MalCare
MalCare is a WordPress security plugin that scans for malware, blocks attacks, and removes malware with one click on eligible plans.
What MalCare is
MalCare is a WordPress security plugin that scans for malware, blocks attacks, and removes malware with one click on eligible plans. Its deep scans run on MalCare’s servers rather than the customer’s hosting server; the company says this avoids adding scan load to that server. The Free plan provides weekly scans, vulnerability alerts, a basic firewall, and login protection, but it detects malware without removing it. Protect scans every 24 hours and also excludes cleanup. Repair adds cleanup and a post-cleanup report with scans every 12 hours, while Fortify scans hourly and includes unlimited manual security fixes. Other listed features include bot protection, two-factor authentication, geoblocking, and activity logs. MalCare says it tracks more than 39,000 known plugin, theme, and WordPress core vulnerabilities and shares attack information from a network of more than 400,000 sites. Paid plans are billed yearly: Protect is $99 a year for one site, Repair is $299 a year for one site, and Fortify is $499 a year for one site. The company began in 2010 and says MalCare launched in 2016.
Good
- Deep scans run on MalCare’s servers
- Free plan includes weekly scans and basic firewall
- Repair and Fortify include malware cleanup
- Paid plans include different expert response times
Watch out
- Free detects malware but does not remove it
- Protect does not include malware cleanup
- Webhost suspension recovery is listed only for Fortify
- Paid plans are billed yearly
Who it suits
MalCare suits WordPress site owners seeking malware scanning and attack protection. Fortify is intended for stores and mission-critical sites where an hour offline costs money.
Verdict
MalCare offers scanning, firewall features, and cleanup options that vary by plan. Check the plan limits carefully: both Free and Protect detect malware without cleaning it up.
Plans and prices
From MalCare's own pricing page, checked 3 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free | Free | weekly scans · vulnerability alerts · basic firewall · login protection · malware removal not included |
| Protect | $99 a year | 1 site or 5 sites · no malware cleanup · scans every 24 hours · expert response within 48 hours · yearly; $99 for 1 site or $299 for 5 sites |
| Repair | $299 a year | 1 site or 5 sites · malware cleanup and post-cleanup report · scans every 12 hours · expert response within 24 hours · yearly; $299 for 1 site or $899 for 5 sites |
| Fortify | $499 a year | 1 site or 5 sites · hourly scans · unlimited manual security fixes · expert response within 6 hours · yearly; $499 for 1 site or $1,499 for 5 sites |
The facts
Each one read from MalCare's own pages, with the date it was checked.
Money
- Billing and refunds
- Paid plans are billed yearly, and the pricing page states a 14-day refund window subject to an exception when MalCare has already cleaned malware during that period.checked 3 Oct 2026
- Plan limits
- Protect does not include malware cleanup, and webhost suspension recovery is listed only for Fortify.checked 3 Oct 2026
What it does
- Cleanup
- Repair and Fortify include one-click malware cleanup, while the Free plan detects malware but does not remove it.checked 3 Oct 2026
- Firewall
- The product includes a firewall, with advanced firewall and virtual patching listed for Protect and real-time firewall listed for Repair and Fortify.checked 3 Oct 2026
- Intended users
- MalCare describes Fortify as intended for stores and mission-critical sites where an hour offline costs money.checked 3 Oct 2026
- Network intelligence
- MalCare says it uses attack information from a network of more than 400,000 sites to share protection against detected attacks.checked 3 Oct 2026
- Off-server scanning
- Its deep malware scans run on MalCare’s servers rather than the customer’s site, which the company says avoids adding scan load to the hosting server.checked 3 Oct 2026
- Other security features
- The site lists bot protection, vulnerability alerts, login protection, two-factor authentication, geoblocking, and activity logs among its features.checked 3 Oct 2026
- Privacy
- The company says MalCare does not add visitor tracking and can keep customer data in the EU on request.checked 3 Oct 2026
- Product
- MalCare describes itself as a WordPress security plugin that blocks attacks, scans for malware, and removes it in one click.checked 3 Oct 2026
- Support
- The pricing page lists expert response times of 72 hours for Free, 48 hours for Protect, 24 hours for Repair, and 6 hours for Fortify.checked 3 Oct 2026
- Vulnerability coverage
- MalCare says it tracks more than 39,000 known plugin, theme, and WordPress core vulnerabilities.checked 3 Oct 2026
The company
- Company history
- The company’s About page says its founder-led team began in 2010 and identifies MalCare as a security product launched in 2016.checked 3 Oct 2026
- Founded
- 2010checked 28 Sep 2026
- Headquarters
- Bangalore, Indiachecked 28 Sep 2026
Alternatives to MalCare
- 1
Cloudflare Gateway
Free planAndroidiOSWebAPI8.3$7 usage-based - 2
DNSFilter
AndroidiOSWebAPI7.8From $1 a month - 3
DataDome API Protection
AndroidiOSWebAPI6.8From $3,830 a month - 4
Gcore WAAP
Free planWebAPI6.8From €25 a month - 5
Wordfence Security
Free planWebSelf-hosted6.8From $149 a year - 6
Google Cloud Secret Manager
Free planWeb6.5From $0.02 a month