VistoShield
Free
All 12 security modules. One WordPress site. No time limit. No credit card. Real protection that works out of the box — not a stripped-down demo.
Free forever. Upgrade to Pro (€79/year) when you need more sites, longer history, or automated reports.
Everything in the Free Plan
Full security coverage for one WordPress site — no tricks, no expiration
Firewall & WAF
7 WAF rule categories, 14-point hardening checklist, HTTP security headers. Block SQL injection, XSS, and file inclusion attacks at the application layer.
Bot Detector
143 bot signatures with weekly updates. Classify traffic as human, known bot, or suspicious. Block bad bots automatically with configurable rules.
Login Guard
Brute-force protection with login attempt limiting, CAPTCHA integration, and IP lockout. Two-factor authentication support for admin accounts.
Security Scanner
Manual malware scanning with file integrity monitoring. Detect modified core files, suspicious code patterns, and known malware signatures.
Activity Log
Track user actions, plugin changes, login events, and content modifications. 48-hour event history with filterable log viewer.
API Security
REST API endpoint monitoring and access control. Disable unused endpoints, restrict authentication methods, and log API activity.
Password Policy
Enforce strong password requirements for all user roles. Configurable minimum length, complexity rules, and password expiration policies.
Vulnerability Patcher
Virtual patching for known plugin and theme vulnerabilities. Protect your site while waiting for official updates from developers.
CDN Connector
Cloudflare integration for DNS-level protection. Sync firewall rules between VistoShield and your CDN for layered defense.
DNS Monitor
Monitor DNS records for unauthorized changes. Detect domain hijacking, MX record tampering, and unauthorized nameserver modifications.
Incident Response
Guided incident response workflows for common security events. Step-by-step playbooks for malware removal, account compromise, and data breach scenarios.
Live Traffic Monitor
Real-time HTTP request monitoring with bot vs human classification. User agent analysis, response code breakdown, and geographic origin data.
Free Plan Limits
What the free plan includes — and what Pro unlocks
1 WordPress Site
The free plan covers one WordPress installation. Pro covers up to 10 sites with a single license, all manageable from one cloud dashboard.
48-Hour Dashboard Data
Event history, traffic logs, and scan results are retained for 48 hours. Pro extends retention to 30 days by default, configurable up to 10 years for compliance needs.
Manual Scans Only
Security scans must be triggered manually. Pro adds scheduled scans with configurable frequency — hourly, daily, or weekly — so threats are caught automatically.
143 Bot Signatures (Weekly Updates)
The free signature database covers the most common bots. Pro includes 500+ premium signatures with daily updates for faster detection of emerging threats.
Community Support
Get help through the WordPress.org support forums and documentation. Pro includes priority email support with guaranteed 24-hour response from the development team.
Free vs Pro
See exactly what changes when you upgrade
| Feature | Free | Pro ★ |
|---|---|---|
| Security Modules | All 12 (free tier) | All 12 upgraded |
| WordPress Sites | 1 site | 10 sites |
| Dashboard Data Retention | 48 hours | 30 days – 10 years |
| Cloud Dashboard | — | ✓ |
| Bot Signatures | 143 (weekly) | 500+ (daily updates) |
| Security Scans | Manual only | Scheduled (hourly/daily/weekly) |
| Reporting | Basic stats | Weekly email + PDF export |
| Real-Time Alerts | — | ✓ |
| Support | Community | Priority 24h email |
| Price | €0 forever | €79/year |
Common Questions
Is the free plan really free forever?
Yes. There is no time limit, no trial period, and no credit card required. All 12 modules work indefinitely on the free plan with the limits described above.
Can I upgrade later without losing my settings?
Yes. Activating a Pro license instantly unlocks premium features on top of your existing configuration. Nothing resets or changes — you keep everything you already set up.
What happens if I cancel Pro?
Your account reverts to the free plan. All settings, data, and configurations are preserved. You lose access to extended history, premium signatures, cloud dashboard, and reporting until you renew.
Do I need to install separate plugins for each module?
No. VistoShield is one plugin with 12 built-in modules. Install it once and enable the modules you need from the dashboard. All modules share the same admin interface and connect to the cloud dashboard.
Get All 12 Modules for Free
Install VistoShield from wordpress.org and protect your WordPress site with enterprise-grade security — no payment required.
No credit card required