For people who look after other people’s sites.
BetterShield is complete on its own: the whole audit, every finding, every one-click fix, and an undo for each of them. Ultra unlocks none of that. It adds the features people need when they look after sites for others.
Every check, finding and fix is free. Ultra adds features and lifts three limits.
See the plans Compare Free and Ultra
Distributed by WPDeveloper outside the WordPress plugin directory. It needs the free plugin, active on the same site, and does nothing without it. Nothing changes on your site until you set something on one of its tabs.
What Ultra adds
12 features for looking after sites for others: sign-in rules by role, reports for your clients, alerts where your team works, longer history and Cloudflare controls. Under a feature, the line it will not cross.
-
Two-factor setup at sign-in
Choose the roles that need a second factor, with a grace period. Once it is up, their next sign-in opens an enrollment screen right after the password.
People in an enforced role cannot remove their own second factor, and an administrator can always turn two-factor off for someone.
-
Passkey policy
Remind the roles you choose to add a passkey, and decide whether a passkey counts as both factors.
A reminder, not a requirement: nobody is stopped from signing in for want of a passkey.
-
Trusted devices
Skip the code screen on a device for a number of days. Each person can see and remove their own devices.
Devices are forgotten when the password changes.
-
The sign-in report
Two-factor and passkey coverage for each role, with a CSV export.
-
Sign-in screens in your name
Your logo, accent color, heading and opening line on the code and enrollment screens.
-
Alert channels
Send BetterShield’s alerts to Slack, a JSON webhook or a syslog collector: up to five destinations, each with its own severity floor. A destination can receive the alerts, or the whole activity record for the event classes you choose, and a button sends a test message to check it.
As well as email, never instead. Webhook addresses must use https and cannot point at this site or a private address.
-
The client report
A scheduled report for the people who pay for the site and never sign in to it: where the site stands, what was fixed and what happened, on the day you choose. Up to five recipients, with your agency’s name and the logo from your branded sign-in screens.
No links into a dashboard the reader cannot open, and nothing is sold inside it.
-
Temporary access
Give someone a role for anything from an hour to 30 days, and it ends on its own. A card shows every grant in force, with an End now button.
Their previous roles are put back exactly, and the last administrator is never removed.
-
Cloudflare controls
From the Cloudflare tab, raise the zone’s security level, put a challenge on the network of a sign-in lockout, and deploy Cloudflare’s managed ruleset. Needs WordPress 7.0 or newer and a Cloudflare token saved in Settings › Connectors.
Every change is written to the undo ledger before it is made. A lockout rule is always a challenge, never a block, and nothing happens at the edge while safe mode is on.
-
Hourly checks of files with no official copy
BetterShield’s check of drop-ins, must-use plugins, the active theme, wp-config.php, the root .htaccess and plugins with no published copy runs every hour instead of once a day.
-
90 days of activity history
The activity log keeps 90 days instead of 30.
-
No hourly limit on explanations
BetterShield’s hourly cap on plain-language explanations of a finding is lifted.
Your AI key stays with WordPress. The add-on never asks for, stores or sends one.
Four licenses, by number of sites
Every plan has every Ultra feature, and every license is yearly.
-
Personal
1 site
$79 per year
Every Ultra feature, on one site.
-
Business
5 sites
$179 per year
Every Ultra feature, on up to five sites.
-
Agency
25 sites
$599 per year
Every Ultra feature, on up to 25 sites.
-
Agency Plus
100 sites
$1,799 per year
Every Ultra feature, on up to 100 sites.
14-day money-back guarantee
Full refund within 14 days on any Ultra plan. Each plan renews yearly at the same price until you cancel.
How the license works
Install BetterShield from the WordPress.org directory first, then upload the add-on and activate it. Its License tab, under Ultra in the BetterShield menu, takes your license key, and the key is what brings updates.
Activation, deactivation, a weekly license check and updates go between your site and api.wpdeveloper.com. They carry your license key, the site address, the product and its installed version, and the site’s environment type. Update checks also send your WordPress and PHP versions.
Deactivate Ultra and your site goes back to BetterShield’s free features on the next request, and nothing breaks. Your Ultra settings are kept, so they come back when you activate it again.
What the free plugin includes
Everything below is in the free plugin, with no license. Ultra lifts three of its limits: the activity log keeps 90 days instead of 30, the check of code with no published copy runs every hour instead of once a day, and the hourly cap on plain-language explanations goes.
- The 54-check audit and its score, with every finding explained in plain language.
- All 16 one-click fixes, each with an undo that never expires.
- Login protection, the hidden bot check, and limits on the comment, password reset and sign-up forms.
- Two-factor with any authenticator app and 10 single-use backup codes, and passkeys.
- The activity log: 30 days, with filters, search and a CSV export, and each finished day sealed.
- A weekly summary that arrives on quiet weeks too, and high or critical events emailed on their own.
- A single-use recovery link that pauses the sign-in protections for an hour, and printed recovery codes.
- Core and directory plugin files compared with the copies WordPress.org publishes, and one click to put one back.
- Incident response, with the plan shown before anything changes.
- The MCP server: 18 read-only abilities for your AI assistant, and a second switch, off by default, that lets it apply and undo fixes.
No alert BetterShield sends ever contains an upgrade prompt, and nothing is sold inside the client report Ultra sends to your clients.
Frequently asked questions
Short answers to the questions we get asked most about plans, licenses and refunds.
Is BetterShield free?
Yes. The audit, every plain-language explanation, all 16 fixes and their undo, two-factor authentication, passkeys, login protection, the recovery link, the activity log, incident response, the file check and the MCP server are free. There is no account and no payment. BetterShield Ultra is a separate paid add-on for people who look after sites for others.
What is the difference between the Ultra plans?
Only the number of sites one license covers: 1, 5, 25 or 100. Every plan has every Ultra feature, and every license is yearly.
Do I need the free plugin to use Ultra?
Yes. Ultra adds to the free BetterShield plugin, active on the same site, and starts nothing without it. If BetterShield is missing, the plugins screen offers to install and activate it.
What does the license key do?
It brings updates. You enter it on the License tab under Ultra in the BetterShield menu. Activation, deactivation, a weekly license check and updates go between your site and api.wpdeveloper.com, and they carry your license key, the site address, the product and its installed version, and the site’s environment type. Update checks also send your WordPress and PHP versions.
What happens if I deactivate Ultra?
Your site goes back to BetterShield’s free features on the next request, and nothing breaks. Your Ultra settings are kept, so they come back when you activate it again.
Can I get a refund?
Yes. Full refund within 14 days on any Ultra plan.
Close the open doors today
Install the free plugin. The first audit runs when you activate it, and nothing changes until you choose a fix.
Requires WordPress 6.7 or newer and PHP 8.0 or newer.