Skip to content
Darkside

The unglamorous part of the job

Darkside Security | Harden and Scan WordPress

Nobody buys a site because of its redirect table. They leave because of it. This is the unglamorous half of the job, the half that only gets noticed when it fails, and it is where the Darkside Suite quietly does the most work.

Security, and the year that made it urgent

11,334 vulnerabilities were disclosed across the WordPress ecosystem in 2025, up 42% year on year, and 91% of them originated in third party plugins. In 2026 a supply chain backdoor sat dormant for eight months before activating, closing 31 plugins and erasing over 120,000 reported active installs. Plugin trust is now a purchasing question, not a technical one.

Darkside Security is $49 a year and carries thirty seven hardening settings. A hidden admin login, guard and protected pages, TOTP two step login. Lockouts with retry limits and ban lists, security headers and HTTPS. A form guard with reCAPTCHA and Turnstile, country blocking, and a firewall with off, watch only and block modes.

SVG upload sanitization, which none of the five competitors offers

Two capabilities in it are offered by none of the five competitors we compared, Sucuri included. One is SVG upload sanitization. The other is quarantine, which moves a suspect file out of reach with restore or discard. A third exists elsewhere only partially: core file repair from the official WordPress checksum, with only checksum matched files ever written back. At Sucuri that is a human cleanup service starting at $229 a year. Expected files can be marked as known, so real warnings stay worth reading. And when wordpress.org cannot be reached, the scan says core went unchecked rather than implying it passed.

Redirects, free

Darkside Redirects costs nothing. 301, 302, 307 and 410 with regex matching. A 404 log with hit counts, last seen, visitor location and referrer, and one click to turn a logged 404 into a rule. Rules are generated automatically when a published page changes its slug. Groups toggle as a set. Import and export by CSV, plus export to Apache and nginx config.

301, 302, 307 and 410 rules, grouped and toggled as a set

Conditional redirects by country are offered by none of the five competitors. Redirection, on over two million sites, is the only one with meaningful conditional logic at all, and it has no country field.

A holding page that behaves

Darkside Maintenance is also free. Six presets that change the look while leaving your heading, words, logo, form, countdown and social addresses exactly as written. Video or image backgrounds, countdown, social icons, live preview and role based bypass.

Six presets that change the look and leave every word you wrote alone

It returns 503 with a Retry-After header so search engines do not reindex the holding page, and the lock exempts AJAX, REST and cron so submissions actually go through. Form capture is included, where the Maintenance plugin by fruitfulcode puts CSV export of submissions behind Pro.

And in other languages

Darkside Translate, $49 a year, crawls the site into a phrase dictionary and swaps phrases on translated pages rather than duplicating content. Translate once, reuse everywhere, with CSV import and export and a language picker.

Every phrase on the site in one dictionary, translated once and reused