Free WordPress security: firewall/WAF, malware scanning, login protection, 2FA, file-integrity monitoring and local backup & restore. Protect one site with no account, or connect many sites to the optional PowerSEC Central dashboard for monitoring, cloud backups (paid) and remote management.
PowerSEC can connect to PowerSEC Central for multi-site management and vulnerability scanning, off by default — see External services (1). If connected, it can toggle WordPress's own plugin/theme auto-updates; it never changes how core updates itself.
- Install from the Plugins screen, or upload the ZIP.
- Activate it, then open PowerSEC > Dashboard to scan.
- (Optional) Open PowerSEC > Central Connection and choose Connect automatically.
Multisite: PowerSEC supports multisite through per-site activation only. Network activation is intentionally refused, because each site keeps its own data and connection. Activate PowerSEC separately on each site where you need it. Data deletion removes per-user data network-wide.