SiteFort vs Kadence Security (formerly SolidWP): an honest comparison
This plugin has been through three names: iThemes Security, then Solid Security under the SolidWP brand, and now Kadence Security after Liquid Web folded SolidWP into its Kadence product line in 2026. Whatever it is called, it is well-regarded for hardening and login protection. Where SiteFort pulls ahead is coverage: the complete WordPress hardening and firewall stack is free in SiteFort. Several comparable features in Kadence Security require Pro. Here is the full comparison.
Which one fits your situation
At similar price points, the question is what is free versus what requires upgrading. SiteFort's complete hardening stack costs nothing. Kadence Security Pro gates several features that SiteFort includes at no cost.
SiteFort is free to install. Full firewall, 2FA, and vulnerability scanning at no cost.
How the choice plays out in practice
Four situations where one plugin is a noticeably better fit than the other.
Site needs security and backups in one plan
The Kadence bundle at $199/year brings Kadence Security, Kadence Backups, and Kadence Central together. SiteFort is security-only. If the site needs both security and backups and the team wants one vendor, the Kadence bundle is the relevant comparison to SiteFort Pro plus a separate backup plugin.
Plugin with a critical vulnerability, patch not yet available
Kadence Security Pro's virtual patching via Patchstack applies a WAF rule that blocks known exploit patterns while an official fix is pending. SiteFort does not offer virtual patching. For agencies managing client sites where immediate updates are not always possible, this is a real operational advantage for Kadence Security.
Site behind Cloudflare needing firewall enforcement at the edge
SiteFort syncs supported IP, country, and bot rules to Cloudflare so blocks happen before requests reach the server. Kadence Security has no Cloudflare sync. For sites already using Cloudflare, SiteFort is the stronger fit on firewall architecture.
Agency needing expert cleanup with a long warranty
SiteFort's expert cleanup at $149 one-time includes a 12-month reinfection warranty. The equivalent cleanup add-on from Kadence offers a 30-day guarantee. For agencies delivering security services to clients, the warranty length directly affects how long they are covered without paying again after a cleanup job.
Kadence Security ships inside a larger bundle, not as a standalone security plugin
This changes the pricing comparison significantly. At $199/year the Kadence bundle bundles security, backups, and site management. If you only need security, Kadence Security Pro is available standalone at approximately $99/year. Know which you are comparing before reading the table.
Kadence Security
The security plugin. Hardening, login protection, 2FA, vulnerability scanning, file change detection. This is the main competitor to SiteFort.
Kadence Backups
WordPress backup plugin, formerly sold as BackupBuddy. One of the most established backup plugins in the WordPress ecosystem. Scheduled backups, remote storage, restore tools. SiteFort has no backup product.
Kadence Central
Multi-site management dashboard. Plugin updates, site monitoring, reporting across a site fleet. SiteFort offers this free via the Securewp console on all plans.
SiteFort vs Kadence Security, feature by feature
Based on publicly available information as of June 2026. Features and pricing change, so confirm on each provider's site before buying.
| Feature | SiteFort | Kadence Security |
|---|---|---|
| Scanning and detection | ||
Malware scanning How and where malware analysis runs | Cloud-side. File signatures sent to cloud, heavy analysis off-server. 3,000 credits/month free, unlimited on Pro | File integrity focused. Flags changes from known-good state but no cloud-powered threat analysis |
Vulnerability scanning CVE detection across plugins, themes, core | Free | Available on Pro |
Virtual patching Compensating rule while a patch is pending | Not listed as a feature | Pro. Applies WAF rules for known CVEs before update |
Scheduled scans | Pro | Pro |
| Firewall and traffic | ||
Web Application Firewall | Free | Free and Pro |
Country blocking | Free | Pro only (admin-level restriction) |
Cloudflare WAF sync | Free. Push rules to Cloudflare edge | Not available |
Community IP blocklist | Free, network-wide shared blocklist | Network brute-force ban list |
| Login security | ||
Two-factor authentication | Free. Authenticator app and email, per-role enforcement | Free and Pro. Passkey and TOTP support |
Passkey (biometric) support | Not listed as a feature | Pro. Ahead of most WordPress security plugins on modern auth |
Login CAPTCHA | Free | Pro |
Custom login URL | Free | Pro |
Breached password detection | Free (HaveIBeenPwned) | Pro |
| Hardening | ||
Security headers (CSP, HSTS) | Free with header analyzer | Pro |
PHP execution blocking | Free | Partial |
| Management | ||
Multi-site console | Free on all plans. Scan history, CVE status, uptime, SSL, alerts, team roles, client reports | Kadence Central (separate product, included in Kadence bundle) |
Backups | Not included. SiteFort is security-only | Kadence Backups included in Kadence bundle |
Uptime monitoring | Pro (1-minute intervals) | Via Kadence Central on paid plans |
| Cleanup and incident response | ||
Expert malware cleanup | $149 one-time, includes 12 months SiteFort Pro. Free in Managed ($299/year) | The cleanup add-on is a separate paid service. Not bundled in standard plans |
Reinfection warranty | 12 months per cleanup job | 30-day guarantee on cleanup add-on |
What you actually pay
At similar price points, what each plan includes is very different.
Full firewall, country blocking, 2FA, hardening, vulnerability scanner, CAPTCHA, Cloudflare sync, 3,000 scan credits/month
Unlimited scans, scheduled scans, uptime monitoring, Slack alerts, console audit log. Volume: $79/site at 5+ sites
Everything in Pro, plus dedicated agent, daily scans, plugin updates, CVE patching, 24/7 monitoring, unlimited cleanup included. Volume: $249/site at 5+ sites
Includes 12 months SiteFort Pro. Agent within 30 minutes. 12-month reinfection warranty
Basic hardening, brute force protection, 2FA, file change detection. More limited than SiteFort Free on firewall and scanning depth
CVE feed, 2FA, custom login URL, virtual patching, passkey 2FA, advanced password policies
Kadence Security Pro + Kadence Backups + Kadence Central bundled. Best value if backups matter
Separate paid service. Not included in standard plans. 30-day cleanup guarantee
Pricing reflects publicly available information as of June 2026. Verify current prices on each provider's site before purchase.
Where each plugin genuinely has the edge
Kadence Security has real strengths. So does SiteFort. Neither dominates across the board.
- Complete hardening and protection, entirely free. Firewall, country blocking, 2FA, CAPTCHA, security headers, PHP execution blocking, custom login URL, vulnerability scanner: all free in SiteFort, no upgrade required. Kadence Security Pro gates country blocking, CAPTCHA, security headers, and custom login URL.
- Cloud-based scanning that works anywhere. SiteFort's scanner offloads analysis to the cloud, so it works on any hosting platform with zero server impact. Kadence Security's scanning is server-side file-integrity checking, which does not detect the same range of threats.
- Expert cleanup with 12-month warranty. SiteFort offers a $149 expert cleanup with a 12-month reinfection warranty. Kadence's cleanup add-on is a separate paid service with only a 30-day guarantee.
- Free multi-site console. The Securewp console is free on all SiteFort plans including free. It provides scan history, CVE status, uptime, SSL monitoring, alert routing, team roles, and client reports. Kadence Central is a paid product bundled in the suite.
- ·Backups bundled at $199/year. The Kadence bundle brings security, backups, and site management together. SiteFort has no backup product. If the site needs both, compare the bundle against SiteFort Pro plus a separate backup plugin.
- ·Virtual patching via Patchstack. Kadence Security Pro can apply compensating rules for known CVEs while an official fix is pending. A meaningful control for agencies managing sites where immediate updates are not always possible.
- ·Passkey support for 2FA. Kadence Security includes biometric/passkey login support which is ahead of most WordPress security plugins on modern authentication methods.
You care most about bundled backups, Patchstack virtual patching, passkey 2FA, and wanting security plus site management from one vendor family at $199/year.
Common questions about SiteFort vs Kadence Security
Is Kadence Security the same as SolidWP or iThemes Security?
Yes, same plugin, third name. iThemes Security became Solid Security under the SolidWP brand in 2023, then was renamed again to Kadence Security in 2026 when Liquid Web folded SolidWP into its Kadence product line. The underlying plugin and team carried over through both renames.
Does Kadence Security include malware cleanup?
No. Kadence Security and the Kadence bundle do not include malware cleanup in standard plans. The cleanup add-on is a separate paid service. SiteFort Managed at $299/year includes unlimited expert cleanup, or the standalone $149 cleanup covers a single incident with a 12-month reinfection warranty.
Is Kadence Security Pro worth buying without needing backups?
At approximately $99/year, the price matches SiteFort Pro. Kadence Security Pro has virtual patching and passkey 2FA. SiteFort Pro has cloud-side malware scanning, Cloudflare sync, and full firewall controls free in the base tier. If backups are already handled separately, compare the security feature sets directly.
How does virtual patching work in Kadence Security?
Virtual patching applies a firewall-level rule blocking known exploit patterns for a specific CVE even when the affected plugin has not been updated. It is a compensating control, not a permanent fix. It buys time when an official patch is not yet available. SiteFort does not currently offer virtual patching as a named feature.
The short version
Kadence Security wins when you want backups bundled with security in one subscription, virtual patching for known CVEs, or passkey 2FA. SiteFort wins on firewall depth, cloud-side malware scanning, Cloudflare edge sync, free feature coverage, and expert cleanup with a 12-month warranty versus 30 days. SiteFort's entire hardening and protection stack is free. Kadence Security gates country blocking, CAPTCHA, security headers, and custom login URL behind Pro. At the same $99/year price point, SiteFort provides more at the free tier and comparable value at Pro. If you need backups bundled with security in one subscription, the Kadence bundle at $199/year is worth comparing directly.
Server-side vs cloud scanning, Cloudflare sync, free tier differences.
Plugin vs DNS proxy WAF, Cloudflare compatibility, and cleanup costs.
Free plan depth, automated cleanup, plan flexibility, agency pricing.
35-capability table covering all five plugins in one place.
See for yourself in 60 seconds.
Install SiteFort free alongside your current security plugin. Run one scan. Compare detection, performance, and reporting against what you have today.