Defender Security vs Kadence Security (formerly Solid Security)
Updated 5 Oct 2026. 26 features compared side by side.
WPMU DEV's WordPress security plugin with malware scanning, AntiBot firewall, 2FA with passkeys, hardening and audit logs; Pro adds scheduled scans.
Login-focused WordPress security plugin (formerly Solid Security / iThemes Security) with 2FA, brute-force protection and Patchstack virtual patching in Pro.
Choose Defender Security if…
- You need malware removal
- You want the lower entry price ($60/yr vs $299/yr)
- You weigh user ratings (4.8 vs 4.6 on WordPress.org)
Choose Kadence Security (formerly Solid Security) if…
- You need virtual patching and off-site scanning
- You also want SSL / HTTPS tools and auto-update vulnerable plugins
- You prefer the more widely used option
Defender Security includes 1 feature that Kadence Security (formerly Solid Security) lacks, including Malware removal; Kadence Security (formerly Solid Security) has 4 that Defender Security lacks, including Off-site scanning, SSL / HTTPS tools and Virtual patching. Both include 19 of the 26 features we track. 1 feature is not yet verified for one or both plugins.
At a glance
Feature comparison
Click a screenshot to see both plugins side by side.
Firewall & blocking6/75/7
Plugin offers lockouts, bot and UA blocking; the request-filtering WAF is for WPMU DEV-hosted sites only.
Firewall with Patchstack rules and custom request rules is part of Pro.
No proxy in front of the site; the hosted WAF is limited to WPMU DEV hosting.
Firewall runs inside WordPress on your server.
Configurable lockouts after failed logins (default 5 in 300 seconds).
Local lockouts plus network-wide brute-force protection in the free plugin.
reCAPTCHA or Cloudflare Turnstile for login, registration and reset forms.
Pro CAPTCHA on login, registration, reset and comments (reCAPTCHA, hCaptcha, Turnstile).
404 detection, malicious bot trap and user-agent banning throttle abusive crawlers.
No documented throttling for crawlers or bots found.
Location banning using the free MaxMind GeoLite2 database.
Restrict Admin Access by Country limits admin logins only; tier not stated.
AntiBot Global Firewall blocks IPs from data across 750K+ sites; needs a WPMU DEV connection.
Network Brute Force Protection blocks IPs reported across ~1M sites.
Scanning & cleanup5/65/6
Free scan for suspicious code, injections and backdoors.
Site Scan checks Google Safe Browsing; no signature-based file malware scan.
Compares core, plugin and theme files with WordPress.org originals.
File change detection flags modified files; not a full original-file comparison.
Checks active plugins, themes and core against known vulnerability registries.
Site Scan checks core, plugins and themes for known vulnerabilities.
Scheduled scans with reports are Pro-only; free scans are manual.
Site Scan runs 4x daily free, hourly in Pro.
Scans run on the site's own server (with a 3-hour timeout).
Site Scan is processed through the vendor's scanning service; file checks run locally.
Safe Repair and quarantine of infected files are Pro; no free cleanup service.
No malware cleanup tool or service included.
Login security5/55/5
Authenticator app, backup codes and email fallback; can be enforced per role.
2FA via authenticator app, email or backup codes in the free plugin.
WebAuthn login with biometrics or USB hardware security keys.
Passkey (WebAuthn) login requires Pro; not available on multisite.
Blocks pwned passwords and can force a site-wide password reset.
Create and enforce password requirements by user group.
Mask Login Area replaces wp-login.php and wp-admin with a custom slug.
Hide Login URL tool moves the login page.
Session-hijack protection and login duration control, but no active-session list.
Pro Trusted Devices helps block session hijacking; no full session manager found.
Hardening2/55/5
One-click tweaks: disable XML-RPC and file editor, stop user enumeration, block PHP in uploads.
Advanced tools: change user ID 1, DB prefix, file permissions, salts, wp-config rules.
No HTTPS enforcement or mixed-content tools in the hardening list.
Free option to enforce SSL across the site.
Hardening includes adding headers such as HSTS and XSS protection.
Settings for X-Frame-Options, X-Content-Type-Options, Referrer-Policy and CSP; no HSTS.
No virtual patching rules are offered.
Patchstack virtual patching blocks exploits before vendor fixes.
Flags outdated or vulnerable plugins with manual update buttons only.
Version Management can auto-update or patch vulnerable software.
Monitoring & management3/33/3
Audit log of logins, users, content, plugins and settings; CSV export.
User logging of logins, plugin, theme and content changes is Pro.
Lockout and scan notifications by email; automated scheduled reports with Pro.
Security events and lockout notifications; site scan alert emails.
The Hub manages IP lists across sites with a free account; full reports and management with Pro.
Kadence Central multi-site portal is included in the Elite plan.
Statuses: Yes Pro Add-on Partial 3rd-party No ?
Pricing compared
Defender Security Freemium
| Free | $0 |
|---|---|
| Pro Basic | $60 per year, 1 site |
| Pro Standard | $100 per year, 3 sites |
| Pro Plus | $200 per year, 10 sites |
| WPMU DEV Premium | $1,200 per year, Unlimited |
Kadence Security (formerly Solid Security) Freemium
| Free | $0 |
|---|---|
| Kadence Pro | $299 per year, Not stated |
| Kadence Elite | $499 per year, Not stated |
Downloads trend
Defender Security
4,662 downloads last week
Kadence Security (formerly Solid Security)
57,514 downloads last week
Verdict
Defender Security and Kadence Security (formerly Solid Security) are closely matched on features (79/100 and 77/100). The differences are in the details: Defender Security adds malware removal, while Kadence Security (formerly Solid Security) adds virtual patching and off-site scanning. Paid plans start at $60/yr for Defender Security and $299/yr for Kadence Security (formerly Solid Security). Check the features you rely on in the table below before deciding.
Biggest differences
Defender Security: paid version (Pro). Kadence Security (formerly Solid Security): not included. Safe Repair and quarantine of infected files are Pro; no free cleanup service.
Defender Security: not included. Kadence Security (formerly Solid Security): paid version (Kadence Pro). Patchstack virtual patching blocks exploits before vendor fixes.
Defender Security: not included. Kadence Security (formerly Solid Security): partial. Site Scan is processed through the vendor's scanning service; file checks run locally.
Defender Security: not included. Kadence Security (formerly Solid Security): included. Free option to enforce SSL across the site.
Defender Security: not included. Kadence Security (formerly Solid Security): paid version (Kadence Pro). Version Management can auto-update or patch vulnerable software.
Written from the feature, pricing and install data on this page, not from hands-on testing. How we compare.
Which would you choose?
0 votes so far. Vote to see the results.
FAQ
Which is better, Defender Security or Kadence Security (formerly Solid Security)?
Defender Security and Kadence Security (formerly Solid Security) are closely matched on features (79/100 and 77/100). The differences are in the details: Defender Security adds malware removal, while Kadence Security (formerly Solid Security) adds virtual patching and off-site scanning. Paid plans start at $60/yr for Defender Security and $299/yr for Kadence Security (formerly Solid Security). Check the features you rely on in the table below before deciding.
Which has more features?
Kadence Security (formerly Solid Security) includes 23 of the 26 features we track, against 21 for Defender Security. Feature count is only part of the picture; check which of the differences matter to you.
Is Defender Security free?
Defender Security has a free version on WordPress.org. Paid plans start at $60/yr.
Is Kadence Security (formerly Solid Security) free?
Kadence Security (formerly Solid Security) has a free version on WordPress.org. Paid plans start at $299/yr.
Feature data last changed 5 Oct 2026. Spotted something wrong? Suggest an edit to Defender Security or Kadence Security (formerly Solid Security). Some links are affiliate links. We may earn a commission at no cost to you; it never affects our data or rankings.