If you have used WordPress for a while, you have probably met this plugin under another name. It started as Better WP Security, became iThemes Security, then Solid Security, and in 2026 it was renamed Kadence Security as Liquid Web pulled its WordPress products under the Kadence brand.
The name keeps changing, but the plugin is one of the most installed security tools for WordPress, with more than 700,000 active installs. This Kadence security review covers what the free version does, what you only get with Pro, how the new pricing works, and how to set it up properly.
Short Answer: Kadence Security free is one of the best free hardening and login-protection plugins: 2FA, brute force protection, file change detection and a site scanner, all light on resources. Pro adds virtual patching through Patchstack, activity logs and more, but it is no longer sold alone. It comes with the Kadence Pro bundle ($299/year) or with Liquid Web/Nexcess managed hosting. It is not a malware removal tool.
Kadence Security Review: Is It the Best Security Plugin?
About Kadence Security
It’s a WordPress plugin that protects your site from hackers. That’s it. Simple.
Used to be called SolidWP. Before that, it was iThemes Security. Same thing, just a new name.
The good news? It’s free. Yeah, actually free.
There’s also a paid version if you need extra stuff like backups or want to manage multiple sites at once. But the free version works fine.
How I Tested It
I installed Kadence Security free on a test WordPress site, ran the setup wizard, enabled two-factor authentication for an admin account, triggered brute force lockouts with wrong passwords, ran the site scanner, and changed a core file to see how quickly file change detection reported it.
I also checked the plugin’s effect on page load and admin speed.
What changed with the rename
- Name: Solid Security became Kadence Security in version 10.0. Settings carried over on update.
- How Pro is sold: there is no standalone Pro license anymore. Pro features come with the Kadence Pro or Elite bundle, or with Liquid Web/Nexcess managed hosting.
- Price for security-only users: people who only wanted Solid Security Pro now pay for a larger bundle. That is the main complaint in user reviews.
Best features of Kadence Security
Let us see the important features of the plugin.
Two-factor authentication and passkeys
Free 2FA through authenticator apps, email codes or backup codes. You can force it for administrators and editors. Pro adds passwordless logins and trusted devices.
For most small sites, 2FA on admin accounts stops the majority of account takeover attempts.
Brute force protection
Local lockouts after repeated failed logins, plus network brute force protection that blocks IPs reported by other sites using the plugin. This runs quietly and is very effective against bot login attacks.
Bots guess usernames too, so if yours is still “admin”, change your WordPress username.
Site scanner and vulnerability checks
The scanner checks your plugins and themes against known vulnerabilities and flags anything you need to update. Free sites get scans a few times a day; Pro scans hourly.
Pair it with a regular WordPress maintenance routine, so updates and backups do not slip.
Virtual patching (Pro)
Through Patchstack, Pro can block known exploits in vulnerable plugins before the plugin author releases a fix.
This is the most valuable Pro feature, since outdated plugins are the most common way WordPress sites get hacked.
File change detection
Alerts you when core or plugin files change unexpectedly, which is often the first sign of a compromise.
Hardening tools
Enforce strong passwords, hide the login URL, disable XML-RPC, disable file editing in the dashboard, change the database prefix, and ban users or IPs. Most of these are one toggle each.
Activity log (Pro)
Tracks logins, setting changes and user actions. Useful on sites with several editors or client access.
Use cases
- Solo blogs and small business sites that want strong login security for free.
- Sites on shared hosting where heavier firewall plugins slow things down.
- Kadence users who already pay for Kadence Pro, since security is included. The Kadence theme itself is one of my best WordPress themes for bloggers.
- Liquid Web/Nexcess customers, who get Pro at no extra cost
How to set up Kadence Security (example)
- Install “Kadence Security” from Plugins > Add New and activate it. (If you already had Solid Security, it updates automatically.)
- Run the setup wizard. Choose your site type (blog, business, store), so it applies sensible defaults.
- Go to Security > User Groups and require two-factor authentication for Administrators and Editors.
- Set up 2FA on your own account with an authenticator app. Save the backup codes somewhere safe.
- In Security > Settings > Features, enable Local Brute Force and Network Brute Force protection.
- Turn on File Change Detection and set email notifications.
- In Advanced, disable file editing in the dashboard and XML-RPC if you do not use apps or services that need it.
- Run the Site Scan and update anything it flags.
- Take a backup with a backup plugin like UpdraftPlus (it is in my must-have plugins list). Kadence Security’s free database backup does not replace full backups.
Important note: Do not enable “hide login URL” and then forget the new address. Write it down before you save. If you lock yourself out, you can rename the plugin’s folder over FTP or your host’s file manager to disable it temporarily.
Does it slow down WordPress?
In my checks, the free version had no noticeable effect on front-end load times. It is lighter than full endpoint firewalls like Wordfence, because it focuses on login protection and hardening rather than inspecting every request.
For general performance tips, see how to improve WordPress speed.
Pricing
| Option | Price | Kadence Security |
|---|---|---|
| Free plugin | $0 | Free features |
| Kadence Essentials | $99/yr | Free features only |
| Kadence Pro | $299/yr | Pro included, plus Shop Kit, backups, memberships |
| Kadence Elite | $499/yr | Pro included, plus multi-site management and agency tools |
| Liquid Web / Nexcess managed WordPress | Hosting plan | Pro included |
Pros and cons
Pros
- Excellent free 2FA and brute force protection
- Light on server resources
- Clear setup wizard and dashboard
- Virtual patching via Patchstack in Pro
- Mature plugin with a long track record
Cons
- Pro no longer sold on its own
- Repeated renames confuse users
- No malware removal service
- No cloud or DNS-level firewall
Kadence Security vs Alternatives
| Plugin | Strength | When to choose it instead |
|---|---|---|
| Wordfence | Endpoint firewall and malware scanner | You want deep file scanning and a WAF in one plugin |
| Patchstack | Virtual patching from $5/month | You want vulnerability protection without the Kadence bundle |
| Sucuri / MalCare | Cloud firewall, malware cleanup | Your site has been hacked or gets heavy attacks |
Full comparison in the best WordPress security plugins guide. A common free setup is Kadence Security for login protection plus Cloudflare’s free plan in front of the site.
FAQs related to Kadence Security Review
Is Kadence Security really free?
Yes, the core plugin is free. Pro features come with the Kadence Pro or Elite bundle or with Liquid Web managed hosting.
Is Kadence Security the same as Solid Security?
Yes. Solid Security was renamed Kadence Security in 2026. Before that, it was iThemes Security.
Can I use Kadence Security with Wordfence?
You can, but disable overlapping features (brute force protection, firewall rules) in one of them to avoid conflicts. Running two full security suites is rarely a good idea.
Does Kadence Security remove malware?
No. It detects problems and hardens your site. For cleanup, use a service like Sucuri or MalCare, or restore a clean backup.
Do I need the Kadence theme to use it?
No. Kadence Security works with any theme.
Conclusion
That’s all about Kadence Security Review.
Kadence Security free is still one of the best ways to lock down WordPress logins without slowing your site. Install it, force 2FA for admins, turn on brute force protection and keep a proper backup.
Pro is worth it if you already buy Kadence Pro or host with Liquid Web. If you only want the Pro security features, Patchstack alone is now the cheaper route.
Kadence Security Review 2026 (Formerly Solid Security): Free vs Pro, Setup and Verdict
Kadence Security reviewed: what changed, free vs Pro features, pricing, step-by-step setup, pros, cons and alternatives.
Price: 99.99
Price Currency: USD
Operating System: Linux
Application Category: Plugin
4.6
