Kadence Security (formerly Solid Security) vs Sucuri Security
Updated 5 Oct 2026. 26 features compared side by side.
Login-focused WordPress security plugin (formerly Solid Security / iThemes Security) with 2FA, brute-force protection and Patchstack virtual patching in Pro.
Free auditing, file integrity and remote scanning plugin from Sucuri that connects to its paid cloud firewall and malware cleanup platform.
Choose Kadence Security (formerly Solid Security) if…
- You need passkeys / WebAuthn and password policies
- You also want auto-update vulnerable plugins
- You weigh user ratings (4.6 vs 4.2 on WordPress.org)
Choose Sucuri Security if…
- You need cloud / DNS-level firewall and malware removal
- You want the more complete feature set (87/100 vs 77/100)
Kadence Security (formerly Solid Security) includes 3 features that Sucuri Security lacks, including Passkeys / WebAuthn, Password policies and Auto-update vulnerable plugins; Sucuri Security has 2 that Kadence Security (formerly Solid Security) lacks, including Cloud / DNS-level firewall and Malware removal. Both include 19 of the 26 features we track. 2 features are not yet verified for one or both plugins.
At a glance
Feature comparison
Click a screenshot to see both plugins side by side.
Firewall & blocking5/77/7
Firewall with Patchstack rules and custom request rules is part of Pro.
Paid Sucuri firewall filters malicious requests; the plugin only connects to it.
Firewall runs inside WordPress on your server.
WAF and CDN run on Sucuri's network in front of your host.
Local lockouts plus network-wide brute-force protection in the free plugin.
Brute-force blocking is a firewall feature; the free plugin only logs failed logins.
Pro CAPTCHA on login, registration, reset and comments (reCAPTCHA, hCaptcha, Turnstile).
Firewall protected pages can add CAPTCHA to login areas.
No documented throttling for crawlers or bots found.
Firewall blocks bad bots and layer 3/4/7 DDoS traffic.
Restrict Admin Access by Country limits admin logins only; tier not stated.
Geo-blocking is part of the cloud WAF.
Network Brute Force Protection blocks IPs reported across ~1M sites.
Firewall blocks known malicious traffic using Sucuri signatures and intel.
Scanning & cleanup5/66/6
Site Scan checks Google Safe Browsing; no signature-based file malware scan.
Free SiteCheck scans the public site only; server-side scans need a platform plan.
File change detection flags modified files; not a full original-file comparison.
Baseline comparison flags added, modified or removed core, plugin and theme files.
Site Scan checks core, plugins and themes for known vulnerabilities.
Core, plugin and theme vulnerability scans unlock with a firewall API key.
Site Scan runs 4x daily free, hourly in Pro.
Integrity checks and remote scans run automatically; platform plans scan up to every 30 min.
Site Scan is processed through the vendor's scanning service; file checks run locally.
SiteCheck runs from Sucuri's servers, not your host.
No malware cleanup tool or service included.
Unlimited manual cleanups by Sucuri analysts on every platform plan.
Login security5/52/5
2FA via authenticator app, email or backup codes in the free plugin.
Authenticator-app 2FA with one-time backup codes (added in 2.5/2.8).
Passkey (WebAuthn) login requires Pro; not available on multisite.
No passkey or hardware-key login.
Create and enforce password requirements by user group.
Offers password resets after a hack, but no password rules.
Hide Login URL tool moves the login page.
Firewall can set unique login URLs and protect login pages.
Pro Trusted Devices helps block session hijacking; no full session manager found.
Lists recent logins; ability to end sessions not confirmed.
Hardening5/54/5
Advanced tools: change user ID 1, DB prefix, file permissions, salts, wp-config rules.
Disable file editor and XML-RPC, block PHP in uploads, hide WP version.
Free option to enforce SSL across the site.
SSL certificates are included with firewall/platform plans, not the plugin.
Settings for X-Frame-Options, X-Content-Type-Options, Referrer-Policy and CSP; no HSTS.
Can configure CSP (report-only), CORS and Cache-Control headers.
Patchstack virtual patching blocks exploits before vendor fixes.
Firewall applies virtual patches for known software vulnerabilities.
Version Management can auto-update or patch vulnerable software.
Does not auto-update vulnerable plugins.
Monitoring & management3/33/3
User logging of logins, plugin, theme and content changes is Pro.
Searchable audit log of security events, logins and content changes.
Security events and lockout notifications; site scan alert emails.
Customisable email alerts for security events.
Kadence Central multi-site portal is included in the Elite plan.
Sucuri account dashboard manages scans and firewall for all your sites.
Statuses: Yes Pro Add-on Partial 3rd-party No ?
Pricing compared
Kadence Security (formerly Solid Security) Freemium
| Free | $0 |
|---|---|
| Kadence Pro | $299 per year, Not stated |
| Kadence Elite | $499 per year, Not stated |
Sucuri Security Freemium
| Free | $0 |
|---|---|
| Basic Platform | $229 per year, 1 site |
| Pro Platform | $339 per year, 1 site |
| Business Platform | $549 per year, 1 site |
| Basic Firewall | $9.99 per month, 1 site |
Downloads trend
Kadence Security (formerly Solid Security)
57,514 downloads last week
Sucuri Security
75,540 downloads last week
Verdict
Sucuri Security scores higher on our feature checklist (87/100 against 77/100) and includes cloud / DNS-level firewall and malware removal that Kadence Security (formerly Solid Security) does not. Kadence Security (formerly Solid Security) still has the edge on passkeys / WebAuthn and password policies. Check the features you rely on in the table below before deciding.
Biggest differences
Kadence Security (formerly Solid Security): not included. Sucuri Security: paid version (Basic Firewall). WAF and CDN run on Sucuri's network in front of your host.
Kadence Security (formerly Solid Security): not included. Sucuri Security: paid version (Basic Platform). Unlimited manual cleanups by Sucuri analysts on every platform plan.
Kadence Security (formerly Solid Security): paid version (Kadence Pro). Sucuri Security: not included. Passkey (WebAuthn) login requires Pro; not available on multisite.
Kadence Security (formerly Solid Security): included. Sucuri Security: not included. Create and enforce password requirements by user group.
Kadence Security (formerly Solid Security): paid version (Kadence Pro). Sucuri Security: not included. Version Management can auto-update or patch vulnerable software.
Written from the feature, pricing and install data on this page, not from hands-on testing. How we compare.
Which would you choose?
0 votes so far. Vote to see the results.
FAQ
Which is better, Kadence Security (formerly Solid Security) or Sucuri Security?
Sucuri Security scores higher on our feature checklist (87/100 against 77/100) and includes cloud / DNS-level firewall and malware removal that Kadence Security (formerly Solid Security) does not. Kadence Security (formerly Solid Security) still has the edge on passkeys / WebAuthn and password policies. Check the features you rely on in the table below before deciding.
Which has more features?
Kadence Security (formerly Solid Security) includes 23 of the 26 features we track, against 22 for Sucuri Security. Feature count is only part of the picture; check which of the differences matter to you.
Is Kadence Security (formerly Solid Security) free?
Kadence Security (formerly Solid Security) has a free version on WordPress.org. Paid plans start at $299/yr.
Is Sucuri Security free?
Sucuri Security has a free version on WordPress.org. Paid plans start at $9.99/mo.
Feature data last changed 5 Oct 2026. Spotted something wrong? Suggest an edit to Kadence Security (formerly Solid Security) or Sucuri Security. Some links are affiliate links. We may earn a commission at no cost to you; it never affects our data or rankings.