Choose your edition
Free is a complete access plugin for WordPress. Premium is a separate companion from ncdLabs — not a license key that unlocks code already inside Free.
PePper checks the list with you
Packaging
Two plugins. Install Free anywhere. Add Premium when you need organizational scale or advanced identity.
| Package | Choose your edition | Notes |
|---|---|---|
| Free | WordPress.org zip | Core access protection. |
| Premium | ncdLabs companion zip | Separate plugin. Capabilities unlock when installed. |
WordPress.org: Free never hides paid features behind a license key.
Pricing
Annual plans. You buy the Premium edition (Pro, Agency, or Enterprise) — not per-site seats. Yearly billing covers updates and support for that term.
| Edition | Price | What unlocks | |
|---|---|---|---|
| Free | $0 | Full core protection on WordPress.org | Details |
| Pro | $79 / year | Passkeys, Access Groups, email domains, Appearance Profiles, notifications, import/export | Buy Pro |
| Agency | $199 / year | Everything in Pro, plus policy templates, white-label, and cloud client | Buy Agency |
| Enterprise | $499 / year | Everything in Agency, plus OIDC/SAML, SCIM, SIEM, and compliance packages | Buy Enterprise |
Larger organizations can request a custom Enterprise quote. Optional cloud hosting (when available) is separate from these unlock editions. Already subscribed? Use the Manage subscription link in your confirmation email (or from the post-checkout success page).
Free
Staging and restricted-site access without paywalls on core protection.
- Unlimited policies; exact and wildcard host/path scopes; Default Policy; setup wizard
- Authentication: password vault and WordPress login
- Authorization: users, roles, capabilities, combined allow and deny rules
- Sessions with duration and idle timeout; view and revoke
- Audit log, Policy Simulator, analyzer, recovery, Observe Mode
- Challenge / style-guide noindex and staging-host robots Disallow
- Admin UI with Security Dashboard and PePper guidance
Free is not limited on policy count or wildcards. Passkeys and other Premium identity features ship in the companion plugin.
Premium companion
Install alongside Free. Choose a Pro, Agency, or Enterprise annual plan — plans are not priced per site.
Pro — $79 / year
- Passkeys (register passkeys and use them to control access)
- Access Groups with membership rules, history, import/export
- Email-domain authorization
- Advanced session controls
- Richer audit search, retention, and export
- Appearance Profiles for user-facing screens
- Notifications (email, webhooks, Slack, Teams, Discord)
- Full import/export, backups, templates
Agency — $199 / year
- Everything in Pro
- Reusable policy templates and exportable client configs
- Agency branding and white-label options
- Optional cloud client for remote backups and portfolio inventory
- Priority support
Enterprise — $499 / year
- Everything in Agency
- OIDC / SAML IdPs (Google Workspace, Entra ID, Okta, Auth0, generic, and more)
- SCIM provisioning, JIT, deprovisioning, tenant restrictions
- Central multi-site management, drift detection, compliance evidence packages
- SIEM integrations and automation APIs
Comparison
| Capability | Free | Pro | Agency | Enterprise |
|---|---|---|---|---|
| Unlimited policies & wildcards | Yes | Yes | Yes | Yes |
| Password / WP login | Yes | Yes | Yes | Yes |
| Passkeys (WebAuthn) | — | Yes | Yes | Yes |
| Simulator, audit, recovery | Yes | Advanced | Advanced | Advanced |
| Access Groups & email-domain authz | — | Yes | Yes | Yes |
| Appearance Profiles / notifications | — | Yes | Yes | Yes |
| Policy templates / white-label / cloud client | — | — | Yes | Yes |
| OIDC / SAML / SCIM / SIEM | — | — | — | Yes |
| Price | $0 | $79/yr | $199/yr | $499/yr |
| Unlock model | Included | Premium edition | Premium edition | Premium edition |
Privacy
By default the plugin does not contact external servers. Optional integrations you configure (IdPs, SIEM webhooks, cloud backups) send only the data required for that service. Password hashes and private keys are never transmitted to cloud backups.
Read the plugin privacy notice for what stays on your WordPress site. Site privacy covers analytics, checkout, and contact forms on this website.
Ready to protect a staging site or restricted path?
