Solid Security (formerly iThemes) logo

Solid Security (formerly iThemes)

WP SecurityUnverified

Solid Security, previously iThemes Security, is one of the longest-running WordPress security plugins. It focuses on the login and hardening layer: brute-force protection, two-factor and passwordless authentication, WordPress hardening recommendations, file-change detection, and a user security dashboard.

solidwp.com ↗2008 (iThemes; rebranded SolidWP 2023)
Visit Solid Security (formerly iThemes) ↗← All security solutionsClaim this listing →
Profile unclaimed

If you represent Solid Security (formerly iThemes), claiming is free and adds a Verified badge to this security profile. Start verification →

Category
WP Security
Best for
WordPress site owners and agencies
Pricing
Free tier; Pro from ~$99/site/yr
Founded
2008 (iThemes; rebranded SolidWP 2023)

HOW IT WORKS

The free version covers the core login and hardening features, while Solid Security Pro adds a vulnerability and site scanner, trusted devices, a magic-link login, and more granular controls. It is now part of the StellarWP family (Liquid Web), alongside its backup and page-builder siblings.

It sits alongside a scanner and, ideally, a server-level or edge WAF: Solid Security is strong on access control and hardening but is not a full WAF or malware-cleanup service on its own. For many WordPress sites it is a familiar, capable login-and-hardening layer.

Category context: Plug-in or service that runs inside the WordPress install. Application-level protection; the user controls it directly.

WHAT IT DOES

  • Brute-force protection and passwordless / 2FA logins
  • Site scanning and vulnerability checks
  • WordPress hardening and file-change detection
  • User security dashboard and activity logging

BEST FOR

  • WordPress owners wanting strong login security and 2FA
  • Agencies standardising hardening across client sites
  • Sites already in the StellarWP / Liquid Web ecosystem

ALTERNATIVES TO SOLID SECURITY (FORMERLY ITHEMES)

WP Security
Wordfence

The most-installed WordPress security plugin. Application-level WAF + malware scanner.

Compare →
WP Security
MalCare

WordPress security suite focused on automatic, off-site malware cleanup.

Compare →
WP Security
Patchstack

Vulnerability database and virtual patching layer for WordPress.

Compare →

SOLID SECURITY (FORMERLY ITHEMES) FAQ

What is Solid Security?

Solid Security is a WordPress security plugin, formerly known as iThemes Security, focused on login protection, two-factor and passwordless authentication, WordPress hardening, file-change detection, and site scanning. It has a free version and a Pro tier, and is now part of the StellarWP (Liquid Web) family.

Is Solid Security the same as iThemes Security?

Yes. iThemes Security was rebranded to Solid Security in 2023 when iThemes became SolidWP under StellarWP. It is the same plugin lineage with continued development, so existing iThemes Security users were transitioned to the Solid Security branding.

Solid Security vs Wordfence?

Wordfence leans on an application-level WAF and malware scanner; Solid Security leans on login security, 2FA, and hardening. They overlap but emphasise different layers. Many sites run one as their primary WordPress security plugin and rely on the host or an edge WAF for the request-filtering layer.

Editorial independence

HostList is independent. This profile is editorial; HostList accepts no sponsorship, affiliate commission, or paid placement from Solid Security (formerly iThemes) or any security vendor.