WP Ghost
WP Ghost
$199
one-time, 5 sites
Plugin arenaSecurity & Backup
Two WordPress security plugins that hide paths, login and traces of WordPress from bots, with a lifetime license
Every row shows both deals next to each other. Where a figure can be measured, green marks the better value and red the weaker one.
What matters to you?
Mark the points you care about. They stand out in the comparison below; we do not derive a recommendation from them.
$199 (Weaker value)
one-time
$130 (Better value)
one-time
$399 (Better value)
Currently 50% off
No discount listed
5 sites (Weaker value)
Unlimited sites (Better value)
One-time payment for 5 sites with all premium features and lifetime updates; lifetime tiers for 25 and 1,000 sites are also available.
One-time payment for unlimited sites with unlimited updates and support (Developer license).
$119 per year
No yearly plan on record
| Period | Annual plan, total | Lifetime | Difference |
|---|---|---|---|
| Year 1 | $119 | $199 | Lifetime costs $80 more |
| Year 2 | $238 | $199 | You save $39 |
| Year 3 | $357 | $199 | You save $158 |
| Year 4 | $476 | $199 | You save $277 |
| Year 5 | $595 | $199 | You save $396 |
No yearly plan on record
21 months
against $119 per year
No yearly plan on record
No end date announced
No end date announced
Official website
Official website
No specific ecosystem
No specific ecosystem
Links marked “Ad” are affiliate links. Your price stays the same. Affiliate disclosure
WP Ghost vs WP Hide & Security Enhancer PRO compares two WordPress security plugins that hide the WordPress footprint of a site, so automated bots that scan for known paths, login pages and plugin versions find fewer targets. WP Ghost, formerly Hide My WP Ghost, and WP Hide & Security Enhancer PRO by NSP Code both change the login URL, both rewrite theme, plugin and core paths without moving files, both start from a free plugin on wordpress.org and both are sold as a lifetime license on the vendor’s own pricing page.
The differences lie in the scope and in the license model. WP Ghost is a broader security suite: on top of hidden paths it adds a firewall, brute force protection, bot blocking and country blocking, and a whole multisite network counts as one license. WP Hide & Security Enhancer PRO focuses on hiding WordPress: it removes version numbers and tell tale meta tags, supports Apache, LiteSpeed, Nginx and IIS and adds a vulnerability scan for installed plugins and themes. WP Ghost starts at 5 sites, WP Hide & Security Enhancer PRO covers unlimited sites. The rows below put WP Ghost vs WP Hide & Security Enhancer PRO side by side, so you can weigh them yourself.
In WP Ghost vs WP Hide & Security Enhancer PRO, the core job is the same. Both plugins change and hide the paths that give WordPress away, such as wp-content, wp-includes, theme and plugin folders and the default login page. Files stay where they are, only the URLs change. Bots that look for known vulnerable plugin versions or try passwords on the default login page find less to work with. Both start from a free plugin on wordpress.org and both are sold as a lifetime license with lifetime updates.
The difference is what comes around the hidden paths. WP Ghost is built as a security suite: a firewall, brute force protection, bot blocking and country blocking sit in the same plugin, and a multisite network counts as one license. WP Hide & Security Enhancer PRO stays focused on hiding WordPress. It removes version numbers, tell tale headers and meta tags, names Apache, LiteSpeed, Nginx and IIS as supported servers and adds a vulnerability scan that shows which installed plugins and themes need an update. It does not block attacks on its own, so it usually runs next to a firewall plugin.
WP Ghost suits owners of a handful of sites who want hidden paths and active protection from one plugin, and multisite networks, because a whole network counts as one license. Its smallest lifetime tier covers 5 sites. Its deal page names the limits: changed paths can clash with caching or other plugins and need careful testing, no support is listed for the 5 site tier and there is no lifetime tier for a single site or for unlimited sites.
WP Hide & Security Enhancer PRO suits agencies and developers who build many sites, because its Developer lifetime license covers unlimited sites with lifetime updates and support. It also suits sites on Nginx or IIS that already use a separate firewall. Its deal page names the limits too: lifetime exists only as the Developer tier, rewrite rules need care on Nginx and IIS, and hiding paths does not replace a firewall or a malware scanner. NSP Code also makes Advanced Post Types Order.
Hidden paths only help as long as they keep working with every WordPress release, so a path hiding plugin stays on a site for as long as the site is online. That makes it a typical candidate for a lifetime license instead of a yearly renewal. Both vendors sell a lifetime license on their own pricing page, and both include lifetime updates.
The license models differ a lot. WP Ghost has lifetime tiers by site count, 5 sites for $199, 25 sites for $799, 1000 sites for $1,449, next to a yearly plan, and its deal record lists priority email support only from the 25 site tier. WP Hide & Security Enhancer PRO has one lifetime license for unlimited sites with unlimited support; its single site plan is yearly only. The refund window is 30 days for WP Ghost and 30 days for WP Hide & Security Enhancer PRO. The comparison table above lists both lifetime licenses with their check date.
Both Pro versions build on a free plugin. The free WP Ghost plugin has 100,000+ active installs and a rating of 4.5, the free WP Hide plugin has 50,000+ active installs and a rating of 4.3. Installing the free version on a staging copy shows whether path rewriting works with your theme, cache and plugins before any money changes hands.
Whichever you test, change paths step by step. Start with the login URL, clear every cache after each change and check the front end, forms, the admin area and logged out pages. Save the new login URL somewhere safe. Run only one path hiding plugin on a site, because two plugins that both rewrite the same paths get in each other’s way. If you later switch, turn off the rewrites of the old plugin first and restore the default paths before the new one takes over.
Each answer names the facts for both sides. Which of them matters for your project is up to you.
WP Ghost combines hidden paths with a firewall, brute force protection, bot blocking and country blocking. WP Hide & Security Enhancer PRO hides paths, the login URL, version numbers and meta tags and scans plugins and themes for known vulnerabilities; its deal page notes that hiding paths does not replace a firewall or a malware scanner.
WP Ghost sells lifetime tiers by site count: 5 sites for $199, 25 sites for $799, 1000 sites for $1,449. There is no lifetime tier for a single site and none for unlimited sites. WP Hide & Security Enhancer PRO sells one lifetime license, the Developer tier for unlimited sites; its single site plan is a yearly plan only.
WP Hide & Security Enhancer PRO names Apache, LiteSpeed, Nginx and IIS, and on Nginx and IIS you add the rewrite rules it generates to the server configuration. The deal record of WP Ghost lists no web servers, so check the vendor page if you run Nginx or IIS.
For WP Ghost, a whole multisite network counts as one license, which stretches the site count of each tier. WP Hide & Security Enhancer PRO covers unlimited sites with its Developer license, so the count of sites in a network does not matter there.
WP Ghost has a refund window of 30 days, WP Hide & Security Enhancer PRO one of 30 days. Both have a free plugin on wordpress.org, so you can test path rewriting with your theme, cache and plugins before you pay.
Short answers from the vendor data. Prices and dates match the comparison above.
WP Ghost costs $199 one-time for 5 sites, WP Hide & Security Enhancer PRO costs $130 one-time for unlimited sites. Both are one-time payments from the vendors’ own pricing pages, checked on Oct 4, 2026.
A comparable yearly plan is on record only for WP Ghost, at $119 per year. Its lifetime price pays off after 21 months. For WP Hide & Security Enhancer PRO, the one-time price is the only cost on record.
It depends on whether you want protection beyond hidden paths. WP Ghost adds a firewall, brute force protection, bot blocking and country blocking, with lifetime tiers starting at 5 sites. WP Hide & Security Enhancer PRO in turn names support for Apache, LiteSpeed, Nginx and IIS and a vulnerability scan, with one lifetime license for unlimited sites.
Running both on the same site is not a good idea, because both rewrite the same WordPress paths and the login URL, and two sets of rewrites get in each other’s way. Use one plugin for hidden paths per site; a separate firewall plugin can still run next to WP Hide & Security Enhancer PRO.
Yes, WP Ghost is the new name of Hide My WP Ghost, and the free version is still listed on wordpress.org. WP Hide & Security Enhancer PRO is a separate product by NSP Code, even though the names sound alike.
Yes, both change the WordPress login URL. WP Hide & Security Enhancer PRO also changes the admin URL, and WP Ghost adds brute force protection on top of the new login page. Save the new address somewhere safe before you log out.
This page names no overall winner between WP Ghost and WP Hide & Security Enhancer PRO. In the comparison, green and red mark the better and the weaker value for each measurable point, such as price, sites and payback. The questions to weigh show which facts matter for which kind of project, so you can decide what fits yours.
Prices and licenses from the vendor’s page, with check date.
We don’t test the plugins ourselves and we don’t rank them.
Whether a deal stands left or right says nothing about it.
Affiliate links are marked and never change a single row.
Related duels, buying guides and the matching category.