Jetpack Protect vs Kadence Security (formerly Solid Security)
Updated 5 Oct 2026. 26 features compared side by side.
Automattic's lightweight security plugin with free daily vulnerability scans and brute-force protection, upgradable to Jetpack Scan malware scanning and WAF.
Login-focused WordPress security plugin (formerly Solid Security / iThemes Security) with 2FA, brute-force protection and Patchstack virtual patching in Pro.
Choose Jetpack Protect if…
- You need malware removal
- You want the lower entry price ($119.40/yr vs $299/yr)
Choose Kadence Security (formerly Solid Security) if…
- You need two-factor authentication and one-click hardening
- You also want country blocking and passkeys / WebAuthn
- You want the more complete feature set (77/100 vs 51/100)
- You prefer the more widely used option
Jetpack Protect includes 1 feature that Kadence Security (formerly Solid Security) lacks, including Malware removal; Kadence Security (formerly Solid Security) has 10 that Jetpack Protect lacks, including Country blocking, Two-factor authentication and Passkeys / WebAuthn. Both include 12 of the 26 features we track. 2 features are not yet verified for one or both plugins.
At a glance
Feature comparison
Click a screenshot to see both plugins side by side.
Firewall & blocking4/75/7
Free allows manual IP rules only; automatic WAF rules need Jetpack Scan.
Firewall with Patchstack rules and custom request rules is part of Pro.
WAF runs on your server (optionally before WordPress loads).
Firewall runs inside WordPress on your server.
Blocks botnet and repeated login attempts by default.
Local lockouts plus network-wide brute-force protection in the free plugin.
Math CAPTCHA appears only as a fallback when an IP is blocked.
Pro CAPTCHA on login, registration, reset and comments (reCAPTCHA, hCaptcha, Turnstile).
No crawler or bot throttling controls.
No documented throttling for crawlers or bots found.
No country or geo blocking.
Restrict Admin Access by Country limits admin logins only; tier not stated.
Brute-force protection uses Jetpack network data at login; site-wide lists are manual.
Network Brute Force Protection blocks IPs reported across ~1M sites.
Scanning & cleanup5/65/6
Daily malware scanning with Jetpack Scan.
Site Scan checks Google Safe Browsing; no signature-based file malware scan.
Core file comparison not documented on pages checked.
File change detection flags modified files; not a full original-file comparison.
Daily scans of core, plugins and themes against WPScan data.
Site Scan checks core, plugins and themes for known vulnerabilities.
Automatic daily scans; manual scans can also be triggered.
Site Scan runs 4x daily free, hourly in Pro.
Scans run on Jetpack's cloud infrastructure.
Site Scan is processed through the vendor's scanning service; file checks run locally.
Automated one-click fixes for most detected threats; no human cleanup.
No malware cleanup tool or service included.
Login security0/55/5
No 2FA in the plugin.
2FA via authenticator app, email or backup codes in the free plugin.
No passkey support.
Passkey (WebAuthn) login requires Pro; not available on multisite.
No password rules.
Create and enforce password requirements by user group.
Cannot change the login URL.
Hide Login URL tool moves the login page.
No session tools.
Pro Trusted Devices helps block session hijacking; no full session manager found.
Hardening1/55/5
No hardening toggles such as disabling XML-RPC or file editing.
Advanced tools: change user ID 1, DB prefix, file permissions, salts, wp-config rules.
No HTTPS tools.
Free option to enforce SSL across the site.
No security header settings.
Settings for X-Frame-Options, X-Content-Type-Options, Referrer-Policy and CSP; no HSTS.
Automatic firewall rules block known threats as they are found.
Patchstack virtual patching blocks exploits before vendor fixes.
Recommends updates but does not auto-update vulnerable plugins.
Version Management can auto-update or patch vulnerable software.
Monitoring & management3/33/3
Activity Log page added in v6.1; full 30-day history is in Jetpack Security.
User logging of logins, plugin, theme and content changes is Pro.
Instant email notifications when threats are found.
Security events and lockout notifications; site scan alert emails.
Agencies can track sites and security alerts in the Automattic for Agencies dashboard.
Kadence Central multi-site portal is included in the Elite plan.
Statuses: Yes Pro Add-on Partial 3rd-party No ?
Pricing compared
Jetpack Protect Freemium
| Free | $0 |
|---|---|
| Jetpack Scan | $119.40 per year, 1 site |
| Jetpack Security | $239.40 per year, 1 site |
Kadence Security (formerly Solid Security) Freemium
| Free | $0 |
|---|---|
| Kadence Pro | $299 per year, Not stated |
| Kadence Elite | $499 per year, Not stated |
Downloads trend
Jetpack Protect
4,205 downloads last week
Kadence Security (formerly Solid Security)
57,514 downloads last week
Verdict
Kadence Security (formerly Solid Security) scores higher on our feature checklist (77/100 against 51/100) and includes two-factor authentication, one-click hardening and country blocking that Jetpack Protect does not. Jetpack Protect still has the edge on malware removal. Paid plans start at $119.40/yr for Jetpack Protect and $299/yr for Kadence Security (formerly Solid Security). Check the features you rely on in the table below before deciding.
Biggest differences
Jetpack Protect: not included. Kadence Security (formerly Solid Security): included. 2FA via authenticator app, email or backup codes in the free plugin.
Jetpack Protect: paid version (Jetpack Scan). Kadence Security (formerly Solid Security): not included. Automated one-click fixes for most detected threats; no human cleanup.
Jetpack Protect: not included. Kadence Security (formerly Solid Security): included. Advanced tools: change user ID 1, DB prefix, file permissions, salts, wp-config rules.
Jetpack Protect: not included. Kadence Security (formerly Solid Security): partial. Restrict Admin Access by Country limits admin logins only; tier not stated.
Jetpack Protect: not included. Kadence Security (formerly Solid Security): paid version (Kadence Pro). Passkey (WebAuthn) login requires Pro; not available on multisite.
Jetpack Protect: not included. Kadence Security (formerly Solid Security): included. Create and enforce password requirements by user group.
Written from the feature, pricing and install data on this page, not from hands-on testing. How we compare.
Which would you choose?
0 votes so far. Vote to see the results.
FAQ
Which is better, Jetpack Protect or Kadence Security (formerly Solid Security)?
Kadence Security (formerly Solid Security) scores higher on our feature checklist (77/100 against 51/100) and includes two-factor authentication, one-click hardening and country blocking that Jetpack Protect does not. Jetpack Protect still has the edge on malware removal. Paid plans start at $119.40/yr for Jetpack Protect and $299/yr for Kadence Security (formerly Solid Security). Check the features you rely on in the table below before deciding.
Which has more features?
Kadence Security (formerly Solid Security) includes 23 of the 26 features we track, against 13 for Jetpack Protect. Feature count is only part of the picture; check which of the differences matter to you.
Is Jetpack Protect free?
Jetpack Protect has a free version on WordPress.org. Paid plans start at $119.40/yr.
Is Kadence Security (formerly Solid Security) free?
Kadence Security (formerly Solid Security) has a free version on WordPress.org. Paid plans start at $299/yr.
Feature data last changed 5 Oct 2026. Spotted something wrong? Suggest an edit to Jetpack Protect or Kadence Security (formerly Solid Security). Some links are affiliate links. We may earn a commission at no cost to you; it never affects our data or rankings.