Really Simple Security vs Kadence Security (formerly Solid Security)
Updated 5 Oct 2026. 26 features compared side by side.
SSL migration and lightweight hardening plugin (formerly Really Simple SSL) with vulnerability alerts, plus a Pro firewall, 2FA and security headers.
Login-focused WordPress security plugin (formerly Solid Security / iThemes Security) with 2FA, brute-force protection and Patchstack virtual patching in Pro.
Choose Really Simple Security if…
- You want the lower entry price ($69/yr vs $299/yr)
- You prefer the more widely used option
- You weigh user ratings (4.9 vs 4.6 on WordPress.org)
Choose Kadence Security (formerly Solid Security) if…
- You need malware scanner and activity log
- You also want real-time IP blocklist and file change detection
- You want the more complete feature set (77/100 vs 54/100)
Kadence Security (formerly Solid Security) has 8 that Really Simple Security lacks, including Real-time IP blocklist, Malware scanner and File change detection. Both include 15 of the 26 features we track. 1 feature is not yet verified for one or both plugins.
At a glance
Feature comparison
Click a screenshot to see both plugins side by side.
Firewall & blocking5/75/7
Pro firewall uses automated access rules (404s, regions, IPs) rather than payload inspection.
Firewall with Patchstack rules and custom request rules is part of Pro.
Rules run on your own server.
Firewall runs inside WordPress on your server.
Limit Login Attempts with configurable thresholds.
Local lockouts plus network-wide brute-force protection in the free plugin.
hCaptcha or reCAPTCHA with Limit Login Attempts.
Pro CAPTCHA on login, registration, reset and comments (reCAPTCHA, hCaptcha, Turnstile).
404 blocking stops crawlers triggering unusual numbers of 404s.
No documented throttling for crawlers or bots found.
Region blocking allows or blocks access by region.
Restrict Admin Access by Country limits admin logins only; tier not stated.
Pro offers manual IP block/allow lists; no shared threat-intel feed.
Network Brute Force Protection blocks IPs reported across ~1M sites.
Scanning & cleanup2/65/6
Does not scan files or database for malware.
Site Scan checks Google Safe Browsing; no signature-based file malware scan.
No comparison of files with originals.
File change detection flags modified files; not a full original-file comparison.
Notifies about vulnerable plugins, themes and core (WP Vulnerability data).
Site Scan checks core, plugins and themes for known vulnerabilities.
Vulnerability checks recur automatically; there are no malware scans.
Site Scan runs 4x daily free, hourly in Pro.
No vendor-side scanning service.
Site Scan is processed through the vendor's scanning service; file checks run locally.
No cleanup tool or service.
No malware cleanup tool or service included.
Login security4/55/5
Free email 2FA enforceable per role; TOTP is Pro.
2FA via authenticator app, email or backup codes in the free plugin.
Passkey (WebAuthn) login in Pro.
Passkey (WebAuthn) login requires Pro; not available on multisite.
Enforce strong passwords and periodic password changes.
Create and enforce password requirements by user group.
Custom login URL is part of advanced hardening.
Hide Login URL tool moves the login page.
No active session viewer or concurrent-login limits.
Pro Trusted Devices helps block session hijacking; no full session manager found.
Hardening4/55/5
Disable XML-RPC, user enumeration, directory browsing, uploads code execution.
Advanced tools: change user ID 1, DB prefix, file permissions, salts, wp-config rules.
One-click HTTPS, 301 redirects, secure cookies; mixed-content fixer in Pro.
Free option to enforce SSL across the site.
HSTS, X-Frame-Options, Referrer-Policy and auto-generated CSP.
Settings for X-Frame-Options, X-Content-Type-Options, Referrer-Policy and CSP; no HSTS.
No exploit-blocking rules for specific vulnerabilities.
Patchstack virtual patching blocks exploits before vendor fixes.
Can force updates or quarantine vulnerable plugins and themes.
Version Management can auto-update or patch vulnerable software.
Monitoring & management1/33/3
No audit trail of admin and content changes.
User logging of logins, plugin, theme and content changes is Pro.
Sends notifications when vulnerabilities are found.
Security events and lockout notifications; site scan alert emails.
Only a multisite network settings page; no multi-site dashboard.
Kadence Central multi-site portal is included in the Elite plan.
Statuses: Yes Pro Add-on Partial 3rd-party No ?
Pricing compared
Really Simple Security Freemium
| Free | $0 |
|---|---|
| Personal | $69 per year, 1 site |
| Professional | $119 per year, 5 sites |
| Agency | $209 per year, 25 sites |
Kadence Security (formerly Solid Security) Freemium
| Free | $0 |
|---|---|
| Kadence Pro | $299 per year, Not stated |
| Kadence Elite | $499 per year, Not stated |
Downloads trend
Really Simple Security
1,242,786 downloads last week
Kadence Security (formerly Solid Security)
56,258 downloads last week
Verdict
Kadence Security (formerly Solid Security) scores higher on our feature checklist (77/100 against 54/100) and includes malware scanner, activity log and real-time IP blocklist that Really Simple Security does not. Paid plans start at $69/yr for Really Simple Security and $299/yr for Kadence Security (formerly Solid Security). Check the features you rely on in the table below before deciding.
Biggest differences
Really Simple Security: not included. Kadence Security (formerly Solid Security): partial. Site Scan checks Google Safe Browsing; no signature-based file malware scan.
Really Simple Security: not included. Kadence Security (formerly Solid Security): paid version (Kadence Pro). User logging of logins, plugin, theme and content changes is Pro.
Really Simple Security: not included. Kadence Security (formerly Solid Security): included. Network Brute Force Protection blocks IPs reported across ~1M sites.
Really Simple Security: not included. Kadence Security (formerly Solid Security): partial. File change detection flags modified files; not a full original-file comparison.
Really Simple Security: not included. Kadence Security (formerly Solid Security): paid version (Kadence Pro). Patchstack virtual patching blocks exploits before vendor fixes.
Really Simple Security: not included. Kadence Security (formerly Solid Security): partial. Site Scan is processed through the vendor's scanning service; file checks run locally.
Written from the feature, pricing and install data on this page, not from hands-on testing. How we compare.
Which would you choose?
0 votes so far. Vote to see the results.
FAQ
Which is better, Really Simple Security or Kadence Security (formerly Solid Security)?
Kadence Security (formerly Solid Security) scores higher on our feature checklist (77/100 against 54/100) and includes malware scanner, activity log and real-time IP blocklist that Really Simple Security does not. Paid plans start at $69/yr for Really Simple Security and $299/yr for Kadence Security (formerly Solid Security). Check the features you rely on in the table below before deciding.
Which has more features?
Kadence Security (formerly Solid Security) includes 23 of the 26 features we track, against 16 for Really Simple Security. Feature count is only part of the picture; check which of the differences matter to you.
Is Really Simple Security free?
Really Simple Security has a free version on WordPress.org. Paid plans start at $69/yr.
Is Kadence Security (formerly Solid Security) free?
Kadence Security (formerly Solid Security) has a free version on WordPress.org. Paid plans start at $299/yr.
Feature data last changed 5 Oct 2026. Spotted something wrong? Suggest an edit to Really Simple Security or Kadence Security (formerly Solid Security). Some links are affiliate links. We may earn a commission at no cost to you; it never affects our data or rankings.