MalCare
WordPress security plugin with malware scanning, firewall and one-click cleanup
Own MalCare? Claim it, free to correct the facts and get the verified badge.
Pricing
Free · from $8.25/mo
API
Yes
Company
MalCare
Founded
2014
Platforms
What is MalCare?
MalCare is a WordPress security plugin that scans sites for malware, blocks attacks with a firewall, and removes infections in one click. It says it protects more than 400,000 sites in 120 countries.
Deep scans run on MalCare's servers rather than the host, checking files, database tables and scheduled tasks. The firewall learns from attacks across its network, so an attack blocked on one site is blocked on all of them. Virtual patching covers 39,000+ tracked plugin, theme and core vulnerabilities, including ones that never get an official fix. Login protection, 2FA, geoblocking, bot protection and an activity log are also included.
A free plan offers weekly scans and a basic firewall. Paid plans are billed yearly and add more frequent scans, faster expert response and, on Repair and Fortify, malware cleanup. It suits site owners, online stores and agencies running many WordPress sites.
Key features
- Off-server deep malware scans of files and database
- One-click malware removal with backup first
- Firewall that learns from a 400,000-site network
- Virtual patching for 39,000+ known vulnerabilities
- Login protection, CAPTCHA and two-factor authentication
- Country geoblocking and bot protection
- Searchable activity log of logins and changes
- Post-cleanup report showing how attackers got in
Use cases
Who it's for
Cleaning a hacked site
Install the plugin on an infected site, run a server-side scan and remove malware in one click on Repair or Fortify plans.
Patching vulnerable plugins
Virtual patches block exploits of known plugin and theme flaws within hours, before an official update exists.
Protecting online stores
Fortify's hourly scans and 6-hour expert response target sites where downtime costs money.
Agency site fleets
Agencies can mix plans across many client sites on one account and ask about agency pricing.
MalCare pricing
From the vendor's site, checked Nov 11, 2026. Prices change — confirm on their pricing page.
| Plan | Free | Protect | Repair | Fortify |
|---|---|---|---|---|
| Paid monthly | Free | yearly onlyper site; $299 for 5 sites, billed yearly at $99/yr | yearly onlyper site; $899 for 5 sites, billed yearly at $299/yr | yearly onlyper site; $1,499 for 5 sites, billed yearly at $499/yr |
| Paid yearly | Free | $8.25/mo | $24.92/mo | $41.58/mo |
| Malware scan frequency | Weekly | Daily | Every 12 hours | Hourly |
| Expert response time | 72 hours | — | 24 hours | 6 hours |
| Malware cleanup | — | No | One-click, with report | — |
| Firewall | Basic | Advanced | — | — |
| Also |
|
|
|
|
Which plan do you need?
- CloudflareZero Trust Pay-as-you-go$7/mo
- MalCareProtect$8.25/mo
- SucuriBasic Firewall$9.99/mo
- SiteLockBasic$16.58/mo
The cheapest paid plan with a published price that fits. Custom and sales-quoted plans aren't included.
Get an email when MalCare changes its prices
One mail per change, a stop link in each. Nothing else.
How MalCare compares
- At $8.25/mo, MalCare starts cheaper than 2 of 3 similar tools with published prices (median $9.12).
- MalCare has a free plan, like 1 of the 4 alternatives below.
- It offers an API, which only 1 of the others does.
| Tool | Starts at | Free plan | Free trial | API | Open source | |
|---|---|---|---|---|---|---|
| MMalCare | $8.25/mo | — | — | |||
S Sucuri | $9.99/mo | — | — | — | — | MalCare vs Sucuri |
S SiteLock | $19.99/mo | — | — | — | — | MalCare vs SiteLock |
C Cloudflare | $5/mo | — | — | — | MalCare vs Cloudflare | |
I Imperva | Quote | — | — | MalCare vs Imperva |
The closest alternatives in our directory by category. “Starts at” is the cheapest paid plan per month, as each vendor lists it.
Pros and cons
Strengths
- Free plan includes weekly scans, basic firewall and 2FA
- Scans run on MalCare servers, not the host
- Published 0.2% false positive rate
- 14-day refund window and prorated plan changes
Limitations
- Free and Protect plans do not remove malware
- Plans are billed yearly only
- Activity logs only on Repair and Fortify
- Works only with WordPress
MalCare FAQ
Is there a free plan?
Yes. It includes weekly scans, vulnerability alerts, a basic firewall, login protection and 2FA for 2 admins, but it does not remove malware.
How much do paid plans cost?
Protect is $99, Repair $299 and Fortify $499 per site, billed yearly. 5-site bundles cost $299, $899 and $1,499.
Which plans include malware cleanup?
Repair includes automated cleanup with a report; Fortify adds unlimited manual security fixes.
Will scanning slow my site?
No. Deep scans run on MalCare's servers rather than your host.
Can I get a refund?
Yes, within 14 days of purchase, unless MalCare has already cleaned malware from your site in that time.
Used MalCare? Rate it
Sign in to rate this tool and share how you use it.
MalCare
Free · from $8.25/mo