WP Masquerade Free vs Pro

Free: WordPress hidden, 5 profiles, login moved, XML-RPC blocked, trap counting. Pro: aliases, 2FA, headers, integrity, alerts… The full line-by-line breakdown.

Feature comparison of the free and Pro versions
FeatureFreeFree foreverDownloadProFrom €59 excl. tax / yearSee pricing
Disguise
Hide WordPress and report different softwareIncludedIncluded
Authentic generator tag for 5 popular profiles (Joomla!, Drupal, PrestaShop, TYPO3, MediaWiki)IncludedIncluded
41 imitation profiles (blogs, forums, wikis, ecommerce…)Not includedIncluded
Full markers recognized by Wappalyzer (headers, JavaScript variables)Not includedIncluded
Basic technical links removed (RSD, Windows Live Writer, shortlinks)IncludedIncluded
Plugin HTML comments and generator tags removed (Yoast, Rank Math, Site Kit, Elementor, cache plugins...)IncludedIncluded
REST API and oEmbed discovery links removedNot includedIncluded
File URL aliases (wp-content, media, wp-includes, plugins, themes) + blocking of old URLsNot includedIncluded
Rewriting inside inline scripts and JSON, LiteSpeed Cache / WP Rocket outputNot includedIncluded
Login protection
Custom login URL, wp-login.php and wp-admin hiddenIncludedIncluded
Unknown AJAX and admin-post requests answered with 404, without the WordPress errorNot includedIncluded
Login attempt limitingNot includedIncluded
Two-factor authentication (authenticator app codes, backup codes, required by role)Not includedIncluded
Hardening
Pingbacks and XML-RPC blockedIncludedIncluded
Author list hidden (/?author=, REST API, sitemaps)Not includedIncluded
Security headers (HSTS, X-Frame-Options, Referrer-Policy, CSP…)Not includedIncluded
Monitoring and alerts
WordPress core integrity checkNot includedIncluded
Email alerts and weekly security reportNot includedIncluded
Alerts on vulnerable plugins and themes, with the vulnerability explained and the fix to applyNot includedIncluded
Administrator activity log (logins, plugins, users, settings)Not includedIncluded
Image hotlink detection and protection (report, allow and block lists, alerts)Not includedIncluded
Traps: counts bots probing for vulnerabilitiesIncludedIncluded
Traps: automatic banning, detailed log, fake admin pagesNot includedIncluded
Tools and services
Cloudflare support: real visitor IP for limits, bans and logsNot includedIncluded
Settings import and export, section-by-section import and reusable settings profilesNot includedIncluded
Automatic updates, signature feed and priority supportNot includedIncluded
Other features
Update monitoring of all your sites in the member area (WordPress, plugins, themes, PHP version, known vulnerabilities), optional weekly summaryNot includedIncluded
AI crawler control (training, AI search and answers, user-requested fetches): robots.txt rules and optional strict blockingNot includedIncluded
Agency dashboard in the member area: security score per site, client groups, client reports, settings profiles, white-labelNot includedIncluded
Setup, compatibility and services
Guided setup and Essential, Recommended, Maximum modesLimitedbest free optionIncluded
Custom name reported instead of a profileIncludedIncluded
New login URL tested before it goes liveIncludedIncluded
Purging for LiteSpeed Cache, WP Super Cache and WP RocketIncludedIncluded
Plugin files invisible to scanners (Apache, LiteSpeed, o2switch)IncludedIncluded
Local diagnostics and Troubleshooting tabIncludedIncluded
Admin in 7 languagesIncludedIncluded
Alias rules for Apache, LiteSpeed, o2switch, Nginx, IIS and Caddy, verified from the browserNot includedIncluded
Signature feed (new trap patterns and markers)Not includedIncludedactive license
Disguised plugins catalogue extended and corrected between releases (signed updates)Not includedIncludedactive license

List taken from the plugin itself (Pro license tab) and from the member area. Pro installs on its own: it includes the free version.

Which version should you choose?

The free version is enough if…

  • you want to remove the obvious WordPress clues, report Joomla!, Drupal, PrestaShop, TYPO3 or MediaWiki, and move the login page;
  • your site has only one or two accounts, already protected by strong passwords;
  • you want to try the plugin on your hosting first.

Upgrade to Pro if…

  • you want a tool like Wappalyzer to actually recognize the reported software, or you want to imitate a forum, blog or wiki;
  • you want to remove /wp-content/ from your pages and hide the author list;
  • several people log in to your site, or you manage client sites: two-factor authentication and login attempt limiting become essential;
  • you want to be notified: daily integrity check, email alerts and a weekly report;
  • you run several sites, your own or your clients’, and want to see at a glance which ones are waiting for an update or are affected by a known vulnerability, from your member area;
  • your site makes revenue or collects customer data: a hack would cost far more than the license (see the cost comparison);
  • you want security headers without touching your server configuration, automatic bot banning, and new trap patterns as they come out.

How to upgrade to Pro

WP Masquerade Pro installs as a single plugin that includes the free version: if the free version is already on your site, keep it or delete it. Then paste the activation code generated for that site in your member area into the Pro license tab, and the locked options unlock. Your current settings are kept.

If your license expires or is revoked, Pro features stop (including updates, the feed and support) and the free features keep working, with nothing to reinstall. Your site doesn’t break: an alias map that’s already been verified stays in place, and accounts already using two-factor authentication keep it. If you deactivate WP Masquerade Pro, the masking stops too, unless the free version is installed and active: modules then revert to the best free option. Either way, pages go back to /wp-content/ URLs, so remove the alias server rules first. More about aliases.

Everything is included. Vulnerable plugin alerts, the administrator activity log, Cloudflare support and settings import and export are included in every Pro license at no extra cost, as is the update monitoring of all your sites in the member area. Image hotlink protection is also included at no extra cost. The same goes for AI crawler control, the agency dashboard and the disguised plugins catalogue updates.

Hide, lock down and monitor all your sites

From €59 excl. tax per year for one site, €149 for 10 sites, €399 for 100 sites, or €990 one-time for unlimited sites. Prices excl. tax. VAT not applicable (art. 293 B of the French Tax Code): “TVA non applicable, art. 293 B du CGI”.

Choose my license
Start for free

WordPress security, without the noise

One e-mail when something matters: new attacks seen in the wild, plugin updates and practical guides. No spam, unsubscribe in one click.