Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Free
3M+ installs 4.9★ (8,862)
Jetpack Protect
Free daily vulnerability scans & WordPress security, powered by WPScan (an Automattic brand) and its 60,000+ vulnerability database. No setup needed!
The facts
- Rating
- 4.6★ from 123
- Active installs
- 100k+
- Price
- Free
- Last updated
- 12 Aug 2026
- Added
- May 2022
- Requires WP
- 6.9
- Tested up to
- WP 7.0.4
- Requires PHP
- 7.2
- Downloads
- 2,615,804
Our analysis
AI-assistedJetpack Protect is a free WordPress security plugin that provides daily vulnerability scans to help safeguard your website. It checks for vulnerabilities in your WordPress version, installed plugins, and themes, alerting you to potential security threats. The plugin is designed for users who want to enhance their site's security without needing extensive technical knowledge.
Developed by Automattic, Jetpack Protect leverages WPScan's extensive vulnerability database to keep your site informed about security issues. While it offers essential scanning features, it is not intended for cleaning up sites already infected with malware, making it best suited for proactive security management.
Best for: This plugin is suitable for WordPress site owners looking to enhance their site's security easily.
What it does well
- ✓Free daily vulnerability scans
- ✓Checks WordPress version, plugins, and themes for vulnerabilities
- ✓No setup required; easy to use
- ✓Developed by Automattic, a reputable company in WordPress
- ✓Provides alerts about potential security threats
Where it falls short
- •Does not clean up existing malware infections
- •Limited to scanning; does not include advanced malware removal features
Verdict
Jetpack Protect offers a straightforward solution for monitoring website vulnerabilities, making it a practical choice for users prioritising security. However, it may not suffice for those needing comprehensive malware removal.
From the developer
Automattic's own description of Jetpack Protect, lightly tidied.
Free daily vulnerability scans & WordPress security, powered by WPScan (an Automattic brand) and its 60,000+ vulnerability database. No setup needed!
Total site security from WordPress experts
Jetpack Protect is a free and essential WordPress security plugin that scans your site and warns you about vulnerabilities, keeping your site one step ahead of security threats. It’s easy to use; setup requires just a few clicks!
By upgrading Protect, you also unlock malware scanning with one-click fixes for most issues and instant notifications when threats are detected. Our automated Web Application Firewall (WAF) also protects your site from bad actors around the clock.
Jetpack Protect is created by WordPress experts; our parent company Automattic is behind Jetpack, WordPress.com, WooCommerce, WPScan, and much more. There is no better company to understand the security needs of WordPress sites.
What does Jetpack Protect (free) check for?
Jetpack Protect scans your site on a daily basis and warns you about:
– The version of WordPress installed, and any associated vulnerabilities
– What plugins are installed, and any related vulnerabilities
– What themes are installed, and any associated vulnerabilities
What are vulnerabilities? Why do I need to scan my site regularly?
Site vulnerabilities are flaws in a website’s code that weaken the site’s overall security. These can be introduced to a site in various ways, in most cases unintentionally.
Some of the ways vulnerabilities can be introduced to a site are:
– Poorly written site code
– Plugin and theme bugs
– WordPress version bugs
– System misconfigurations
If a bad actor detects a vulnerability on your site, they can exploit it to access sensitive information, update your site, and more to damage your business or brand.
That’s why it’s essential to use a reputable and reliable vulnerability & malware site scanner like Jetpack Protect to safeguard your site.
Can I use Jetpack Scan to fix a site that is already infected?
Jetpack Protect (Scan) detects and prevents attacks, but is not designed to fully clean up sites infected before it was active. If your site has malware, take immediate action to clean it up and remove the malicious code.
To clean up your site, we suggest using a malware removal tool, or if possible restore from a backup taken before the infection. We recommend using Jetpack VaultPress Backup in conjunction with Jetpack Scan to secure your website.
Brute force attack protection
Tagged as
quality
Security
Alternatives
Other plugins for securing a site.
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....
Free
5M+ installs 4.7★ (4,983)
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Loginizer
93Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
Free
1M+ installs 4.8★ (1,030)
Safe SVG
93Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
Free
1M+ installs 4.9★ (79)
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...
Free
1M+ installs 4.7★ (1,715)