Every plan blocks attacks. What changes is how fast we find and fix.

Every plan includes the firewall, scanning, and support from real security experts. Plans differ on three things: how often you're scanned, how fast an expert responds, and how much remediation is included.

USD PRICES SHOWN · LOCAL PRICING AND OFFERS APPLIED AT CHECKOUT

Trusted by 400,000+ sites · 120 countries

Plans

Three paid plans. One honest free one.

Scan frequency, expert response, and remediation. Everything else is detail.

Protect

Prevention for sites that can't afford downtime.

$99

Prevention-first: advanced firewall, virtual patching, daily scans, geo-blocking, and bot protection.

Prevention only — malware cleanup isn't included. For a hacked site, choose Repair or Fortify.

scansevery 24 hours

expert responsewithin 48 hours

remediationdetect & alert — no cleanup

Everything in Free, plus:

AI malware scan — every 24 hours
Advanced firewall + virtual patching
Geo-blocking & bot protection
Real-time IP blacklisting
Custom rules & OWASP protection
WP-Admin 2FA — up to 5 users
Instant malware cleanupNot included
WebHost suspension recoveryNot included

1 site$995 sites$299

RECOMMENDED

Repair

Cleanup included, the day you need it.

$299

For sites that can't afford surprises: twice-daily scans, real-time firewall, and a 24-hour expert SLA.

Priority cleanup: instant removal plus a report of what was changed, with a 24-hour expert SLA.

scansevery 12 hours

expert responsewithin 24 hours

remediationcleanup + post-cleanup report

Everything in Protect, plus:

Instant malware cleanup
AI malware scan — every 12 hours
Post-cleanup report & prevention steps
Real-time firewall
WP-admin users scan
Activity logs — 7 days
24-hour security expert SLA
WP-Admin 2FA — up to 15 users
WebHost suspension recoveryNot included

1 site$2995 sites$899

Fortify

Hourly scanning for stores and mission-critical sites.

$499

Hourly scanning and the fastest expert response — for stores where every hour is orders.

Hacked store? Hourly rescans, unlimited manual fixes, and a 6-hour expert response until you're clean.

scansevery 1 hour

expert responsewithin 6 hours

remediationunlimited manual security fixes

Everything in Repair, plus:

AI malware scan — every hour
Unlimited manual security fixes
WebHost suspension recovery
Redirection scanner
Server cron job scanner
Annual website audit
Activity logs — 60 days
6-hour expert response time
WP-Admin 2FA — all users

1 site$4995 sites$1,499

Free plan$0

Monitor first. Upgrade only when you need removal.

Start free →No credit card required

Protection that starts immediately

Weekly malware scansVulnerability alertsBasic firewallLogin protection2FA for 2 usersSSL monitoringPersonalized support

The honest limit: Free detects malware; removal needs Repair or higher.

~~Instant cleanup · Real-time firewall · Custom attack rules~~Not included

Confidence

Cancel anytime. Refund within 14 days. Change plans whenever.

14-day refund policy

Refunds are available within 14 days of purchase — except when malware has already been cleaned from your site in that period; cleanup is irreversible work by our team.

No setup fees, no cancellation fees

Pay-as-you-go. Cancel future renewals anytime from the dashboard — you're billed only for the current cycle.

Change plans anytime

Upgrade or downgrade whenever your needs change — your last charge is adjusted pro-rata.

Mix & match

Different plans for different sites, on one account.

"Although we don't think you'll ever want one, we'll gladly provide a refund* if it's requested within 14 days of purchase." — CEO, MalCare

0websites protected

2B+attacks blocked / month

Real expertspersonalized support · all plans

Stripesecure payments

Setup

Protected in minutes.

No DNS changes, no security expertise, no configuration. If your site is already infected, cleanup runs from the same dashboard.

Connect your website

Install MalCare and connect it to your account. That's the only manual step.

MalCare scans everything

Files, database, users, plugins, themes, and known vulnerabilities — on our servers, so your site feels nothing.

Protection starts automatically

Firewall, vulnerability monitoring, login protection, and scheduled scanning switch on — no configuration required.

Compare

Every plan, every feature. One table.

The three decision dimensions first; everything else grouped below.

Feature	Free	Protect	Repair · recommended	Fortify
The three decision dimensions
Malware scan frequency	Every 7 days	Every 24 hours	Every 12 hours	Every 1 hour
Expert response SLA	72 hours	48 hours	24 hours	6 hours
Remediation	Detect only	Detect only	Cleanup + report	Unlimited manual fixes
Firewall & protection
Firewall	Basic	Advanced	Real-time	Real-time
Virtual patching	After 7 days	✓	✓	✓
Geo-blocking	—	✓	✓	✓
Bot protection	—	✓	✓	✓
Login protection	✓	✓	✓	✓
Real-time IP blacklisting	—	✓	✓	✓
Custom rules & OWASP	—	✓	✓	✓
htaccess malware scan	—	✓	✓	✓
Detection & alerts
Vulnerability alerts	✓	✓	✓	✓
WP-admin users scan	—	—	✓	✓
Redirection scanner	—	—	—	✓
Server cron job scanner	—	—	—	✓
SSL monitoring	✓	✓	✓	✓
Cleanup & recovery
Instant malware cleanup	—	—	✓	✓
Post-cleanup report & steps	—	—	✓	✓
WebHost suspension recovery	—	—	—	✓
Unlimited manual security fixes	—	—	—	✓
Annual website audit	—	—	—	✓
Access & visibility
WP-Admin 2FA	2 users	5 users	15 users	All users
Activity logs	—	—	7 days	60 days

Free+

Malware scan frequencyEvery 7 days

Expert response SLA72 hours

RemediationDetect only

FirewallBasic

Virtual patchingAfter 7 days

Geo-blockingNot included

Bot protectionNot included

Real-time IP blacklistingNot included

Custom rules & OWASPNot included

htaccess malware scanNot included

Vulnerability alertsIncluded

WP-admin users scanNot included

Redirection scannerNot included

Server cron job scannerNot included

SSL monitoringIncluded

Instant malware cleanupNot included

Post-cleanup report & stepsNot included

WebHost suspension recoveryNot included

Unlimited manual security fixesNot included

Annual website auditNot included

WP-Admin 2FA2 users

Activity logsNot included

Protect+

Malware scan frequencyEvery 24 hours

Expert response SLA48 hours

RemediationDetect only

FirewallAdvanced

Virtual patchingIncluded

Geo-blockingIncluded

Bot protectionIncluded

Real-time IP blacklistingIncluded

Custom rules & OWASPIncluded

htaccess malware scanIncluded

Vulnerability alertsIncluded

WP-admin users scanNot included

Redirection scannerNot included

Server cron job scannerNot included

SSL monitoringIncluded

Instant malware cleanupNot included

Post-cleanup report & stepsNot included

WebHost suspension recoveryNot included

Unlimited manual security fixesNot included

Annual website auditNot included

WP-Admin 2FA5 users

Activity logsNot included

Repair · recommended+

Malware scan frequencyEvery 12 hours

Expert response SLA24 hours

RemediationCleanup + report

FirewallReal-time

Virtual patchingIncluded

Geo-blockingIncluded

Bot protectionIncluded

Real-time IP blacklistingIncluded

Custom rules & OWASPIncluded

htaccess malware scanIncluded

Vulnerability alertsIncluded

WP-admin users scanIncluded

Redirection scannerNot included

Server cron job scannerNot included

SSL monitoringIncluded

Instant malware cleanupIncluded

Post-cleanup report & stepsIncluded

WebHost suspension recoveryNot included

Unlimited manual security fixesNot included

Annual website auditNot included

WP-Admin 2FA15 users

Activity logs7 days

Fortify+

Malware scan frequencyEvery 1 hour

Expert response SLA6 hours

RemediationUnlimited manual fixes

FirewallReal-time

Virtual patchingIncluded

Geo-blockingIncluded

Bot protectionIncluded

Real-time IP blacklistingIncluded

Custom rules & OWASPIncluded

htaccess malware scanIncluded

Vulnerability alertsIncluded

WP-admin users scanIncluded

Redirection scannerIncluded

Server cron job scannerIncluded

SSL monitoringIncluded

Instant malware cleanupIncluded

Post-cleanup report & stepsIncluded

WebHost suspension recoveryIncluded

Unlimited manual security fixesIncluded

Annual website auditIncluded

WP-Admin 2FAAll users

Activity logs60 days

Help me choose

Find the right protection in three questions.

1 · Is your website currently hacked?

2 · What kind of website is it?

3 · If something goes wrong, how fast do you need an expert?

Recommended starting planRepair

Repair is the balanced default: twice-daily scans, priority cleanup, a post-cleanup report, and a 24-hour expert response.

$299.00

“Identified the problem immediately — and fixed it.”

“I first learned that my site had been taken over by malware via a message from Google Ads.”
“MalCare now performs daily scans that show me anything that has changed in the last 24 hours and reassure me that my site is secure.”

Daniel NordmarkWordPress Developer · customer review

In their words. From incident to relief.

Common questions, answered.

Is there a refund policy?

Yes — refunds are available within 14 days of purchase. One exception: if malware has already been cleaned from your website during that time, no refund is issued, because cleanup is irreversible work performed by our team.

What's the difference between Free and paid plans?

Free protects your site against attacks and tells you if malware is found. Protect adds serious prevention — advanced firewall, virtual patching, geo-blocking, bot protection. Instant malware cleanup starts with Repair. In short: Free detects, Protect prevents, Repair and Fortify fix.

What happens when my year ends?

Your plan renews annually. You can cancel future renewals anytime from the dashboard — no cancellation fee, and you're billed only for the current cycle.

Can I upgrade or downgrade anytime?

Yes, right from your dashboard — your last charge is adjusted on a pro-rata basis when you change plans.

Can I put different plans on different sites?

Yes — mix & match plans freely on the same account.

How do payments work?

Prices are shown in your available local currency and processed securely via Stripe; all credit cards are accepted. PayPal is available — contact support for a subscription link. There is no setup fee for any plan.

Do I need to pay for support?

No. Personalized support from real security experts is included on every plan — including Free.

Can I cancel whenever I want?

Yes. MalCare is pay-as-you-go with no minimum commitment and no cancellation fee. Cancel from the dashboard whenever you want, no questions asked.

Pick a plan. Be protected in minutes.

Available offers and local pricing are applied automatically. 14-day refund policy, no setup fee, cancel anytime.

Protect my site My site is hacked — clean it

Billed annually · secure payments via Stripe