VistoShield
Free

Protect up to 1 WordPress site with 5 fully active security modules, dashboard access to 5 more, and the option to unlock 4 advanced modules anytime with Pro.

Free forever. Upgrade to Pro (from $89/yr) or Max (from $169/yr) when you need more sites, longer history, hourly scans, or white-label branding.

✅ Available on wordpress.org 🔒 GPL-2.0 Open Source 🌎 GDPR compliant 🛠 Built on 25+ years of server security expertise (est. 2002) 🚀 All 14 modules unlocked

What's in the Free Plan

1 WordPress site — all 14 modules unlocked, no monitor-only or locked restrictions

✅ All 14 Security Modules — Unlocked on Free

Every module is fully accessible on the Free plan — no monitor-only restrictions, no premium locks. Free-tier limits affect depth of usage (3-day retention, manual scans, 143 bot signatures, community support) rather than module access. Upgrade to Pro or Max for hourly scans, 500+ signatures, extended retention, and priority support.

🛡

Firewall & WAF

7 WAF rule categories, 14-point hardening checklist, HTTP security headers. Block SQL injection, XSS, and file inclusion attacks at the application layer.

🔐

Login Guard

Brute-force protection with login attempt limiting, CAPTCHA integration, and IP lockout. Two-factor authentication support for admin accounts.

👁

Live Traffic Monitor

Real-time HTTP request monitoring with bot vs human classification. User agent analysis, response code breakdown, and geographic origin data.

🔎

Security Scanner

Manual malware scanning with file integrity monitoring. Detect modified core files, suspicious code patterns, and known malware signatures.

📜

Activity Log

Track user actions, plugin changes, login events, and content modifications. 3-day event history with filterable log viewer.

📊 Visibility & Monitoring Modules

🤖

Bot Detector

View bot detection dashboard and traffic classification. Free includes full configuration and blocking rules; Pro adds 500+ premium bot signatures.

📡

DNS Monitor

View DNS health scores and check results. Free includes manual checks; Pro adds automated monitoring with hourly intervals and change alerts.

🔒

Password Policy

View password compliance dashboard. Free includes policy enforcement; Pro adds expiration rules and breach-list cross-checks.

💓

Uptime Monitor

View uptime status and basic checks. Free includes basic HTTP checks; Pro adds multi-protocol monitoring and incident tracking; Max adds SMS alerts.

🛡️

Reputation Monitor

View blacklist status overview. Free includes on-demand checks; Pro adds scheduled checks (every 6 hours), status change alerts, and delisting guidance.

🔨 Advanced Protection Modules

🔗

API Security

REST API endpoint monitoring and access control. Disable unused endpoints, restrict authentication methods, and log API activity.

🔨

Vulnerability Patcher

Virtual patching for known plugin and theme vulnerabilities. Protect your site while waiting for official updates from developers.

🚨

Incident Response

Guided incident response workflows for common security events. Step-by-step playbooks for malware removal, account compromise, and data breach scenarios.

🌐

CDN Connector

Cloudflare integration for DNS-level protection. Sync firewall rules between VistoShield and your CDN for layered defense.

Free Plan Limits

What the free plan includes — and what Pro unlocks

1 WordPress Site (all 14 modules)

Free covers a single WordPress installation with every security module unlocked. When you need to protect more sites, upgrade to a Pro or Max tier: Solo (1 site), Starter (3 sites), Agency (10), Enterprise (25), or Unlimited. Pro starts at $89/yr, Max at $169/yr.

3-Day Dashboard Data

Event history, traffic logs, and scan results are retained for 3 days. Pro extends retention to 14 days. Max extends to 30 days for compliance needs.

Manual Scans Only

Security scans must be triggered manually. Pro adds scheduled scans with configurable frequency — hourly, daily, or weekly — so threats are caught automatically.

143 Bot Signatures (Weekly Updates)

The free signature database covers the most common bots. Pro includes 500+ premium signatures with daily updates for faster detection of emerging threats.

Community Support

Get help through the WordPress.org support forums and documentation. Pro includes priority email support with guaranteed 24-hour response from the development team.

Compare Plans

See exactly what changes when you upgrade

Feature Free Pro ★ Max
Security Modules All 14 unlocked All 14 unlocked All 14 unlocked
WordPress Sites 1 site 1 / 3 / 10 / 25 / ∞
by tier
1 / 3 / 10 / 25 / ∞
by tier
Dashboard Data Retention 3 days 14 days 30 days
Cloud Dashboard Basic (3 days)
Bot Signatures 143 (weekly) 500+ (daily updates) 500+ (daily updates)
Scan Frequency On-demand Hourly Hourly
Reporting Weekly security report PDF reports + weekly emails White-label PDF
Team Members Owner only 5 20
White-Label Branding
API Access
Notifications Email Email + Slack + webhook Email + Slack + webhook + SMS
Support Community Priority support Dedicated support
Price $0 forever From $89/yr
Solo / Starter / Agency / Enterprise / Unlimited
From $169/yr
Solo / Starter / Agency / Enterprise / Unlimited

Start Protected. Upgrade When You're Ready.

The free plan is not a trial. It is real security that works indefinitely. Pro adds the tools that save time when you manage multiple sites or need compliance reporting.

Common Questions

Is the free plan really free forever?

Yes. There is no time limit, no trial period, and no credit card required. All 14 security modules work on 1 site indefinitely on the free plan with the 3-day data retention and community-support limits described above.

Can I upgrade later without losing my settings?

Yes. Activating a Pro license instantly unlocks premium features on top of your existing configuration. Nothing resets or changes — you keep everything you already set up.

What happens if I cancel Pro?

Your account reverts to the free plan. All settings, data, and configurations are preserved. You lose access to extended history, premium signatures, cloud dashboard, and reporting until you renew.

Do I need to install separate plugins for each module?

No. VistoShield is one plugin with 14 built-in modules. Install it once and enable the modules you need from the dashboard. All modules share the same admin interface and connect to the cloud dashboard.

Get Started with 5 Full Modules for Free

Install VistoShield from wordpress.org and protect 1 WordPress site with all 14 security modules unlocked — no payment required.

No credit card required