Your website is guarded around the clock, and one screen shows you so.
One screen tells you what is guarding your site right now.
Get A Security AuditSecurity audit US$240.00, charged onceEvery protection here is included in your plan.
It was all switched on before you arrived.
The smallest plan we sell gets exactly the same four as the largest.
Pick a plan
A malware sweep every night
Every file, every nightRunningSign-in protection on WordPress
10 a minuteRunningYour WordPress is hardened the day it goes on
7 of 7RunningA firewall that knows the attacks by name
The open rule set the security industry maintains together runs in front of every single site here, with 624 rules live and 88 scanning tools recognised by name. A request that matches an attack is refused before your site runs anything.
A malware sweep every night
Every file in your site is read every night, against definitions refreshed minutes beforehand, and you are emailed the moment anything turns up. On Managed WordPress the file is moved somewhere it cannot run for you.
Sign-in protection on WordPress
Your WordPress sign-in page allows ten attempts a minute from any one visitor, and an address that keeps guessing after five refusals is turned away for the next hour. You can add a second factor to your own WordPress login, with ten single use recovery codes.
Your WordPress is hardened the day it goes on
Seven settings that attackers count on are closed the moment WordPress is installed, from editing code inside the dashboard to the file that announces which version you are running. The panel shows you all seven passing on one line.
You decide exactly who reaches your site.
A visitor you turn away never reaches your pages at all.
Turn your protection up in a sentence
Ask Kora for more protection in plain words and it is applied in front of your site. There are five levels of strictness and every site starts on the balanced one, so an ordinary week asks nothing of you and a bad week is one message away.
Shut the door on an address or a country
Block a single address, a whole range or a whole country, on any address format. Allow rules are always read before block rules, so somebody you trust is never caught by a sweep you wrote for somebody else.
Write your own rules
Describe the rule you want and it is written for you, up to 25 a site. Each one can match on a visitor's address, the page they asked for, their browser, where they came from or their country, and each one can turn them away, wave them through, or simply keep a record.
Cap how fast anyone can ask
Hold any one visitor to five, fifteen or forty requests a second, whichever suits your site, and set a tighter ceiling on any page that deserves one. Everybody else keeps browsing at full speed while the busy address waits its turn.
Ask KoraFive levels of strictness
Balanced
Every site starts hereAllow rules are always read before block rules
Up to 25 a siteMatch onThen
Requests a second, any one visitor
51540
Everybody else keeps browsing at full speedAn engineer goes through your site, for a price you can read now.
The same review our own tools run every night, with a KapsuleHost engineer reading the result and writing you what to do about it.
US$240.00Charged once
- 1The connection
- 2The response headers browsers look for
- 3The eight sensitive addresses attackers try first
- 4The WordPress checklist
Site Security AuditUS$240.00
- A fixed price, in your currency, before you talk to anyone
- A single charge, paid once
Kora answers immediately, and a KapsuleHost engineer is with you inside 4 business hours.
Every change to your security is written down.
Who did it, when they did it and where they were, kept for every site.
Share your account with a developer or an agency
If you share your account with a developer or an agency, this is the page that tells you exactly what changed and who changed it.
Good questions, answered.
Every protection on this page starts the minute your site is created, on whichever plan you pick.
Ways To Reach UsThe protection here sits in front of your site rather than inside it, so an attack is refused before WordPress, your theme and your plugins are ever asked to run. That is the layer a plugin cannot reach, and it is running on your site already.
The firewall, the nightly malware sweep, the sign-in protection, the blocking controls and your own rules are all included in the price of your plan, on every plan we sell. The only charged thing on this page is the audit, US$240.00 charged once.
They are refused at the front door and the attempt is recorded, so you can open your site in the panel and read exactly which addresses were turned away, by which rule, and when. On a WordPress site an address that keeps guessing a password is banned outright for an hour.
Yes. Ask Kora and it reads your own site's records back to you in plain words: what was refused, how often, and from where. It is the same information our engineers look at, and you get it by asking for it in a sentence.
Book the audit and an engineer goes through it for a fixed price, US$240.00 charged once. Before that, Kora answers straight away at any hour, and if it needs a person one takes it over within 4 business hours, or 1 hour on Care Pro.
Get your site behind all of it today. Let's go.
- Start free for 30 days
- 30-day money-back guarantee