CHECKING AVAILABLE OFFERS AND LOCAL PRICING…
Complete Protection for Growing Sites
Prevention-first: advanced firewall, virtual patching, daily scans, geo-blocking, and bot protection.
Prevention only — malware cleanup isn't included. For a hacked site, choose Repair or Fortify.
Priority Cleanup for High-value Sites
For sites that can't afford surprises: twice-daily scans, real-time firewall, 24-hour expert SLA.
Priority cleanup: instant removal plus a report of what was changed, with a 24-hour expert SLA.
High-frequency Protection for Woo Stores
Hourly scanning and the fastest expert response — for stores where every hour is orders.
Hacked store? Hourly rescans, unlimited manual fixes, and a 6-hour expert response until you're clean.
Weekly malware scans · vulnerability alerts · basic firewall · login protection · 2FA for 2 users · SSL monitoring · personalized support. No credit card required.
The limit: Free detects malware; removal needs Repair or higher.
Not included in Free: Instant malware cleanup · Real-time firewall · Custom rules against attacks
Refunds are available within 14 days of purchase — except when malware has already been cleaned from your site in that period; cleanup is irreversible work by our team.
14 DAYSPay-as-you-go. Cancel future renewals anytime from the dashboard — you're billed only for the current cycle.
NONEUpgrade or downgrade whenever your needs change — your last charge is adjusted pro-rata.
PRO-RATADifferent plans for different sites, on one account.
ONE ACCOUNT"Although we don't think you'll ever want one, we'll gladly provide a refund* if it's requested within 14 days of purchase." — CEO, MalCare
Proof figures as of July 2026 · refreshed monthly
No DNS changes, no security expertise, no configuration. If your site is already infected, cleanup runs from the same dashboard.
Install MalCare and connect it to your account. That's the only manual step.
Files, database, users, plugins, themes, and known vulnerabilities — on our servers, so your site feels nothing.
Firewall, vulnerability monitoring, login protection, and scheduled scanning switch on — no configuration required.
Monitoring, weekly scans, and vulnerability alerts — you'll know if anything goes wrong.
FREE →Serious prevention: advanced firewall, virtual patching, and daily scans.
PROTECT →Twice-daily scans, a post-cleanup report, and a 24-hour expert SLA.
REPAIR →Hourly scans, 6-hour expert response, unlimited manual fixes.
FORTIFY →Choose Protect when a few hours of downtime would be manageable. Choose Fortify when every hour costs orders.
The three decision dimensions first; everything else grouped below.
| Feature | Free | Protect | Repair · recommended | Fortify |
|---|---|---|---|---|
| Malware scan frequency | Every 7 days | Every 24 hours | Every 12 hours | Every 1 hour |
| Expert response SLA | 72 hours | 48 hours | 24 hours | 6 hours |
| Remediation | Detect only | Detect only | Cleanup + report | Unlimited manual fixes |
| Firewall & protection | ||||
| Firewall | Basic | Advanced | Real-time | Real-time |
| Virtual patching | After 7 days | ✓ | ✓ | ✓ |
| Geo-blocking | — | ✓ | ✓ | ✓ |
| Bot protection | — | ✓ | ✓ | ✓ |
| Login protection | ✓ | ✓ | ✓ | ✓ |
| Real-time IP blacklisting | — | ✓ | ✓ | ✓ |
| Custom rules & OWASP | — | ✓ | ✓ | ✓ |
| htaccess malware scan | — | ✓ | ✓ | ✓ |
| Detection & alerts | ||||
| Vulnerability alerts | ✓ | ✓ | ✓ | ✓ |
| WP-admin users scan | — | — | ✓ | ✓ |
| Redirection scanner | — | — | — | ✓ |
| Server cron job scanner | — | — | — | ✓ |
| SSL monitoring | ✓ | ✓ | ✓ | ✓ |
| Cleanup & recovery | ||||
| Instant malware cleanup | — | — | ✓ | ✓ |
| Post-cleanup report & steps | — | — | ✓ | ✓ |
| WebHost suspension recovery | — | — | — | ✓ |
| Unlimited manual security fixes | — | — | — | ✓ |
| Annual website audit | — | — | — | ✓ |
| Access & visibility | ||||
| WP-Admin 2FA | 2 users | 5 users | 15 users | All users |
| Activity logs | — | — | 7 days | 60 days |
Repair is the balanced default: twice-daily scans, priority cleanup, a post-cleanup report, and a 24-hour expert response.
A fair question. Here's the honest category answer.
| Free security plugin | Host security | One-time cleanup | MalCare paid plan | |
|---|---|---|---|---|
| Ongoing malware scanning | Limited | Limited | No | Every 24h → hourly |
| Firewall protection | Limited | Generic | No | WordPress-specialized |
| Automatic cleanup | No | Rarely | Once | Repair & up |
| Vulnerability patching | Usually limited | No | No | Included |
| Expert assistance | Community | Ticket queue | During incident | SLA by plan |
| Reinfection protection | Limited | Limited | Usually no | Included |
A one-time cleanup fixes Tuesday. A subscription is who answers next Tuesday.
What a hack actually costs: lost orders · Google Ads suspension · blacklist warnings · hosting suspension · emergency developer fees · your weekend · and reinfection, because the original hole is still open.
A two-day disruption puts about $— at risk.
your estimate, computed in your browser — nothing is sent anywhere. For a store doing $1,000/day, the gap between a 48-hour and a 6-hour expert response is the whole argument for Fortify.
"I first learned that my site had been taken over by malware via a message from Google Ads."
"MalCare now performs daily scans that show me anything that has changed in the last 24 hours and reassure me that my site is secure."
— Daniel Nordmark, WordPress Developer
I never thought it could happen to me, but my website was hacked and started redirecting visitors. This WordPress plugin saved the day and helped me restore my website's reputation. I highly recommend it!
I came looking to fix a redirect hack & the cleanup got rid of it in minutes…then I started tinkering with the dashboard. Never had to worry about hacks again.
MalCare is a lifesaver. It alerted me to a redirect hack on my website and guided me through the process of cleaning it up. I'm so grateful for the peace of mind it provides.
Mix & match plans on one account — or talk to us for agency pricing that applies to any plan, anytime.
Yes — refunds are available within 14 days of purchase. One exception: if malware has already been cleaned from your website during that time, no refund is issued, because cleanup is irreversible work performed by our team.
Free protects your site against attacks and tells you if malware is found. Protect adds serious prevention — advanced firewall, virtual patching, geo-blocking, bot protection. Instant malware cleanup starts with Repair. In short: Free detects, Protect prevents, Repair and Fortify fix.
Your plan renews annually. You can cancel future renewals anytime from the dashboard — no cancellation fee, and you're billed only for the current cycle.
Yes, right from your dashboard — your last charge is adjusted on a pro-rata basis when you change plans.
Yes — mix & match plans freely on the same account.
Prices are shown in your available local currency and processed securely via Stripe; all credit cards are accepted. PayPal is available — contact support for a subscription link. There is no setup fee for any plan.
No. Personalized support from real security experts is included on every plan — including Free.
Yes. MalCare is pay-as-you-go with no minimum commitment and no cancellation fee. Cancel from the dashboard whenever you want, no questions asked.
Available offers and local pricing are applied automatically. 14-day refund policy, no setup fee, cancel anytime.
Billed annually · secure payments via Stripe
