One platform. Three levels of protection.
Hack Halt gives WordPress sites serious security without forcing owners to become security experts. Start free, and step up as your site becomes more important.
Three products, one security model.
Free and Pro are the same plugin — a licence unlocks the premium modules. ProSecure is a separate, larger platform for sites that need full detection and response.
Essential protection, running in minutes.
For personal sites, side projects and anyone who wants real protection at no cost.
- Real-time firewall and request filtering
- Intrusion prevention and login protection
- Multi-factor authentication enforcement
- Manual vulnerability scanning
- Live traffic with geo-IP visibility
- Guided hardening and recovery tools
Automation and intelligence for sites that matter.
For businesses, ecommerce, agencies and production sites where downtime costs money.
- Everything in Free
- Threat-intelligence feeds block known attackers
- File integrity monitoring detects unauthorised changes
- Scheduled vulnerability scanning
- Autodefense correlates attack chains automatically
- Honeypot traps fingerprint attackers
- CSP automation without touching code
ProSecure
The complete security platform.
For business-critical sites that need detection, response and recovery in one place.
- A 21-module security platform
- WAF inspection and webshell scanning
- Incident Orchestration with guided response
- Database and file integrity monitoring
- Backups and one-click restore
- Security Advisor that tells you what to fix next
What each level actually gives you.
Verified against the products themselves — not a marketing wish list.
| Capability | Free | Pro | ProSecure |
|---|---|---|---|
| Core protection | |||
| Real-time firewall | ✓ | ✓ | ✓ |
| Intrusion prevention / lockouts | ✓ | ✓ | ✓ |
| MFA enforcement | ✓ | ✓ | ✓ |
| Guided hardening | ✓ | ✓ | ✓ |
| Recovery tools | ✓ | ✓ | ✓ |
| Detection | |||
| Vulnerability scanning | Manual | Scheduled | Scheduled |
| File integrity monitoring | — | ✓ | ✓ |
| Webshell scanning | — | — | ✓ |
| Database integrity monitoring | — | — | ✓ |
| WAF request inspection | — | — | ✓ |
| Intelligence | |||
| Live traffic visibility | ✓ | ✓ | ✓ |
| Geo-IP resolution | Live only | Persistent cache | Persistent cache |
| Threat-intelligence feeds | — | ✓ | ✓ |
| Honeypot deception | — | ✓ | ✓ |
| Response | |||
| Autodefense / attack-chain correlation | — | ✓ | ✓ |
| Incident Orchestration | — | — | ✓ |
| Backups and one-click restore | — | — | ✓ |
| Security Advisor | — | — | ✓ |
| Supply chain | |||
| CSP controls | Manual | Automated | Automated |
| SRI integrity monitoring | — | — | ✓ |
Which one is right for me?
Choose Free if…
You run a personal site, blog or small business site and want genuine protection — firewall, intrusion prevention and MFA — without paying anything.
Choose Pro if…
Your website supports your business. You want the security work automated: threat feeds, file integrity, scheduled scans and automatic attack-chain response.
Choose ProSecure if…
Your site is business-critical. You need full detection and response — WAF inspection, webshell and database integrity scanning, incident orchestration and backups.
How to choose, in one minute
Most people overthink this. The question is not which product has the longest feature list — it is how much of the security work you want to be personally responsible for.
Start with Free if your site is not making money yet
A personal site, a portfolio, a blog, a small brochure site. Free gives you a real firewall, intrusion prevention and multi-factor authentication. That combination stops the automated attacks that make up the overwhelming majority of what any WordPress site actually faces.
Move to Pro when forgetting becomes the risk
The moment your site earns money, holds customer data, or would embarrass you if it went down, the danger stops being ‘no protection’ and starts being ‘protection that depends on me remembering’. Pro automates the scanning, the file integrity checks and the response.
Choose ProSecure when a breach is a business event
If a compromise means lost revenue, disclosure obligations or a hard conversation with customers, prevention alone is not enough. ProSecure adds the detection, response and recovery layers — so the hour after an incident is a procedure rather than a panic.
You can change your mind
Free and Pro are the same plugin, so upgrading is a licence change rather than a migration. Nothing is reinstalled and no settings are lost.
Frequently asked questions
Can I upgrade later without reinstalling anything?
Yes. Hack Halt Free and Hack Halt Pro are the same plugin — a licence unlocks the premium modules. Upgrading changes what is available, not what is installed, and none of your settings or rules are lost.
What is the difference between Hack Halt Pro and ProSecure?
Pro automates protection: threat-intelligence feeds, file integrity monitoring, scheduled scans and automated attack-chain response. ProSecure is a separate, larger platform that adds detection, response and recovery — WAF request inspection, webshell and database integrity scanning, incident orchestration, and backup and restore.
Do I need all three?
No. They are levels, not components. You run one of them on a site, chosen by how critical that site is.
Is the free version limited by traffic or time?
No. There is no expiry, no request cap and no throttling. It requires a free registration tied to your domain, which is how licensing and updates work across every tier.
Which one should a small business site use?
Usually Pro. Free is genuinely protective, but a site that generates revenue benefits most from the automation — scheduled scanning and file integrity monitoring catch the problems nobody has time to look for manually.
Will these plugins conflict with my other security plugin?
Running two firewalls is rarely a good idea. They duplicate work and conflicting rules make it much harder to tell what blocked something and why. If you are switching, disable the other one first.
Do they work on WooCommerce sites?
Yes. WooCommerce sites are ordinary WordPress installations from a security standpoint, and they are exactly the case where the automation in the paid tiers earns its cost, because downtime and data exposure both carry a direct price.
Explore each level
Every tier in detail — what it includes, who it is for, and what the software actually looks like.
Your WordPress site shouldn't be the easiest target.
Start with Free today. Step up whenever your site earns it.