Comparison

SiteLock vs MalCare — WordPress Security Platform

SiteLock lands on Skip, and MalCare — WordPress Security Platform lands on Depends.

SiteLock

Skip

Confidence: Medium

Skip it for typical WordPress/SMB sites: G2 averages 2.4/5, billing complaints recur, and its own plugin shipped auth-bypass CVEs.

Depends

Confidence: Medium

Buy it if you run a serious WordPress site and want scans, firewall, and one-click cleanup from ~$99/year.

SiteLock versus MalCare — WordPress Security Platform
Compare	SiteLock	MalCare — WordPress Security Platform
Verdict	Skip	Depends
Best for	Non-technical SMB site owners	Serious WordPress site owners
Who it's not for	WordPress sites . free Wordfence scans better	Non-WordPress sites . zero coverage
Privacy	SiteLock's own WordPress plugin has published missing-authorization/auth-bypass CVEs.	No known public vulnerabilities found in the sources reviewed.¹⁵
Support quality	'Customer service is just ok' on G2; billing disputes	No support-quality evidence in sources
Public sentiment	Sentiment is strongly negative: 2.4/5 on G2, recurring billing and support complaints, and Reddit threads openly questioning its value.^¹	Reviewers describe MalCare as reliable autopilot security with easy one-click cleanup, noting some tier limits.
Biggest gotcha	12-month contract requirement reported by reviewers; hard to exit^⁴	Entry plan at $99/year has firewall limits; real protection likely $199+/year.