iThemes Solid Security Pro

A WordPress security plugin that adds two-factor authentication, file change detection, and malware scanning to protect your site from common threats.

Version9.0.8
Last UpdatedOctober 1, 2026
File Size9.3 MB
TypeWordPress Plugin
LicenseGPL v2 or later
Live DemoView demo →

Or join VIP and download this plus every other theme & plugin for free.

Already a member? Log in

100% GPL · Original files · Unlimited sites

  • Original, unmodified files — delivered exactly as distributed by the developer
  • GPL licensed — use it on unlimited websites, personal or client
  • Free updates — new versions appear here as soon as they are released
  • Verified downloads — every file is integrity-checked (SHA-256) before release

Distributed under the GNU General Public License. Not affiliated with the original developer; official support, license keys and developer-hosted services (such as one-click updates) are available only from the developer.

Secure checkout with PayPal · GPL licensed · Instant download

Description

iThemes Solid Security Pro is a security plugin for WordPress sites. It adds a second verification step at login, watches your files for unauthorized changes, and scans for malware and vulnerabilities. It also logs user activity and can enforce password changes on a schedule.

Key Features

  • Two-Factor Authentication – Users must provide a second form of verification when signing in, so a stolen password alone is not enough to get into the site.
  • File Change Detection – The plugin keeps an eye on your site files and alerts you when something changes without your knowledge.
  • Malware Scanning – Regular scans check your site for malicious code and known vulnerabilities so problems can be found early.
  • reCAPTCHA Integration – reCAPTCHA can be added to your login and registration forms to block automated bot attacks.
  • User Action Logging – The plugin records what users do on the site, which helps you spot unusual or suspicious activity.
  • Password Expiration – You can require users to change their passwords at set intervals to reduce the risk of old credentials being misused.
  • Scheduled Security Checks – Security checks run automatically on a schedule, keeping the site hardened without manual effort.

Who Is It For

This plugin is for WordPress site owners and administrators who want to add security measures such as two-factor authentication, file monitoring, and malware scanning to their websites. It suits both beginners and more experienced developers, according to the product description.