Kinga stands guard over every login, sign-up, form and API on your website. Real customers pass straight through. Bots, password guessers and attackers are slowed, challenged or blocked, and you get a plain explanation of what happened.
Free plan, no card needed. Works with WordPress, PHP, Node.js, Python and any other website.
Real visitors get throughAttacks bounce off
The attacks small and growing websites actually face, explained without jargon.
Repeated wrong passwords from the same place are slowed down, then asked to prove they are human, then stopped.
Attackers try leaked emails and passwords from other sites. We notice when many accounts are tried at once.
Bots creating hundreds of accounts, numbered emails and throwaway addresses are caught early.
Repeated, link-stuffed and gibberish messages never reach your inbox.
Clients that hammer your API get limited, so real users keep a fast website.
Hostile code typed into forms or links (SQL injection, cross-site scripting) is caught and reported.
Someone stepping through invoice or order numbers that are not theirs is spotted and blocked.
Tools that hunt for backups, passwords and admin pages are recognised and shut out.
No servers to buy and nothing to install on your computer.
Create a free account and type your domain name.
Add a small DNS record, a meta tag or a file. It takes about two minutes and stops anyone from claiming your domain.
Copy one line into your website. Your developer can add a stronger server check later for logins and payments.
<script src="https://kinga.evoltecs.com/security.js"
data-site-key="pk_your_site_key" defer></script>Password guessing detected on your login page.
6 wrong passwords from the same address within 15 minutes. We asked the visitor to prove they are human. They failed, so the address is blocked for one hour.
What you can do: offer two-step sign-in to your users.
M-Pesa
Upgrade with M-Pesa or a Visa or Mastercard card. Prices in Kenya shillings or US dollars.
EN FR SW
English, French and Kiswahili, including the check your visitors see.
SMS
Alerts by email, SMS, WhatsApp or webhook when something serious happens.
7.4
We tell you when your PHP, WordPress or server version stopped getting security fixes, and what to upgrade to.
No tool can promise that a website is 100% safe, and we will never claim it. What Kinga does is stop the common attacks automatically, show you exactly what it saw and did, and point out the weak spots worth fixing.
It even protects itself: our own sign-in page runs on the same engine you get.
Start free. Upgrade when your website grows.
Free
For personal sites and trying the platform
$9per month
For small businesses and shops
$29per month
For growing companies, agencies and e-commerce
No. The script loads after your page and only does work when someone submits a form. Normal visitors never see a check.
Not to start. Pasting one line works on any website, including WordPress. A developer can add the server check later for stronger protection.
Suspicious visitors are first asked to prove they are human, not blocked. You can unblock any address in one click and add trusted addresses that are never checked.
No. Passwords are never sent to us, and email addresses are stored in a scrambled form we cannot read back.
Yes. The Free plan protects one website with all core protections, forever.
Free to start. Ready in about five minutes.
Protect my website for free