All-In-One Security (AIOS) vs Kadence Security (formerly Solid Security)
Updated 5 Oct 2026. 26 features compared side by side.
Free WordPress security plugin from TeamUpdraft covering login protection, firewall rules, file checks and an audit log, with a low-cost Premium upgrade.
Login-focused WordPress security plugin (formerly Solid Security / iThemes Security) with 2FA, brute-force protection and Patchstack virtual patching in Pro.
Choose All-In-One Security (AIOS) if…
- You need malware removal
- You want the lower entry price ($89/yr vs $299/yr)
Choose Kadence Security (formerly Solid Security) if…
- You need vulnerability alerts and real-time IP blocklist
- You also want virtual patching and passkeys / WebAuthn
- You want the more complete feature set (77/100 vs 61/100)
All-In-One Security (AIOS) includes 1 feature that Kadence Security (formerly Solid Security) lacks, including Malware removal; Kadence Security (formerly Solid Security) has 6 that All-In-One Security (AIOS) lacks, including Real-time IP blocklist, Vulnerability alerts and Passkeys / WebAuthn. Both include 15 of the 26 features we track. 3 features are not yet verified for one or both plugins.
At a glance
Feature comparison
Click a screenshot to see both plugins side by side.
Firewall & blocking5/75/7
PHP and .htaccess firewall with 6G/8G rules, XSS and XML-RPC protection.
Firewall with Patchstack rules and custom request rules is part of Pro.
All rules run on your own server.
Firewall runs inside WordPress on your server.
Limits failed logins with configurable lockouts.
Local lockouts plus network-wide brute-force protection in the free plugin.
Math CAPTCHA, reCAPTCHA or Turnstile on login, registration, reset and more.
Pro CAPTCHA on login, registration, reset and comments (reCAPTCHA, hCaptcha, Turnstile).
Free blocks fake Googlebots and blank-UA POSTs; Smart 404 bot blocking is Premium.
No documented throttling for crawlers or bots found.
Block countries site-wide or on chosen pages, with IP whitelisting.
Restrict Admin Access by Country limits admin logins only; tier not stated.
Manual IP and user-agent blacklists only; no shared threat-intel feed.
Network Brute Force Protection blocks IPs reported across ~1M sites.
Scanning & cleanup4/65/6
Automatic malware scans with search-engine blacklist checks.
Site Scan checks Google Safe Browsing; no signature-based file malware scan.
File change scanner reports changes since the last scan, not against originals.
File change detection flags modified files; not a full original-file comparison.
No vulnerability database or plugin/theme vulnerability checks.
Site Scan checks core, plugins and themes for known vulnerabilities.
File change scans can be scheduled; Premium malware scans run automatically.
Site Scan runs 4x daily free, hourly in Pro.
Could not confirm where Premium malware scans are processed.
Site Scan is processed through the vendor's scanning service; file checks run locally.
Premium includes malware removal advice from experts, not a cleanup service.
No malware cleanup tool or service included.
Login security4/55/5
TOTP 2FA via Google/Microsoft Authenticator or Authy; advanced options in Premium.
2FA via authenticator app, email or backup codes in the free plugin.
No passkey or WebAuthn login option.
Passkey (WebAuthn) login requires Pro; not available on multisite.
Enforce strong passwords and check against Have I Been Pwned.
Create and enforce password requirements by user group.
Rename the login page to a custom slug.
Hide Login URL tool moves the login page.
View logged-in users, force individual or bulk logout, auto-logout.
Pro Trusted Devices helps block session hijacking; no full session manager found.
Hardening2/55/5
Disable file editing, XML-RPC, user enumeration; protect sensitive files.
Advanced tools: change user ID 1, DB prefix, file permissions, salts, wp-config rules.
No HTTPS enforcement or mixed-content fixer.
Free option to enforce SSL across the site.
Limited header protections such as frame blocking; no full header manager.
Settings for X-Frame-Options, X-Content-Type-Options, Referrer-Policy and CSP; no HSTS.
Static rule sets only; no rules for specific plugin vulnerabilities.
Patchstack virtual patching blocks exploits before vendor fixes.
Does not auto-update vulnerable plugins.
Version Management can auto-update or patch vulnerable software.
Monitoring & management2/33/3
Audit log of logins, plugin/theme changes and core updates, CSV export.
User logging of logins, plugin, theme and content changes is Pro.
Email notifications for file changes and lockouts; Premium uptime alerts.
Security events and lockout notifications; site scan alert emails.
No multi-site security dashboard documented.
Kadence Central multi-site portal is included in the Elite plan.
Statuses: Yes Pro Add-on Partial 3rd-party No ?
Pricing compared
All-In-One Security (AIOS) Freemium
| Free | $0 |
|---|---|
| Personal | $89 per year, 2 sites |
| Business | $149 per year, 10 sites |
| Agency | $249 per year, 35 sites |
| Enterprise | $349 per year, Unlimited |
Kadence Security (formerly Solid Security) Freemium
| Free | $0 |
|---|---|
| Kadence Pro | $299 per year, Not stated |
| Kadence Elite | $499 per year, Not stated |
Downloads trend
All-In-One Security (AIOS)
702,766 downloads last week
Kadence Security (formerly Solid Security)
57,514 downloads last week
Verdict
Kadence Security (formerly Solid Security) scores higher on our feature checklist (77/100 against 61/100) and includes vulnerability alerts, real-time IP blocklist and virtual patching that All-In-One Security (AIOS) does not. All-In-One Security (AIOS) still has the edge on malware removal. Paid plans start at $89/yr for All-In-One Security (AIOS) and $299/yr for Kadence Security (formerly Solid Security). Check the features you rely on in the table below before deciding.
Biggest differences
All-In-One Security (AIOS): not included. Kadence Security (formerly Solid Security): included. Site Scan checks core, plugins and themes for known vulnerabilities.
All-In-One Security (AIOS): not included. Kadence Security (formerly Solid Security): included. Network Brute Force Protection blocks IPs reported across ~1M sites.
All-In-One Security (AIOS): partial. Kadence Security (formerly Solid Security): not included. Premium includes malware removal advice from experts, not a cleanup service.
All-In-One Security (AIOS): not included. Kadence Security (formerly Solid Security): paid version (Kadence Pro). Patchstack virtual patching blocks exploits before vendor fixes.
All-In-One Security (AIOS): not included. Kadence Security (formerly Solid Security): paid version (Kadence Pro). Passkey (WebAuthn) login requires Pro; not available on multisite.
All-In-One Security (AIOS): not included. Kadence Security (formerly Solid Security): included. Free option to enforce SSL across the site.
Written from the feature, pricing and install data on this page, not from hands-on testing. How we compare.
Which would you choose?
0 votes so far. Vote to see the results.
FAQ
Which is better, All-In-One Security (AIOS) or Kadence Security (formerly Solid Security)?
Kadence Security (formerly Solid Security) scores higher on our feature checklist (77/100 against 61/100) and includes vulnerability alerts, real-time IP blocklist and virtual patching that All-In-One Security (AIOS) does not. All-In-One Security (AIOS) still has the edge on malware removal. Paid plans start at $89/yr for All-In-One Security (AIOS) and $299/yr for Kadence Security (formerly Solid Security). Check the features you rely on in the table below before deciding.
Which has more features?
Kadence Security (formerly Solid Security) includes 23 of the 26 features we track, against 17 for All-In-One Security (AIOS). Feature count is only part of the picture; check which of the differences matter to you.
Is All-In-One Security (AIOS) free?
All-In-One Security (AIOS) has a free version on WordPress.org. Paid plans start at $89/yr.
Is Kadence Security (formerly Solid Security) free?
Kadence Security (formerly Solid Security) has a free version on WordPress.org. Paid plans start at $299/yr.
Feature data last changed 5 Oct 2026. Spotted something wrong? Suggest an edit to All-In-One Security (AIOS) or Kadence Security (formerly Solid Security). Some links are affiliate links. We may earn a commission at no cost to you; it never affects our data or rankings.