One-click setup
Install the plugin and create your key in one step. The plugin finds the tables that hold personal data, so there are no fields to configure and no code to change.
Your users’ data, unreadable once stolen.
Ghostables for WordPress encrypts the personal data your site holds, from sign-ups and form entries to member profiles and orders, before it reaches the database. Your site keeps working exactly as before.
Encrypted on the way in, readable only where it should be
Your site keeps working
Sign-ups, contact forms, member areas, orders and admin screens all read normally through WordPress. Your users will not notice a thing.
A stolen database reveals no personal details
A leaked copy of the database contains encrypted entries, and the keys that would open them are not stored in it. Dates, order statuses and record numbers stay readable.
Recoverable with a secure phrase
A recovery phrase created at setup lets you regain access if you lose your PIN. Write it down and keep it somewhere safe.
Works with the plugins you already use
Any WordPress site that collects personal data: business sites with contact forms, membership platforms and WooCommerce stores alike.
- Contact Form 7
- Gravity Forms
- WPForms
- MemberPress
- Paid Memberships Pro
- Restrict Content Pro
- WooCommerce
- Custom post types
What a leaked database reveals
| In a leaked database | Standard WordPress | With Ghostables |
|---|---|---|
| Email addresses | Readable | Encrypted |
| Names, addresses and phone numbers | Readable | Encrypted |
| Form entries and member records | Readable | Encrypted |
| Search lookups | Readable | Search tokens that do not reveal the value |
| Dates, statuses and record numbers | Readable | Still readable |
Pair it with Ghostables Defender
Encryption limits what a leak exposes. Ghostables Defender is the active security plugin that keeps attackers out: scanning, firewall, login defence, hardening and a tamper-evident audit log. Business and Agency licences include the matching paid Defender tier.
- Business includes Defender Business
- Agency includes Defender Enterprise
- Solo pairs with Defender Free from WordPress.org
- One licence key activates both plugins
09:41:12Login blockedRepeated failures from one address
09:41:12Address blockedAdded to the firewall for 24 hours
09:57:03Scan completeNo unexpected file changes
10:02:47Setting changedTwo-factor enforced for admins
10:02:47Operator approvedPIN and second factor confirmed
Plans and pricing
Every plan includes automatic updates, secure recovery and a full refund within 14 days of your first purchase. Cancel any time from your dashboard.
Solo
£149per year
Or £19 a month. One site, email support.
- One site activation
- Automatic updates
- Secure recovery
- Pairs with Ghostables Defender Free
Business
£499per year
Or £59 a month. Up to five sites, priority support.
- Five site activations
- Priority email support
- Save 30% against monthly billing
- Ghostables Defender Business included, worth £179 a year
Agency
£1,499per year
Or £149 a month. Unlimited sites, SLA support.
- Unlimited site activations
- SLA support
- White-label option
- Ghostables Defender Enterprise included, worth £549 a year
Prices exclude VAT, which is calculated at checkout.
Questions
What does Ghostables for WordPress actually protect?
The personal data your site stores about people: account details, form submissions, member profiles, customer orders and personal data held in custom post types. It is encrypted before it is written to the database and decrypted only for legitimate use.
Will my site still work normally?
Yes. Protection sits behind the normal data path, so checkout, accounts, forms, member areas and admin tools behave as before. Your users will not notice it, and neither will the plugins that read the data.
Does it slow my site down?
The impact on page loads is small: single-digit milliseconds per request in our testing. The initial setup runs once and takes about half a minute in your browser.
What happens to data that is already in my database?
After activation, existing records are encrypted in the background. A site with around 10,000 entries typically finishes within a working day, and you can watch progress from the plugin’s status page.
What if I lose access?
A secure recovery phrase is created during setup. With it, you can re-establish access. If you lose both your access and the recovery phrase, the encrypted data stays unreadable permanently.
That is the security property working as intended. Ghostables Ltd cannot recover it for you either.
Does this make my site GDPR compliant?
No product can do that on its own, and encrypted personal data is still personal data. Ghostables for WordPress substantially strengthens the technical measures you take under UK GDPR Article 32, and may significantly reduce the impact of a breach where the data stays unintelligible to whoever took it.
How do licensing and renewals work?
You buy a subscription and we email a licence key, which you paste into the plugin. The plugin checks in daily. If a subscription lapses, the plugin becomes read-only: existing data still opens, and new encryption pauses until you renew.
Can I get a refund?
Yes. We refund a first purchase in full within 14 days, no questions asked. Renewals are not normally refundable, so cancel from your dashboard before your renewal date if you no longer need the plugin.
Protect every user, member and customer
A three-minute install. Your site keeps working, and a stolen copy of your database holds no readable personal details.