Hide My WP Ghost is now WP Ghost. Same product, same team since 2016.

Stop WordPress Attacks Before They Happen

Join 250K+ WordPress sites already secured. Every plan includes every premium feature. You only pay for scale.

SPRING SALE ENDS IN

Days
Hours
Minutes
Seconds
Yearly
Lifetime

Ghost 1

For your personal site or main project

$ 29
99 /year
  •  

All premium features

Protect 1 website

Paddle secure payment · 30-day refund

65% OFF

Most Popular

Ghost 5

For freelancers and small agencies
juggling client sites
$149
$ 52
50 /yr
  •  

$10.50 / site / year

You save $96.50 · 65% off

Paddle secure payment · 30-day refund

70% OFF

Ghost All

For agencies protecting
unlimited client portfolios
$640
$ 192
00 /yr
  •  

Unlimited sites · one flat price

You save $448 · 70% off

Paddle secure payment · 30-day refund

70% OFF

Ghost 5 · Lifetime

Pay once,
Protect 5 sites forever.

$600
$ 180
  •  

$36 / site · lifetime

You save $420 · 70% off

Paddle secure payment · 30-day refund

70% OFF

Ghost 10 · Lifetime

Pay once, Protect 10 sites forever.
The agency sweet spot.

$1196
$ 360
  •  

$36 / site · lifetime

You save $836 · 70% off

Paddle secure payment · 30-day refund

70% OFF

Ghost 1000 · Lifetime

For large agencies.
Pay once, protect everything.

$2560
$ 640
  •  

from $0.64 / site · lifetime

You save $1,920 · 75% off

Paddle secure payment · 30-day refund

250K+

sites protected

4.8 / 5

avg. rating · G2 · Capterra

30-day

money-back guarantee

Paddle

secure global checkout

Hide My WP Ghost Pricing - WordPress Security Plans

What's Included

Trusted by 250K+ WordPress Sites Worldwide

Your website’s security is backed by proven results, excellent support, and thousands of happy users.

Excellent Email Support

Cancel anytime, no hidden fees​​

Quick Setup - No Coding Required

Works Fast

Works with existing WordPress setups​​

WordPress Multisite

Free vs Premium
Compare WP Ghost Features

Path & URL Security
Free Pro
Change wp-admin path
Change wp-login.php path
Change plugin & theme directory paths
Change wp-content, wp-includes, uploads paths
Custom login/logout/register redirects by user role
Hide plugin & theme names with random names
Change paths in cache, sitemaps, RSS, robots.txt
Change REST API wp-json path
Change wp-content, wp-includes, uploads paths
Ghost Mode - maximum security preset
Hide common WP files (wp-config, readme, debug.log)
Manually customize individual plugin & theme names
Hide file extensions (PHP, CSS, JS, HTML, JSON…)
Free Pro
7G Firewall
8G Firewall
SQL injection & script injection protection
IP whitelist / blacklist
Security headers (HSTS, CSP, X-Frame-Options, XSS)
Block theme detector crawlers
User agent, referrer & hostname blacklists
Automate IP blocking (repeat offenders)
Configurable automation rules
AI Crawler Blocking (30+ crawlers)
Auto robots.txt Disallow rules for AI crawlers
Free Pro
Brute force protection on all forms
Google reCAPTCHA v2, v3, Enterprise + Math CAPTCHA
2FA by authenticator code
2FA by email
2FA by passkey (Face ID, Touch ID, Windows Hello)
Magic Link passwordless login
Temporary time-limited logins for collaborators
Trust current browser (skip 2FA on trusted devices)
Free Pro
Security Optimization Score (0–100)
GEO Threats Map - top 5 attack countries
Weekly domain security monitoring email
Security Threats Log (last 20 entries)
User Events Log (last 20 entries)
Full Security Threats Log - unlimited history
Full User Events Log - unlimited history
Filter logs by type, status, country, time range
Full-text search + pagination in logs
Export logs to CSV
Cloud storage for event logs (30-day retention)
Real-time email alerts for suspicious activity
Free Pro
Security Check - identify weak usernames, prefix, SALT, permissions
Fix weak admin/administrator usernames
Regenerate WordPress SALT keys
Change database table prefix
Fix file & directory permissions
Fix WordPress & script debugging mode
Disable plugin/theme editor
Free Pro
GEO Threats Map on dashboard
Top 5 threat countries with attack counts
Country Blocking - block entire countries
Path-based country blocking

Real Reviews from Verified Customers

“This one just works. It’s relatively simple to set up, and it has many security features. I decided to buy the Pro version and didn’t regret it. I highly recommend it.”

Sinisa S. | CEO · Internet

“Before, we had to use reCaptcha to keep spammers away, but captchas are bad for site performance. With Hide My WP Ghost we don’t have to worry about spammers anymore.”

David S. | Director of Installation · Construction

“I really like HMWG as alternative to other WP security tools. I use it on several sites, without any probs. At my sites it doesn’t slow down my instances. A clear recommendation.”

@planetomobiley | WordPress user · Multiple sites

“Since I installed the plugin, it’s stopped all the brute force attacks on my site. I don’t have to worry about my account data or my customers’ info being hacked. If you want to keep your WordPress site safe, you need to get Hide My WP Ghost.”

Adrian N. | Owner · Marketing & Advertising

2.5M+

plugin

downloads

100M+

monthly threats

prevented

250K+

Secured

websites

10M+

monthly brute force

stopped

4.5

4.8

4.8

4.8

Frequently Asked Questions
About WP Ghost Pricing

Do I pay once or every year?

You choose. Yearly plans (Ghost 1, Ghost 5, Ghost 10, Ghost All) renew automatically every 12 months and include continuous updates plus priority support. Lifetime plans (Ghost 5 LTD, Ghost 10 LTD, Ghost 1000 LTD) are a single one-time payment with lifetime updates – no renewals, ever. You can cancel a yearly plan anytime from your account without affecting your site’s current protection.

Each paid license is tied to a specific site count: Ghost 1 covers 1 site, Ghost 5 covers 5 sites, Ghost 10 covers 10 sites, and Ghost All covers unlimited sites. A WordPress Multisite network counts as 1 license for the entire network, regardless of how many subsites it contains. The free Lite version has no site limit.

Yes, unlimited times, with no fees or waiting period. Deactivate WP Ghost on the old domain, then activate it with the same license key on the new one. You can also manage all transfers manually from WP Ghost Dashboard > Manage License. Ideal for agencies rotating clients or site migrations.
Yes, a full 30-day money-back guarantee, no questions asked. If the plugin doesn’t work on your site or doesn’t meet your expectations, request a full refund within 30 days of purchase and you’ll get your money back. Full details: Refund Policy.
Payments are processed securely through Paddle, which supports 45+ payment methods worldwide: Visa, Mastercard, American Express, Discover, PayPal, Apple Pay, Google Pay, SEPA, iDEAL, and regional options depending on your country. All transactions are PCI-DSS compliant and VAT is handled automatically on your invoice.
The free Lite version covers the basics: hiding wp-admin and wp-login paths, simple brute force protection, and core security tweaks.Premium adds the 7G/8G Firewall, SQL injection & XSS protection, two-factor authentication (2FA with passkey and fingerprint support), country blocking (Geo Security), AI crawler bot blocking (GPTBot, ClaudeBot, PerplexityBot and 30+ others), full security threat logs with CSV export, the login page designer, temporary logins, and priority expert support.See the full Free vs Premium comparison.Download Free Lite from WordPress.org

Your WordPress site stays fully protected, the plugin keeps running with every feature you’ve configured. What you lose is access to plugin updates, compatibility patches (for new WordPress, PHP, or WooCommerce versions), new security features, and priority support. Renewing is recommended to stay covered against newly discovered threats and to keep the plugin compatible with future WordPress releases.

LAST UPDATE

6 Apr 2026
Compatible WP 7.0.x & PHP 8.5

VIDEO TUTORIALS

Youtube Channel

KNOWLEDGE BASE

Tutorials & FAQs

Secure Your Website! Protect Your Business!

Join 250K+ site owners already protected from WordPress attacks.

Awesome Integration