WordPress security plugin pricing: plans for every size of install
Silent Threads’s WordPress security plugin pricing is simple: Basic is $9 a month for 1 site, Pro $29 a month for 3 sites, and Agency $99 a month for 10 sites. Every plan, Basic included, has the firewall with 356 built-in rules, brute-force protection, two-factor authentication and one-click hardening. Every plan starts with a 30-day trial.
Silent Threads Security Pro plans
Basic
Core protection for a single site
1 site
- Malware scanning (Quick/Standard)
- Vulnerability scanning
- Database scanning
- Configuration scanning
- Attack surface scanning
- Persistence scanning
- Core integrity scanning
- WAF engine (356 rules)
- Brute-force protection
- IP blocking
- Rate limiting
- Login security & hardening
Pro
Premium protection for up to 3 sites
3 sites · premium features included
Everything in Basic, plus:
- Deep / Full scans
- Secrets scanning
- Media files scanning
- JS & card-skimmer scanning
- Security baseline
- Premium plugin drift detection
- Country blocking
- WAF rules manager
- Outbound monitor
- Progressive WAF response
- Community threat blocklist
- WAF rule sandbox
- Live CVE correlation
- Bundled JS dependency scan
- Canary credentials
- Forensic evidence bundle
- Runtime threat detection
Agency
Premium protection across a whole client roster
10 sites · premium features included
Everything in Pro, plus:
- Multi-site Hub
- Cross-site threat intel
- SOAR playbooks
Card checkout isn't live yet — choosing a paid plan starts your 30-day trial and records which plan you're interested in. See the FAQ below.
Every feature, side by side
Every plan includes the firewall with 356 built-in rules. Pro includes everything in Basic; Agency includes everything in Pro.
| Feature | Basic $9/mo | Pro $29/mo | Agency $99/mo |
|---|---|---|---|
| Sites per license | |||
| Sites | 1 | 3 | 10 |
| Scan modes | |||
| Quick scan | ✓ | ✓ | ✓ |
| Standard scan | ✓ | ✓ | ✓ |
| Deep scan | — | ✓ | ✓ |
| Custom folders scan | — | — | ✓ |
| Included on every plan | |||
| Web Application Firewall (WAF) | ✓ | ✓ | ✓ |
| Brute-force protection | ✓ | ✓ | ✓ |
| Rate limiting | ✓ | ✓ | ✓ |
| Two-factor authentication (2FA) | ✓ | ✓ | ✓ |
| Strong password policy | ✓ | ✓ | ✓ |
| Suspicious-username blocking | ✓ | ✓ | ✓ |
| One-click hardening | ✓ | ✓ | ✓ |
| Weekly security email digest | ✓ | ✓ | ✓ |
| Instant new-administrator alert | ✓ | ✓ | ✓ |
| Basic | |||
| Malware Scanner (Quick & Standard) | ✓ | ✓ | ✓ |
| Vulnerability Scanner | ✓ | ✓ | ✓ |
| Database Scanner | ✓ | ✓ | ✓ |
| Configuration Scanner | ✓ | ✓ | ✓ |
| Attack Surface Scanner | ✓ | ✓ | ✓ |
| Persistence Scanner | ✓ | ✓ | ✓ |
| Core File Integrity | ✓ | ✓ | ✓ |
| Added in Pro | |||
| Deep & Full Malware Scans | — | ✓ | ✓ |
| Secret Scanner | — | ✓ | ✓ |
| Media File Scanner | — | ✓ | ✓ |
| JS & Card-Skimmer Scanner | — | ✓ | ✓ |
| Security Baseline | — | ✓ | ✓ |
| Premium Plugin Drift | — | ✓ | ✓ |
| Bundled JS Dependency Scan | — | ✓ | ✓ |
| Live CVE Correlation | — | ✓ | ✓ |
| Runtime Malware Detection | — | ✓ | ✓ |
| Canary Credentials | — | ✓ | ✓ |
| Forensic Evidence Bundle | — | ✓ | ✓ |
| Country Blocking | — | ✓ | ✓ |
| WAF Rules Manager | — | ✓ | ✓ |
| WAF Rule Sandbox | — | ✓ | ✓ |
| Progressive WAF Response | — | ✓ | ✓ |
| Outbound Connection Monitor | — | ✓ | ✓ |
| Community Threat Blocklist | — | ✓ | ✓ |
| Network IP Blocklist | — | ✓ | ✓ |
| Custom Login URL | — | ✓ | ✓ |
| Login reCAPTCHA | — | ✓ | ✓ |
| Bot Login Detection | — | ✓ | ✓ |
| Registration Abuse Prevention | — | ✓ | ✓ |
| New-User Approval Queue | — | ✓ | ✓ |
| Custom Email Alert Schedule | — | ✓ | ✓ |
| Support Tickets | — | ✓ | ✓ |
| Added in Agency | |||
| Custom Folder Scan | — | — | ✓ |
| Multi-Site Hub | — | — | ✓ |
| Cross-Site Threat Intelligence | — | — | ✓ |
| Incident Response Playbooks | — | — | ✓ |
| New-Device Login Approval | — | — | ✓ |
| Session Fingerprinting | — | — | ✓ |
| Active Session Monitoring | — | — | ✓ |
| Auto-Suspend Rogue Admins | — | — | ✓ |
| Step-Up Verification | — | — | ✓ |
| Live Chat Support | — | — | ✓ |
| Live feeds & support | |||
| Live signatures & WAF rules | 30-day delay | Immediate | Immediate |
| Support tickets | — | ✓ | ✓ |
| Live chat | — | — | ✓ |
| In-plugin notifications: a bell and pop-ups when we reply | — | ✓ | ✓ |
Pricing questions
How does the trial work?
Every new license starts with a 30-day trial with every premium feature included. Pick a plan, enter your email, and we send you a license key with a link back into your WordPress admin.
Can I pay by card right now?
Not yet. Choosing a paid plan today starts your 30-day trial with that plan recorded, and we follow up about payment before it ends. You are never charged without setting up payment.
What happens when the trial ends?
Without a paid plan, protection stops until you pick one. Your settings and scan history are kept.
Can I move a license to another site?
Yes. Deactivate it on the old site, in the plugin or from your account, to free the seat, then activate it on the new one.
What does every plan include?
Every plan, Basic included, has the firewall with 356 built-in rules, brute-force protection, rate limiting, 2FA, a strong password policy, suspicious-username blocking, one-click hardening, a weekly security email digest and an instant alert when a new administrator is added.
Do Basic sites get live signatures and WAF rules?
Yes, 30 days after each one is released. Pro and Agency sites get them immediately.
Which support do I get?
Pro includes support tickets. Agency includes tickets and live chat. Replies show up in the plugin as a bell notification and a pop-up.