WordPress security

Find the malware. Clean it precisely without risks of downtime.

Segurium catches malware on the site, including injected code inside otherwise-legitimate plugin and theme files. Modified core, plugin, and theme files are restored to canonical upstream content; injections come out without touching the file's legitimate functionality, so there is no risk of downtime through every cleanup.

Cleanup that doesn't break your site.

Three things happen on every cleanup. None of them involves guessing what the file should look like.

Modified core, plugin, and theme files restored to canonical upstream content.

Cryptographically verified end-to-end. No guessing, no partial fixes, no silent swap-in of tampered bytes.

Injected code removed precisely, legitimate functionality preserved.

When malware lives inside a file that is otherwise legitimate, only the injection comes out. The file keeps doing the job it was supposed to do.

Unknown malicious files removed cleanly.

Backdoors, droppers, and shells dropped onto the site are removed in full — including across complex multi-file injections, without risks of downtime.

Fire and forget.

After every scheduled scan, Auto-fix removes malicious files and injections automatically, honouring your ignore-lists. The site owner does not have to be the one to click Clean — and on most sites, never has to look at the scanner at all.

Available on every install. Pro lifts the monthly cleanup cap so Auto-fix keeps running on busy sites.

Free, where the rest of the market charges.

Four pieces of table-stakes hardening that ship paid in popular suites with millions of installs. All four are free in Segurium, on every site, forever.

  • Geo-blocking Paid in many suites Free in Segurium
  • Security headers Paid in many suites Free in Segurium
  • File-integrity monitoring Paid in many suites Free in Segurium
  • Two-factor authentication Paid in many suites Free in Segurium

What you don't have to do.

Security shouldn't depend on you remembering to do it. After install, the work runs whether you're watching or not.

  • Remember to trigger a scan.

    Scans run on a schedule out of the box, timed for off-hours to avoid load spikes on your site. You can trigger one manually anytime.

  • Manually initiate the cleanup.

    On Pro, threats get cleaned automatically. On Free, one click cleans up to 3 files every 30 days.

  • Manually configure hardening.

    Hardening defaults — geo-blocking, security headers, brute-force protection, two-factor authentication — are on by default in the free tier.

One price. Three bundle sizes. Above 25 sites, just talk to us.

Same features on every install. Pro lifts the monthly cleanup cap to unbounded.

Pro, single site

$79 /year

100 sites and up

Talk to us agency & volume pricing

Stop paying for what other plugins gate.

Two-factor, geo-blocking, firewall, security headers, integrity scanning — all free. Detect every malware family on every site, every site owner.

Download from WP.org