Gcore WAAP vs Hide My WP Ghost
Gcore WAAP
gcore.com
Hide My WP Ghost
hidemywp.coSide by side
| Figure | Gcore WAAP | Hide My WP Ghost |
|---|---|---|
| Price from | €25/mo | $2.42/mo |
| Free plan | Yes | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| API | Yes | — |
| Self-hosted | — | Yes |
| Plans published | 4 | 8 |
| Spec score · Web Application Firewall Software | 8.1 (#5) | 7.8 (#10) |
| Headquarters | Luxembourg | Cluj-Napoca, Cluj, Romania |
| Integrations | Gcore says WAAP works with any CDN, including multi-CDN setups, and integrates natively with Gcore CDN for shared management and analytics. | The maker says the plugin works with popular security plugins including Wordfence and Sucuri, and lists WPML and WP Rocket among its integrations. |
| Intended users | The WAAP page describes use cases for technology and SaaS, e-commerce, fintech, media and streaming, gaming, telecom, and MSSP organizations. | The pricing page describes Ghost 1 as suitable for freelancers and blogs, Ghost 5 for small businesses and developers, and Ghost All for WordPress agencies. |
Plans
Hide My WP Ghost
- Free versionFree
- Ghost 1$29 a year
- Ghost 5$59.50 a year
- Ghost 5 LTD$199, paid once
- Ghost 25$249 a year
- Ghost All$499 a year
- Ghost 25 LTD$799, paid once
- Ghost ALL LTD$1,449, paid once
In their own words
Gcore WAAP
Gcore WAAP protects websites, web applications, and APIs against threats including SQL injection, cross-site scripting, and API abuse. It is a SaaS reverse proxy that can sit before a CDN or origin and forward clean traffic onward. Its edge firewall blocks OWASP Top 10 risks, zero-day patterns, and suspicious behavior. Bot Management can admit trusted bots and AI agents, challenge suspicious traffic, and stop abusive automation. API protection includes discovery, schema validation, anomaly detection, and sensitive-data detection. The service also automatically mitigates application-layer DDoS attacks at the edge; Gcore states detection is sub-second. WAAP works with any CDN and supports multi-cloud and hybrid environments, including AWS, Azure, Google Cloud, and customer data centers. Gcore lists 210+ edge PoPs, 200 Tbps of DDoS filtering capacity, and a 99% platform uptime SLA. The Free plan covers one domain and 0.5M requests; Start costs €25 a month for five domains and 1M requests. Prices exclude VAT, and plans have quotas and overage charges.
Hide My WP Ghost
Hide My WP Ghost is a WordPress security plugin for self-hosted and web use. The maker says it has been renamed WP Ghost while keeping the same security engine, team and features. It can change login and admin URLs and hide common paths without altering WordPress files or directories. Listed protections include brute-force defense, two-factor authentication, XML-RPC controls, IP allowlists and blocklists, security checks, API protection and bot management. The free plan includes basic path security, 7G and 8G firewall, two-factor authentication with code, email and passkeys, a threats log and one-click presets. The plugin supports WordPress Multisite on subdirectories and subdomains and is listed as compatible with integrations including Wordfence, Sucuri, WPML and WP Rocket. The maker says setup takes less than five minutes without coding. Plans range from free to paid website bundles, with paid plans including priority email support and logs retained for 30 days.