The free plan is a fully functional security plugin, not a limited demo. It includes:

1. 3,000 cloud scan credits per month for malware detection across your files and database
2. Full firewall with country blocking, rate limiting, and community threat blocklist
3. Login protection with two-factor authentication, brute force lockout, CAPTCHA, and custom login URL
4. All hardening features including PHP execution blocking, file editor lockdown, and security headers
5. Breached password detection that flags compromised credentials on login
6. Activity logging with user-defined retention (no forced expiry)

Features like country blocking, community blocklists, and breached password detection are paid-only in competing plugins. They are free in SecureWP.

Each file analyzed by the cloud malware scanner costs one credit. The free plan includes 3,000 credits per month. Pro and Managed plans have unlimited credits.

A typical WordPress site with a few plugins has 5,000 to 8,000 files, so most free users can run at least one full scan per month. After the first scan, unchanged files are verified from a local cache at no credit cost, meaning follow-up scans use significantly fewer credits.

Scans prioritize the most important directories first: WordPress core files, your active theme, then active plugins. This ensures the highest-value files are always scanned before credits run out.

Pro unlocks everything that requires ongoing cloud infrastructure:

1. Unlimited scan credits with no monthly cap
2. Deep scan mode that checks images and PDFs for embedded malicious code
3. Scheduled and automated scans (daily, weekly, or monthly)
4. One-click malware repair directly from scan results
5. Uptime monitoring with 1-minute check intervals and SSL certificate expiry warnings
6. Remote website scanner with full results and all scan frequencies
7. Slack, Discord, and email alerts for vulnerabilities, downtime, and scan results
8. Vulnerability alerts the moment a known CVE affects your installed plugins or themes
9. 30-day audit log in the console
10. 50% off expert malware cleanup ($49 instead of $99)

Pro costs $99 per site per year. Volume pricing drops to $79 per site per year when you license 5 or more sites.

Managed is for site owners who want complete hands-off security. It includes everything in Pro, plus our team handles all of it for you:

1. We install and configure the plugin on your site
2. Daily automated scans run by our team, not triggered by you
3. Immediate malware removal if anything is detected (no per-incident fees)
4. Proactive updates for WordPress core, plugins, and themes
5. Vulnerability patching within hours of CVE disclosure
6. Dedicated security agent assigned to your site with real-time chat
7. 24/7 monitoring and automated threat response
8. 1-year support guarantee post-incident

Managed costs $250 per site per year. Expert malware cleanup is included at no extra cost for the life of your plan.

Pro includes one-click automated repair for detected malware directly from your scan results. For complex infections that need hands-on expert work, the cleanup service is available at 50% off ($49 instead of $99).

Managed includes unlimited expert malware cleanup at no extra cost. If our scans detect an infection, our team removes it immediately without you lifting a finger. Every cleanup comes with a 1-year reinfection warranty.

There are no fixed tiers or bundles. You purchase Pro licenses one at a time as you onboard clients. When your account reaches 5 or more active Pro licenses, volume pricing kicks in automatically at $79 per site per year (down from $99).

For comparison, the leading competitor charges $149 per site per year with no volume discount. At 10 sites, SecureWP Pro saves you $700 per year. At 25 sites, you save $1,750 per year.

Yes. There are no long-term contracts. You can cancel directly from your console dashboard at any time. You retain access to all paid features until the end of your current billing cycle. After that, your site reverts to the free plan with all firewall, hardening, and login protection features still active.

Your site stays protected. The firewall, hardening settings, login protection, 2FA, and all local security features continue working exactly as before. What changes:

1. Cloud scanning switches from unlimited to 3,000 credits per month
2. Scheduled and automated scans stop (you can still run manual scans)
3. Uptime monitoring, vulnerability alerts, and Slack/Discord notifications are paused
4. Remote scanner results become redacted and limited to weekly frequency

No security settings are removed or reset. You can upgrade back to Pro at any time and everything resumes.

Yes. Pro and Managed plans come with a 30-day satisfaction guarantee. If SecureWP is not the right fit, contact support through your console or email support@securewp.com within 30 days of purchase for a full refund. No questions asked.