MalCare

Free plan Self-hostedWeb

What MalCare is

MalCare is a WordPress security plugin for scanning for malware, blocking attacks, and cleaning infected sites on eligible plans. Its deep scans run on MalCare’s servers rather than the customer’s site; the company says this avoids adding scan load to the hosting server. The Free plan provides weekly scans, vulnerability alerts, a basic firewall, and login protection, but detects malware without removing it. Protect scans every 24 hours and also excludes cleanup. Repair includes cleanup and a post-cleanup report, with scans every 12 hours; Fortify scans hourly and includes unlimited manual security fixes. Other listed features include bot protection, vulnerability alerts, two-factor authentication, geoblocking, and activity logs. MalCare says it tracks more than 39,000 known vulnerabilities and shares attack information from a network of more than 400,000 sites. Free costs nothing. Paid plans are billed yearly: Protect is $99 a year, Repair is $299 a year, and Fortify is $499 a year for one site. The company began in 2010 and says MalCare launched in 2016.

Who it suits

MalCare suits WordPress site owners who want scheduled security scans and protections such as a firewall and login protection. Sites that need malware cleanup should consider Repair or Fortify, since Free and Protect do not include it.

What it does well

Deep scans run on MalCare’s servers.
Free plan includes weekly scans and a basic firewall.
Repair and Fortify include malware cleanup.
Fortify provides hourly scans and unlimited manual fixes.
Tracks more than 39,000 known vulnerabilities.

What to know first

Free detects malware but does not remove it.
Protect does not include malware cleanup.
Paid plans are billed yearly.
Webhost suspension recovery is listed only for Fortify.

Limits

The Free plan runs weekly scans and detects malware without removing it. Protect scans every 24 hours and has no malware cleanup; Repair scans every 12 hours, while Fortify scans hourly.

Plans

Plan	Billed and limits	Price
Free	weekly scans · vulnerability alerts · basic firewall · login protection · malware removal not included	Free
Repair	yearly; $299 for 1 site or $899 for 5 sites · 1 site or 5 sites · malware cleanup and post-cleanup report · scans every 12 hours · expert response within 24 hours	$299 a year
Fortify	yearly; $499 for 1 site or $1,499 for 5 sites · 1 site or 5 sites · hourly scans · unlimited manual security fixes · expert response within 6 hours	$499 a year
Protect	yearly; $99 for 1 site or $299 for 5 sites · 1 site or 5 sites · no malware cleanup · scans every 24 hours · expert response within 48 hours	$99 a year

As malcare.com lists them, read 3 Oct 2026. The maker's own page has the final word.

Getting started

Go to the MalCare website.
Choose the Free plan or a yearly paid plan.
Select a paid site allowance: one site or five sites.
Use MalCare with a self-hosted site or on the web.

Verdict

MalCare offers a free detection tier and paid plans with cleanup and more frequent scans. Check the cleanup and scan limits of each tier before choosing one.

Questions

Is MalCare free?

Yes. Its Free plan costs nothing and includes weekly scans, vulnerability alerts, a basic firewall and login protection.

How much do the paid plans cost?

Plans are billed yearly. Protect costs $99 a year for one site or $299 for five; Repair costs $299 a year for one or $899 for five; Fortify costs $499 a year for one or $1,499 for five.

Which plan includes malware cleanup?

Repair and Fortify include one-click malware cleanup. Free and Protect do not.

Which platforms does MalCare support?

MalCare is listed for self-hosted sites and the web.

Does MalCare offer a refund window?

The pricing page states a 14-day refund window, with an exception if MalCare has already cleaned malware during that period.

Where is MalCare based?

The company is headquartered in Bangalore, India, and says its founder-led team began in 2010. It identifies MalCare as a security product launched in 2016.

Facts from MalCare's own pages

Billing and refunds: Paid plans are billed yearly, and the pricing page states a 14-day refund window subject to an exception when MalCare has already cleaned malware during that period. · malcare.com, 3 Oct 2026
Cleanup: Repair and Fortify include one-click malware cleanup, while the Free plan detects malware but does not remove it. · malcare.com, 3 Oct 2026
Company history: The company’s About page says its founder-led team began in 2010 and identifies MalCare as a security product launched in 2016. · malcare.com, 3 Oct 2026
Firewall: The product includes a firewall, with advanced firewall and virtual patching listed for Protect and real-time firewall listed for Repair and Fortify. · malcare.com, 3 Oct 2026
Founded: 2010 · malcare.com, 28 Sept 2026
Headquarters: Bangalore, India · malcare.com, 28 Sept 2026
Intended users: MalCare describes Fortify as intended for stores and mission-critical sites where an hour offline costs money. · malcare.com, 3 Oct 2026
Network intelligence: MalCare says it uses attack information from a network of more than 400,000 sites to share protection against detected attacks. · malcare.com, 3 Oct 2026
Off-server scanning: Its deep malware scans run on MalCare’s servers rather than the customer’s site, which the company says avoids adding scan load to the hosting server. · malcare.com, 3 Oct 2026
Other security features: The site lists bot protection, vulnerability alerts, login protection, two-factor authentication, geoblocking, and activity logs among its features. · malcare.com, 3 Oct 2026
Plan limits: Protect does not include malware cleanup, and webhost suspension recovery is listed only for Fortify. · malcare.com, 3 Oct 2026
Privacy: The company says MalCare does not add visitor tracking and can keep customer data in the EU on request. · malcare.com, 3 Oct 2026
Product: MalCare describes itself as a WordPress security plugin that blocks attacks, scans for malware, and removes it in one click. · malcare.com, 3 Oct 2026
Support: The pricing page lists expert response times of 72 hours for Free, 48 hours for Protect, 24 hours for Repair, and 6 hours for Fortify. · malcare.com, 3 Oct 2026
Vulnerability coverage: MalCare says it tracks more than 39,000 known plugin, theme, and WordPress core vulnerabilities. · malcare.com, 3 Oct 2026