.View SiteFort pricing.
Warranty & Refunds
Reinfection coverage, cleanup refunds, and paid-plan guarantees.
If a cleaned site is reinfected within 12 months and the warranty conditions have been followed, Securewp will reassess and clean the site again at no additional charge.
Keep WordPress, plugins, and themes updated, follow the remediation recommendations provided after cleanup, avoid nulled or unlicensed software, and do not restore infected backups or remove security controls without checking with Securewp first.
Cleanup refund requests are considered within 30 days of purchase when the applicable warranty conditions have been followed. Contact support through your account or email support@securewp.net with your order number, affected site, and reason for the request.
Yes. SiteFort Pro and Managed include a 30-day money-back guarantee. Contact Securewp support within 30 days of purchase to request a refund.