Side by side
ModSecurity vs SiteLock
Both stand on website security software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan LinuxMacSelf-hosted+1
ModSecurity offers an open-source WAF engine that runs within a compatible web server and can operate with or without the OWASP Core Rule Set. The project advises tuning detection events before enabling blocking.
Visit ModSecurity Free plan Self-hostedWeb
SiteLock combines scanning, removal, health reporting, and optional patching, firewall, and CDN features. Review plan differences if you need expert cleanup, PCI reporting, or faster ticket responses.
Visit SiteLockThe facts
| ModSecurity | SiteLock | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | Linux, Mac, Self-hosted, Windows | Self-hosted, Web |
| Lowest paid plan | Free or on request | SiteLock Basic Plan: $19.99 a month |
| Plans published | 1 | 3 |
| Maker | Not published | Not published |
| Website | modsecurity.org | sitelock.com |
| On website security software | #3 of 27 | #7 of 27 |
ModSecurity: what it does well
- Runs with Apache, Nginx, or IIS
- Can be used with the OWASP Core Rule Set
- Supports traffic logging and passive security assessment
- Free and open source
What to know first
- Runs inside a web server, not as a standalone appliance or proxy
- Inspecting every request can have a small performance impact
- Managed rule sets are not included
SiteLock: what it does well
- Daily scans check several website threat types
- Automatic malware removal is included on every plan
- Vulnerability detection is included across plans
- Pro and Business include WAF and CDN
- Offers a free plan and 30-day trial
What to know first
- Automatic patching starts with Pro
- Basic excludes SiteLock expert team removal
- Free scan cannot guarantee a clean site
- Paid plans start at $19.99 a month
Alternatives to ModSecurity Alternatives to SiteLock The whole list