Most security plugins hand you a dashboard full of alerts and expect you to know what to do next. Shield works differently.<\/p>\n\n
It blocks threats automatically, repairs what it can on its own, and then shows you exactly what still needs your attention<\/strong> \u2014 ranked by impact, not volume. Less noise. More action.<\/p>\n\n The most powerful thing Shield does is what it handles without you:<\/p>\n\n Shield organises your security into four focused areas so you always know where to look:<\/p>\n\n The goal: guide you quickly towards action, not bury you in data.<\/p>\n\n Bot Blocking & Firewall<\/strong><\/p>\n\n Login & Account Security<\/strong><\/p>\n\n Scanning & Integrity<\/strong><\/p>\n\n Visibility & Control<\/strong><\/p>\n\n Shield is the only WordPress security plugin with a native CrowdSec integration. CrowdSec aggregates threat signals from millions of sites into a shared IP reputation network \u2014 your site blocks known attackers before they ever probe you, using intelligence far beyond your own traffic history.<\/p>\n\n Shield suits site owners, agencies, and MSPs who want protection that runs itself \u2014 not a plugin that demands constant attention to be useful.<\/p>\n\n If you have been burned by security plugins that generate more noise than protection, or dashboards that tell you everything is wrong without telling you what to fix, Shield was built to be the alternative.<\/p>\n\n\n Please see the dedicated security help centre<\/a> for details on features and some FAQs.<\/p>\n Shield assigns offense points to visitors who trigger security rules \u2014 failed logins, firewall blocks, silentCAPTCHA failures, and other signals. When a visitor's points reach the configured threshold, they are blocked automatically. You can review blocked IPs, adjust thresholds, or add manual rules from the IP Rules section.<\/p><\/dd>\n It analyses passive signals \u2014 timing, form interaction behaviour, and request characteristics \u2014 to distinguish automated requests from genuine visitors. There is no challenge to complete, no external site keys to set up, and no JavaScript that can break your forms. Everything stays on your server.<\/p><\/dd>\n Your host or network firewall protects the server perimeter. Shield works inside WordPress, where it understands login attempts, user changes, plugin activity, file integrity, and attack patterns specific to WordPress. The two layers solve different problems and complement each other.<\/p><\/dd>\n Yes. Generally, no. Running two plugins that control the same login or request flows leads to duplicate blocking, noisier logs, and harder troubleshooting. If you keep another plugin active, disable the areas where they overlap.<\/p><\/dd>\n This usually happens after adding your own IP to the block list, or enabling 2FA when your site cannot deliver email codes.<\/p>\n\n Delete Email delivery depends on your site's mail configuration, not Shield. If it is unreliable, set up a dedicated transactional email service or switch users to an authenticator app instead.<\/p><\/dd>\n Yes to both. Shield supports CIDR notation for IP ranges, and bypass entries always take precedence over block rules.<\/p><\/dd>\n Yes. ShieldPRO includes White Label controls to rename and rebrand Shield for client sites.<\/p><\/dd>\n\n<\/dl>\n\n\n\ud83e\udd16 Security That Runs Itself<\/h4>\n\n
\n
\ud83e\udded Guided Security, Not Just a Dashboard<\/h4>\n\n
\n
\ud83d\udee1\ufe0f Free Protection<\/h4>\n\n
\n
silentCAPTCHA<\/code><\/strong> \u2014 blocks bad bots on login, registration, lost password, and comment forms using passive signals invisible to real visitors. No CAPTCHA keys. No external requests. No JavaScript that breaks your forms. Everything runs on your server (GDPR friendly).<\/li>\n\n
?author=<\/code> probes used to harvest usernames before an attack<\/li>\n<\/ul>\n\n\n
\n
\ud83e\udd1d CrowdSec Integration<\/h4>\n\n
\u2728 ShieldPRO<\/h4>\n\n
\n
Who It's For<\/h4>\n\n
\n
Shield Security<\/code>.<\/li>\nShield<\/code> from the admin menu and follow the guided setup.<\/li>\n<\/ol>\n\n\n\n
How does automatic IP blocking work?<\/h3><\/dt>\n
How does silentCAPTCHA detect bots without interrupting real visitors?<\/h3><\/dt>\n
My server already has a firewall. Why do I need Shield too?<\/h3><\/dt>\n
Can Shield block comment SPAM?<\/h3><\/dt>\n
silentCAPTCHA<\/code> protects the WordPress comment form in the free plugin. ShieldPRO extends coverage to Contact Form 7, Ninja Forms, WooCommerce, and a range of other integrations.<\/p><\/dd>\nCan I use Shield alongside another security plugin?<\/h3><\/dt>\n
I've locked myself out of my site. What do I do?<\/h3><\/dt>\n
\n
<your WordPress root>\/wp-content\/plugins\/wp-simple-firewall\/<\/code>.<\/li>\nforceoff<\/code>.<\/li>\nforceoff<\/code> from the server once you are back in.<\/p><\/dd>\nI'm not receiving my 2FA email code.<\/h3><\/dt>\n
Does the IP bypass list support ranges, and does it take precedence over block rules?<\/h3><\/dt>\n
Is White Label available?<\/h3><\/dt>\n
View Shield Security Changelog<\/a><\/h4>","raw_excerpt":"Smart WordPress security that blocks bots automatically, guides you to what matters, and repairs problems \u2014 without drowning you in noise.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/754","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=754"}],"author":[{"embeddable":true,"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/paultgoodchild"}],"wp:attachment":[{"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=754"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=754"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=754"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=754"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=754"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/azb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=754"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}