WordPress security by wpKtech

Security for WordPress, from code to request.

wpKtech builds security plugins that find the weak spots in your plugins and themes, stop attacks before they reach WordPress, and explain every finding in plain English. Everything runs on your own server.

Runs on your own serverFree on WordPress.org14-day money-back on Pro
Incoming request
GET /?id=1' UNION SELECT user_pass FROM wp_users--
↓
Gateward firewallSQL injection blocked · attacker IP banned for 1 hour
Blocked
↓
Your WordPress site
Codeward scannerOutdated plugin with a known CVE · fix in one click
Fixed

How it protects you

Four layers, one simple setup

Most hacks start with something small: an outdated plugin, a leaked username, a request nobody looked at. wpKtech covers each step, from the code on your server to every request that reaches it.

01

Find

Every plugin, theme and core file is checked for known vulnerabilities, malware, modified files and weak settings.

with Codeward
02

Block

A firewall that loads before other plugins stops SQL injection, XSS, file probing and brute-force logins, and bans repeat attackers.

with Gateward
03

Fix

Issues come with plain-English steps. Pro fixes them in one click, with a backup first and undo at any time.

with Codeward Pro
04

Watch

Alerts by email, trends of who attacks you and how, and new detection rules delivered to Pro sites automatically.

with Codeward & Gateward

Products

Use one, or use both

Codeward finds what attackers would use. Gateward blocks the attacks while you fix it. Both start free on WordPress.org.

Security scanner

Codeward

Checks every plugin, theme and core file like a security auditor: known CVEs, malware and backdoors, modified files, risky settings. Pro fixes issues in one click, with a backup first, and checks for new signed detection rules every day.

CVE matchingMalware signaturesCore integrityOne-click fixes (Pro)Code analysis (Pro)Automatic rule updates (Pro)

Firewall & attack monitor

Gateward

A web application firewall that runs before other plugins: blocks SQL injection, XSS and file probing, bans attackers on an escalating ladder, controls every HTTP method and tells you which requests are safe or dangerous.

Early-loading WAFRequest ReviewBot challenge, no CAPTCHAVulnerability alertsVulnerability Shield (Pro)Live traffic (Pro)

Who it is for

Built for the people who keep WordPress running

Site owners

Know what is wrong and what to do about it, without reading security jargon. Free plans cover most small sites.

Agencies

One licence for 5 or 25 sites, white-label client reports and the same rules on every site you manage.

Developers

Code analysis of your own plugins and themes, exact lines and suggested fixes, plus hooks to plug in your own tools.

How we build

Security tools you can trust with your site

Runs on your server

No cloud proxy and no DNS changes. Visitor data stays on your site; outside services are used only when you switch them on.

Plain English

Every finding and every blocked request says what happened, why it matters and what to do next.

Free first

Both plugins work for free on WordPress.org. Pro adds automation for people who manage many sites.

Questions

Before you install

Do I need both plugins?

No. Each works on its own. Codeward finds and fixes weaknesses; Gateward blocks attacks in real time. Together they cover both sides.

Will they slow my site down?

Codeward scans in small steps in the background. Gateward checks each request with a few fast pattern matches before WordPress loads, so blocked attacks cost less than a normal page view.

Is any of my data sent elsewhere?

No, not by default. Both plugins work offline. Optional services, such as vulnerability databases, are listed in each plugin's readme and are contacted only after you switch them on.

What happens when a Pro licence expires?

Pro features pause and the free features keep working. Your settings and history are kept and come back as soon as you renew.

Who handles payments and invoices?

Freemius, Inc. is our reseller: it processes payments, issues invoices and handles sales tax and VAT. Refunds are available within 14 days.

Questions or a security report?

Write to support@wpktech.app — we answer every message.

Email uswpKtech on WordPress.org