| Features | Free | Personal | Business |
| Recommended For | Basic Login Protection For Entry-Level WordPress Websites. | Websites that are Self-Managed and Require Optimal Safeguards Against Present and Future Hazards. | Websites Under Frequent Attack That Require The Most Comprehensive Protection To Protect Sensitive Data. |
| Limit Login Attempts | ✓ | ✓ | ✓ |
| Configurable Lockout Timings | ✓ | ✓ | ✓ |
| GDPR Compliance | ✓ | ✓ | ✓ |
| WordPress Login Page Protect (Includes WooCommerce & XMLRPC) | ✓ | ✓ | ✓ |
| Safelist/Denylist (Supports IP Ranges) | ✓ | ✓ | ✓ |
| Lockouts Log | ✓ | ✓ | ✓ |
| Configurable Email Notifications On Lockouts | ✓ | ✓ | ✓ |
| Two-Factor Authentication | ✓ | ✓ | ✓ |
| Trusted IP Origins | ✓ | Auto | Auto |
| Login Firewall | ✓ | ✓ | |
| Performance Optimizer - Brute Force Attacks Absorbed In The Cloud | 50k Requests. | 300k Requests. | |
| Access Active Cloud Denylist | ✓ | ||
| Auto IP Denylist | ✓ | ||
| Deny By Country | ✓ | ||
| Access IP Denylist of Known Malicious IPs | ✓ | ||
| XML-RPC Denial | ✓ | ✓ | |
| Enriched IP Data | ✓ | ✓ | |
| Successful Login Logs | ✓ | ✓ | |
| IP Throttling | ✓ | ✓ | |
| Synchronized IP Safelist/Denylist Between Multiple Domains | ✓ | ✓ | |
| Synchronized Lockouts Check Between Multiple Domains | ✓ | ✓ | |
| Supports IPV6 Ranges for Safelist/Denylist | ✓ | ✓ | |
| Visual Metrics | ✓ | ✓ | |
| CSV Download of All IP Data | ✓ | ✓ | |
| Intelligent IP Denial | ✓ | ✓ | |
| Auto Backup Of All IP Data | ✓ | ✓ | |
| Enhanced Lockouts Log | ✓ | ✓ | |
| Unlock The Locked Admin | ✓ | ✓ | |
| Email Support | ✓ | ✓ | |
We also offer Enterprise plans with direct API access
to real-time IP data for non-WordPress websites and Apps.
Not ready to go Premium?
Download our FREE version and join over 2.5 million active WordPress users.
Recommended By The Most Trusted Sources In WordPress
Frequently asked questions
The free plugin limits login attempts on your own site. Premium moves protection to the cloud and adds a login firewall, IP throttling, successful login logs and detailed IP data. Business also blocks whole countries and stops more than 500,000 known malicious IPs before they reach your login.
Personal is for blogs, portfolios and side projects. Business is for sites that make money, such as shops, memberships and client sites. Agency covers 10 or more sites you manage for other people, and you can add or remove domains anytime.
No. It takes about 5 minutes: you'll get a setup code and paste it into your plugin settings. Watch the quick setup video.
Common signs: your lockout log grows quickly, you get lots of lockout emails, your site slows down for no clear reason, or your host warns you about unusual login traffic.
Yes to both. Every new plan comes with a 7-day money-back guarantee: if Premium isn't right for you, contact us within 7 days of purchase for a full refund. There are no contracts, and you can cancel from your account at any time. After the first 7 days, your plan stays active until the end of the period you've paid for, and payments for the current billing period aren't refunded.
We accept all major credit cards and PayPal.
Yes. Conflicts are rare, but test your login after installing any other security plugin to make sure everything works.