Halkali merkez neighborhood fatih st ozgur apt no 46 , Kucukcekmece , Istanbul , 34303 , TR
Every day, over 90,000 WordPress sites face hacking attempts. Eka Security Pro is an all-in-one security solution that protects your WordPress site at professional level with WAF, malware scanner, brute force protection and core integrity check.
Instantly block SQL Injection, XSS, RFI attacks
18+ deep scan with malicious pattern
Automatic IP locking + CAPTCHA
WordPress.org checksum comparison
Every day around the world More than 90.000 WordPress sites is subject to hacking attempts. Weak passwords, plugins that don't update, and unprotected login pages make your site an obvious target for cybercriminals.
Eka Security Prois an all-in-one security solution that protects your WordPress site at a professional level. Includes advanced WAF firewall, malware scanner with 18+ pattern, brute force protection, core file integrity check, quarantine system and WP-CLI support.
Block SQL Injection, XSS, RFI/LFI attacks in real time
18+ malicious pattern — webshell, backdoor, obfuscated code detection
Safely move suspicious files, restore with one click
WordPress.org checksum comparison
Automatic IP locking and math CAPTCHA
.htaccess protection, directory listing blocking, HTTP headers
Instant alerts for scanning, locking and firewall events
Instant safety score over 100 and 11+ criteria
Scanning, quarantine, score and log management from Terminal
Protocol restrictions that reduce the attack surface by 60 %
Block PHP, CGI, Shell file uploads by MIME type
Manage trusted and blocked IP addresses
It analyzes every request that reaches your WordPress site in real time. SQL Injection, Cross-Site Scripting (XSS), Remote File Inclusion (RFI) and Path Traversal It blocks common attack types such as attacks before they reach your server.
Malicious bots and security scanners (SQLMap, Nikto, WPScan, Acunetix etc.) and cuts off their access automatically.
More than 18 malicious code patterns It scans all the files of your site in depth. eval(), base64_decode(), shell_exec(), system() Detects dangerous functions such as
Captures known webshell filenames like c99, r57, WSO, Alfa Shell
Flags hex/chr encoding techniques and suspicious lines with 5.000+ characters
Batch scan support on large sites without loss of performance
Instead of removing detected suspicious files from your site to a private quarantine area protected by .htaccess. carries. The original location, MD5 hash value, threat type and detail are stored in the database.
WordPress.orgIt compares your core files to their originals using 's official checksum API. Instantly reports modified, missing or extra added files. wp-admin and wp-includes Detects suspicious PHP files in directories.
It tracks unsuccessful login attempts on an IP basis and when the limit you set is exceeded, Automatically locks IP address. Lockout duration and number of attempts are fully customizable.
Additional layer of protection against bot attacks
Shows security warning when using username "admin"
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Referrer-Policy: strict-origin-when-cross-origin
| feature | Eka Security Pro | Wordfence Free | Sucuri Free |
|---|---|---|---|
| Web Application Firewall | ✅ | ✅ | ❌ |
| Malware Scanner (18+ pattern) | ✅ | ✅ | ❌ |
| Quarantine System | ✅ | ❌ | ❌ |
| Core File Integrity | ✅ | ✅ | ✅ |
| Brute Force + CAPTCHA | ✅ | ✅ | ❌ |
| .htaccess Strengthening | ✅ | ❌ | ✅ |
| HTTP Security Headers | ✅ | ❌ | ❌ |
| XML-RPC + REST API Control | ✅ | partial | ❌ |
| MIME Type Validation | ✅ | ❌ | ❌ |
| WP-CLI Commands | ✅ | Premium | ❌ |
| Security Score | ✅ | ❌ | ❌ |
| Monthly/Annual Subscription | ❌ Yok | ✅ Required | ✅ Required |
| One-Time Payment | ✅ | ❌ | ❌ |
Protect your site with one click, track your security score
Keep customer data and payment information safe
Apply professional security standards to all sites you manage
Strengthen security infrastructure for KVKK/GDPR compliance
Automate security processes with WP-CLI
Manage your customers' sites from a single center
Select Plugins → Add New → eka-security-pro.zip
Click the Activate Plugin button
Open Eka Security → Dashboard → WAF and Brute Force, start the first scan
Current WordPress version recommended
fileinfo, json, mbstring plugins
Database support
~5 MB disk space (excluding quarantine)
The most frequently asked questions about Eka Security Pro.
WAF firewall, 18+ pattern malware scanner, brute force protection, quarantine system and WP-CLI support — all in one plugin.
Source code included · 6 months free support · Lifetime updates · No subscription
Turkey (Turkish)
Germany (German)
Worldwide (English)
