12 Security Modules. One Plugin.
Install the VistoShield plugin from wordpress.org and enable the modules your site needs. Manage everything from the cloud dashboard. GDPR compliant.
🇪🇺 GDPR compliant. EU-hosted cloud dashboard.
Security Modules
12 specialized security modules included in the VistoShield plugin
Prevention, detection, access control, and incident response — each module handles a specific security domain.
Security Scanner
File integrity monitoring against official WordPress checksums. Malware detection with 62+ signatures. Vulnerability scanning. Quarantine management.
- Core file integrity checks
- Malware pattern scanning
- File quarantine & restore
- Scheduled automated scans
Firewall & WAF
WordPress Application Firewall with 7 rule categories. Security hardening checklist. HTTP security headers management.
- SQL injection & XSS blocking
- 14-point hardening checklist
- 7 HTTP security headers
- Learning mode for testing
Bot Detector
User-Agent signature matching with 143+ patterns. Behavioral scoring engine. Cloudflare-style inline controls.
- Block / Challenge / Allow / Monitor
- Behavioral scoring (0-100)
- rDNS verification
- AI crawler management
Login Guard
Brute force protection with progressive lockouts. Two-factor authentication (TOTP). Honeypot for bots. Login logging.
- Progressive lockout (5m → 15m → 24h)
- TOTP two-factor authentication
- Hidden honeypot field
- CSV export of login attempts
Activity Log
Comprehensive security event monitoring. Alert rules with email, Slack, and webhook notifications. GDPR-compliant.
- Login, content, plugin tracking
- Email / Slack / Webhook alerts
- Configurable alert rules
- GDPR export & erasure
Password Policy
Role-based password enforcement with expiration, breach detection via Have I Been Pwned, and password history to prevent reuse.
- Per-role complexity rules
- Password expiration & forced reset
- HIBP breach detection (k-anonymity)
- Password reuse prevention
API Security
REST API lockdown with key management, per-key rate limiting, endpoint whitelist/blacklist, and XML-RPC protection.
- API key create / revoke / rotate
- Per-key rate limiting
- Endpoint whitelist & blacklist
- User enumeration prevention
Vulnerability Patcher
Detect plugin/theme vulnerabilities, apply virtual patches via WAF rules, and manage smart auto-updates with rollback.
- Wordfence vulnerability DB sync
- Virtual patching (WAF rules)
- Smart auto-updates by severity
- Pre-update backup & rollback
Incident Response
Automated incident detection from all VistoShield modules, guided response playbooks, isolation tools, and Slack/email alerts.
- Cross-plugin incident detection
- 5 pre-built response playbooks
- Plugin isolation & maintenance mode
- Email + Slack notifications
CDN Connector
Multi-CDN integration: Cloudflare, Bunny CDN, Fastly, CloudFront, KeyCDN. Edge-level blocking, cache purge, real IP restoration.
- 5 CDN providers supported
- Auto-sync blocked IPs to edge
- Cache purge on security events
- Real visitor IP restoration
DNS Monitor
DNS health monitoring with change detection. Validate NS, SOA, MX, SPF, DKIM, DMARC, DNSSEC, CAA records, and SSL certificates.
- 9 DNS record categories validated
- SSL certificate expiry monitoring
- Change detection & alerts
- DNS health score dashboard
All modules are included free in the VistoShield plugin. Pro adds the cloud dashboard with reporting, premium intelligence, and multi-site management. Agency adds white-label for client portfolios.
Ready for more?
Start with a 14-day Pro trial. No credit card required.
14-day free trial. Annual billing. Cancel anytime.
Why Are They Free?
We believe security should be accessible to everyone. All 12 modules have full functionality — no artificial limits, no nag screens, no "upgrade to unlock" for core features. The Pro and Agency plans add management features, premium signatures, and extended history for professionals who need more.
Ready to Secure Your Site?
All 12 security modules are included free. Install the VistoShield plugin from wordpress.org or go Pro for the complete suite.