SiteLock Security – WP Hardening, Login Security & Malware Scans

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 71% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. A declining trend compresses what a buyer would pay.

1. ★★★★★ Seb

   8mo ago

   The SiteLock Security WordPress plugin is a lightweight WordPress security tool aimed at giving site owners essential protections with minimal performance impact. It focuses on baseline hardening (e.g., blocking unsafe scripts and tightening directory permissions) and login security (e.g., brute-force protection, session timeouts, and strong password enforcement) right from your WordPress dashboard. Cloud-powered scans and on-demand checks help you monitor your site’s status without consuming server resources.

   Read on wp.org ↗
2. ★★★★★ wujanowski

   2.7y ago

   Since the start of the service SiteLock is not able to connect to my (verified) domain and verify the SSL certificate. Support reactions are far from satisfying.

   Read on wp.org ↗
3. ★★★★★ oliverrealize

   7.7y ago

   They will show false positives for Google Analytics tag, then charge you to remove it, then send you an email saying they were wrong and it was a false positive and that they didn’t actually remove any malware, but won’t refund your money.

   Read on wp.org ↗
4. ★★★★★ kcampana

   9.4y ago

   With my extensive travels, festival reviews and listing of nearly 1,000 Ohio festivals, it’s impossible for me to constantly check the safety of the thousands of outgoing links found on my website. That’s why I’m thankful when SiteLock warns me about a malicious site so that I can quickly remove the bad link before my readers click on it.

   Read on wp.org ↗
5. ★★★★★ ahorowitz

   9.4y ago

   SiteLock employees definitely understand customer service. When I signed up for Sitelock’s website security service, I was also in the middle of changing web hosting companies, transferring my domain name and getting my website redesigned in the wake of my previous website having been hacked and rendered useless. Steve (my SiteLock security consultant) went the extra mile and helped with some things that weren’t even his responsibility.

   Read on wp.org ↗
6. ★★★★★ jkinskey

   9.4y ago

   Our website had been compromised previously, each time causing reduced search engine traffic and a lot of time and money to fix the issues. And, we still could not figure out how it was happening. The SiteLock engineers found the holes and thoroughly cleaned our site. Now with SiteLock’s daily scanning…, our site is secure!!

   Read on wp.org ↗
7. ★★★★★ jnourish

   9.4y ago

   I own a wedding business in Las Vegas. I chose to use SiteLock for my site after experiencing a virus on my website a year ago. The previous virus was a nasty self-replicating one that brought my business to a complete stand still. I did not want to take the chance that the site would be hit again by unscrupulous hackers. I chose to incorporate Sitelock into my current website and have been grateful that I did.

   Read on wp.org ↗
8. ★★★★★ ryoung113

   9.4y ago

   SiteLock provides professional monitoring coverage from hackers, SSL connectivity, malware free verification & PCI compliance…we are glad to have them monitor our corporate website for now 3 years.

   Read on wp.org ↗

2 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 SiteLock Security <= 5.0.2 - Missing Authorization ↗
   2026-01-25 CVE-2026-24532 Missing Authorization Affects <= 5.0.2 Patched in 5.0.3
2. Medium · 4.3 SiteLock Security <= 5.0.1 - Missing Authorization ↗
   2025-12-30 CVE-2025-62128 Missing Authorization Affects <= 5.0.1 Patched in 5.0.2

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 5 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2023-09-06 2K+ → 1K+ down after 5 days in tier
2. 2023-09-01 1K+ → 2K+ up after 6 days in tier
3. 2023-08-26 2K+ → 1K+ down after 3 days in tier
4. 2023-08-23 1K+ → 2K+ up after 3 days in tier
5. 2023-08-20 2K+ → 1K+ down after 1 days in tier
6. 2023-08-19 1K+ → 2K+ up after 20 days in tier
7. 2023-07-30 2K+ → 1K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Lockora Security Audit 100+ installs · 4.2★ · 2 shared tags A
• Virus Finder 90+ installs · 3.6★ · 2 shared tags B
• WPTrigone Security – Secure your website and store 10+ installs · 4.0★ · 2 shared tags B
• BridgeHub Security Insight — installs · 3.6★ · 2 shared tags B
• Facial Recognition Authentication — installs · 3.6★ · 2 shared tags C
• Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention 1M+ installs · 4.8★ · 1 shared tag A

Embed this report card

Drop a live Pulse card for SiteLock Security – WP Hardening, Login Security & Malware Scans into a readme, a review or a deck. It updates itself.

SiteLock Security – WP Hardening, Login Security & Malware Scans: 1K+ active installs, 3.4★ (14 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/sitelock