Skip to content
15 years of IT experience
CybexsoftConsultancy Services
WordPress plugin · Security · Early access
Cybex Shield for WordPress

WordPress security in one place

Cybex Shield protects the login form, watches your files and settings, hardens the install and audits the server — and shows what it found in one dashboard, with a safe mode and WP-CLI commands if a protection ever gets in your way.

Nothing is switched on until you chooseSafe mode and WP-CLI recovery built inWorks on multisite

What you get

Login protection

Attempt limits with per-account lockout, CAPTCHA (reCAPTCHA, Turnstile or a built-in challenge), an invisible honeypot, IP allow and block lists with auto-ban rules, and a custom login URL with an emergency recovery link.

Sessions & passwords

Password rules including a Have I Been Pwned check that never sends the password, a list of every signed-in session, session limits and timeouts, and new-device sign-in alerts.

File integrity

Core and WordPress.org plugins checked against official checksums, themes against their first scan, and code hidden in uploads — with restore, quarantine and a line-by-line diff.

Hardening, server & SSL

One switch per hardening measure, a server audit with the exact fix for each finding, SSL expiry emails, security headers and a mixed-content check. Settings are snapshotted before anything risky.

Activity log & WP-CLI

An event log of what Shield saw and did, and `wp shield` commands for status, modules, unblocking, sessions, scans, settings and the licence.

Pro

Two-factor authentication, a web application firewall, malware scanning, geo-blocking and governance tools, delivered as an add-on plugin.

Pricing

One licence, per number of sites

One year of updates and support, renewable. The price shown is what you pay — Indian orders include GST, everywhere else is tax-free.

This product isn't on sale yet. Get in touch if you'd like to be told when it is.

Questions

What if a protection locks me out?

Add define( 'CYBEX_SHIELD_SAFE_MODE', true ); to wp-config.php. Every protection that can stand between you and your site is suspended while logging and settings keep working — or use wp shield disable <module> from the shell.

Does it work on multisite?

Yes. Each site keeps its own settings, logs and block lists, and is configured by its own administrator.

What happens to my data if I delete the plugin?

It is kept unless you switch on “Delete all data when the plugin is deleted” under Settings. Deactivating never removes anything.

Lock the front door, then watch the house

Shield is in early access. Talk to us about joining while the Pro modules roll out.