Shield Security vs Kadence Security (formerly Solid Security)
Updated 5 Oct 2026. 26 features compared side by side.
Automated WordPress security plugin with firewall, silentCAPTCHA bot detection, 2FA and audit log; ShieldPRO adds malware and vulnerability scanning.
Login-focused WordPress security plugin (formerly Solid Security / iThemes Security) with 2FA, brute-force protection and Patchstack virtual patching in Pro.
Choose Shield Security if…
- You need malware removal
- You want the more complete feature set (84/100 vs 77/100)
- You want the lower entry price ($149/yr vs $299/yr)
- You weigh user ratings (4.8 vs 4.6 on WordPress.org)
Choose Kadence Security (formerly Solid Security) if…
- You need virtual patching and country blocking
- You also want off-site scanning and SSL / HTTPS tools
- You prefer the more widely used option
Shield Security includes 1 feature that Kadence Security (formerly Solid Security) lacks, including Malware removal; Kadence Security (formerly Solid Security) has 4 that Shield Security lacks, including Country blocking, Off-site scanning and SSL / HTTPS tools. Both include 19 of the 26 features we track. 1 feature is not yet verified for one or both plugins.
At a glance
Feature comparison
Click a screenshot to see both plugins side by side.
Firewall & blocking5/75/7
Firewall rules block malicious requests in the free plugin.
Firewall with Patchstack rules and custom request rules is part of Pro.
All protection runs on your own server; no vendor proxy.
Firewall runs inside WordPress on your server.
Failed logins add offense points and trigger automatic IP blocks.
Local lockouts plus network-wide brute-force protection in the free plugin.
Invisible silentCAPTCHA protects login and registration without a puzzle.
Pro CAPTCHA on login, registration, reset and comments (reCAPTCHA, hCaptcha, Turnstile).
Per-IP traffic rate limiting and DoS protection are ShieldPRO features.
No documented throttling for crawlers or bots found.
Shield has no geo-blocking; its blog recommends a separate plugin.
Restrict Admin Access by Country limits admin logins only; tier not stated.
Daily CrowdSec-backed IP blocklists in free; advanced CrowdSec intelligence on Plus.
Network Brute Force Protection blocks IPs reported across ~1M sites.
Scanning & cleanup5/65/6
AI-based scanner for known and unknown PHP malware requires ShieldPRO.
Site Scan checks Google Safe Browsing; no signature-based file malware scan.
Core files checked against official checksums free; plugin/theme file checks need PRO.
File change detection flags modified files; not a full original-file comparison.
Vulnerability scanning of installed plugins and themes is a ShieldPRO feature.
Site Scan checks core, plugins and themes for known vulnerabilities.
Scans run automatically in the background; PRO allows more frequent scans.
Site Scan runs 4x daily free, hourly in Pro.
Scans run on the site's own server.
Site Scan is processed through the vendor's scanning service; file checks run locally.
Free auto-repairs core files; PRO repairs plugins/themes and deletes malware. No expert cleanup.
No malware cleanup tool or service included.
Login security5/55/5
Email codes, authenticator apps and YubiKey OTP in the free plugin.
2FA via authenticator app, email or backup codes in the free plugin.
Passkey and WebAuthn login plus backup codes are ShieldPRO features.
Passkey (WebAuthn) login requires Pro; not available on multisite.
Password policies are listed in the free tier.
Create and enforce password requirements by user group.
Free option to hide the WordPress login URL.
Hide Login URL tool moves the login page.
User session management is available free; user suspension is PRO.
Pro Trusted Devices helps block session hijacking; no full session manager found.
Hardening3/55/5
Locks down XML-RPC and REST API and blocks user enumeration.
Advanced tools: change user ID 1, DB prefix, file permissions, salts, wp-config rules.
No HTTPS enforcement or mixed-content tools in the feature list.
Free option to enforce SSL across the site.
Security headers and Content Security Policy are PRO features.
Settings for X-Frame-Options, X-Content-Type-Options, Referrer-Policy and CSP; no HSTS.
No virtual patching rules for specific plugin vulnerabilities are offered.
Patchstack virtual patching blocks exploits before vendor fixes.
Vulnerability scanner can auto-upgrade affected plugins once a fix is released.
Version Management can auto-update or patch vulnerable software.
Monitoring & management3/33/3
Full activity log and traffic monitoring free; third-party plugin logging on Enterprise.
User logging of logins, plugin, theme and content changes is Pro.
Security reports in free; instant vulnerability alerts with PRO.
Security events and lockout notifications; site scan alert emails.
Multi-site management via MainWP integration and settings sync is PRO.
Kadence Central multi-site portal is included in the Elite plan.
Statuses: Yes Pro Add-on Partial 3rd-party No ?
Pricing compared
Shield Security Freemium
| Free | $0 |
|---|---|
| Plus | $149 per year, 1 site |
| Plus (10 sites) | $399 per year, 10 sites |
| Enterprise | $199 per year, 1 site |
Kadence Security (formerly Solid Security) Freemium
| Free | $0 |
|---|---|
| Kadence Pro | $299 per year, Not stated |
| Kadence Elite | $499 per year, Not stated |
Downloads trend
Shield Security
16,736 downloads last week
Kadence Security (formerly Solid Security)
57,514 downloads last week
Verdict
Shield Security scores higher on our feature checklist (84/100 against 77/100) and includes malware removal that Kadence Security (formerly Solid Security) does not. Kadence Security (formerly Solid Security) still has the edge on virtual patching and country blocking. Paid plans start at $149/yr for Shield Security and $299/yr for Kadence Security (formerly Solid Security). Check the features you rely on in the table below before deciding.
Biggest differences
Shield Security: paid version (Plus). Kadence Security (formerly Solid Security): not included. Free auto-repairs core files; PRO repairs plugins/themes and deletes malware. No expert cleanup.
Shield Security: not included. Kadence Security (formerly Solid Security): paid version (Kadence Pro). Patchstack virtual patching blocks exploits before vendor fixes.
Shield Security: not included. Kadence Security (formerly Solid Security): partial. Restrict Admin Access by Country limits admin logins only; tier not stated.
Shield Security: not included. Kadence Security (formerly Solid Security): partial. Site Scan is processed through the vendor's scanning service; file checks run locally.
Shield Security: not included. Kadence Security (formerly Solid Security): included. Free option to enforce SSL across the site.
Written from the feature, pricing and install data on this page, not from hands-on testing. How we compare.
Which would you choose?
0 votes so far. Vote to see the results.
FAQ
Which is better, Shield Security or Kadence Security (formerly Solid Security)?
Shield Security scores higher on our feature checklist (84/100 against 77/100) and includes malware removal that Kadence Security (formerly Solid Security) does not. Kadence Security (formerly Solid Security) still has the edge on virtual patching and country blocking. Paid plans start at $149/yr for Shield Security and $299/yr for Kadence Security (formerly Solid Security). Check the features you rely on in the table below before deciding.
Which has more features?
Kadence Security (formerly Solid Security) includes 23 of the 26 features we track, against 21 for Shield Security. Feature count is only part of the picture; check which of the differences matter to you.
Is Shield Security free?
Shield Security has a free version on WordPress.org. Paid plans start at $149/yr.
Is Kadence Security (formerly Solid Security) free?
Kadence Security (formerly Solid Security) has a free version on WordPress.org. Paid plans start at $299/yr.
Feature data last changed 5 Oct 2026. Spotted something wrong? Suggest an edit to Shield Security or Kadence Security (formerly Solid Security). Some links are affiliate links. We may earn a commission at no cost to you; it never affects our data or rankings.