Jetpack Protect

84 Quality Score

Active Installs

23/30

At 100,000 active installs and a score of 75/30, the plugin has solid adoption but remains a distant fourth or fifth compared to Wordfence (5 million) or Really Simple Security (3 million).

Update Freshness

25/25

With a last update on April 11, 2026 and tested against WordPress 6.9.4, the maintenance score of 100/25 reflects genuinely current, actively maintained code.

User Rating

14/15

The user rating of 94/100 from 120 reviews is strong, though the small sample size means it should be weighed lightly against broader community feedback.

Support Health

8/15

A support health score of 50/15 and zero resolved threads out of zero total is the weakest data point here, suggesting little public support activity on the WordPress.org forum for this specific plugin.

WP Compatibility

15/15

Tested with WordPress 6.9.4, requiring WordPress 6.8 and PHP 7.2, the compatibility score of 100/15 reflects modern, up-to-date requirements with no red flags.

Scores higher than 93% of indexed plugins

About

Free daily vulnerability scans & WordPress security, powered by WPScan (an Automattic brand) and its 60,000+ vulnerability database. No setup needed!

Active Installs 100k+

Rating ★★★★½ 4.6/5

Last Updated 2026-08-12 4:39pm GMT

Requires WordPress 6.9+

Tested Up To 7.0.4

Requires PHP 7.2+

✓ No known vulnerabilities

What It Does

Jetpack Protect runs automated daily scans of your WordPress site against WPScan's database of over 60,000 known vulnerabilities, checking your installed plugins and themes for known security issues. The plugin requires no configuration; you activate it and it begins reporting potential threats in your dashboard. It is a focused scanning tool, not a full firewall or malware cleaner.

Who It's For

This plugin suits small business owners, bloggers, and non-technical site administrators who want a set-and-forget vulnerability scanner without configuring complex security rules. It is also a reasonable fit for agencies managing multiple client sites that already use other Jetpack products and want consolidated reporting through the Automattic ecosystem.

Who Should Skip It

Sites that need a web application firewall, real-time traffic monitoring, brute-force login protection, or active malware cleanup should look elsewhere, since Jetpack Protect focuses almost exclusively on vulnerability scanning. Sites on managed WordPress hosts that already include server-level security scanning will get little additional value.

The Bottom Line

Jetpack Protect delivers exactly what it promises: a zero-configuration daily vulnerability scan backed by WPScan's 60,000+ database, and the maintenance and ratings signals are genuinely strong. It is not a complete security solution on its own, so treat it as one layer in a broader stack rather than a replacement for a firewall. With a PluginCheck score of 83.99/100, it earns a cautious recommendation for users who specifically need vulnerability scanning without the complexity of Wordfence or Sucuri.

Related Plugins

Wordfence Security 97/100

Pick Wordfence when you also need a full firewall, login security, and live traffic monitoring rather than just vulnerability scanning.

Really Simple Security 99/100

Choose Really Simple Security if your top priority is SSL/HTTPS enforcement and lightweight hardening rather than deep vulnerability data.

Jetpack 94/100

Pick the broader Jetpack plugin if you also need backups, performance, and growth tools bundled in one subscription.

All-In-One Security (AIOS) 91/100

Choose AIOS when you want a free, full-featured security suite including a firewall, login lockdown, and database security without any paid tiers.

Simple CAPTCHA with Cloudflare Turnstile 90/100

Pick this Turnstile CAPTCHA plugin as a lightweight complement if your main concern is bot and brute-force protection on forms rather than vulnerability scanning.