Nexora Shield
Security by Design for WordPress.
Nexora Shield is a complete WordPress security, firewall and compliance platform, built for classic WordPress, headless sites, Nexora Engine and enterprise compliance. A web application firewall, malware and vulnerability scanning, login hardening, two-factor authentication, audit logging and a live security score work together to protect your site and prove it. Launching soon.
Firewall blocking at the edge
Live security score
Plus one-click hardening
v0.6.0, in active development
WordPress is the web’s biggest attack target.
Most sites bolt on a single security plugin and hope. Nexora Shield is a complete, security-by-design platform, firewall, malware and vulnerability scanning, hardening, 2FA, audit logging and a live security score, built for classic WordPress, headless sites and Nexora Engine alike.
- Block attacks at the edge with a WAF + brute-force protection
- Scan for malware, file changes and vulnerable components
- Harden WordPress and add 2FA in a click
- Prove your posture with a live score and audit log
Key benefits
Firewall at the edge
A web application firewall (WAF) plus brute-force protection, CAPTCHA and IP management block attacks before they reach WordPress.
Find and fix threats
Malware scanning, file-integrity monitoring and a vulnerability scanner surface risks, and a live security score tells you exactly what to fix.
Hardened and provable
One-click hardening, 2FA, security headers and a tamper-evident audit log, with compliance reports you can hand to auditors.
Features
Firewall
Web Application Firewall
Rule-based WAF that filters malicious requests before WordPress loads.
Brute-force protection
Stops credential-stuffing and login brute-force with rate limiting and lockouts.
CAPTCHA & login security
CAPTCHA, login hardening and configurable login policies.
Access
Two-factor authentication
Add 2FA to WordPress logins for every role.
Scanning
Malware scanner
Scans your site for malware and known bad signatures.
File integrity monitor
Detects unexpected changes to core, plugin and theme files.
Vulnerability scanner
Flags vulnerable plugins, themes and core versions.
Hardening
One-click hardening
Apply WordPress hardening best-practices and security headers in a click.
Security headers
Manage CSP, HSTS and other response headers for classic and headless sites.
API & database security
Locks down REST/API surfaces and adds database-layer protections.
Visibility
Audit log
A tamper-evident record of security-relevant events across your site.
Security score & issue engine
A live 0–100 score with a prioritized list of issues to fix.
Alerts
Real-time alerts when something needs your attention.
Compliance
Compliance & PDF reports
Compliance tooling and exportable PDF security reports for stakeholders.
Up and running in minutes
Install
Activate Shield and run the initial security scan and baseline.
Harden
Apply one-click hardening, security headers and two-factor auth.
Defend
The WAF and brute-force protection block attacks in real time.
Prove
Track your security score, audit log and compliance reports.
vs Single security plugins
| Capability | Nexora Shield | Single security plugins |
|---|---|---|
| Web application firewall | Sometimes | |
| Malware + vulnerability scan | Partial | |
| Headless / Nexora Engine aware | ||
| Live security score + audit log | Limited | |
| Compliance reporting |
Free vs Pro
| Capability | Free | Pro |
|---|---|---|
| Web Application FirewallFirewall | ||
| Brute-force protectionFirewall | ||
| CAPTCHA & login securityFirewall | ||
| Two-factor authenticationAccess | ||
| Malware scannerScanning | ||
| File integrity monitorScanning | ||
| Vulnerability scannerScanning | ||
| One-click hardeningHardening | ||
| Security headersHardening | ||
| API & database securityHardening | ||
| Audit logVisibility | ||
| Security score & issue engineVisibility | ||
| AlertsVisibility | ||
| Compliance & PDF reportsCompliance |
Works with your stack
Be first to get Nexora Shield
Nexora Shield is in active development. Tell us you’re interested and we’ll let you know the moment the first downloadable release is ready.
In development, not yet released
- Requires WP
- 6.3
- Target WP
- 6.7
- Requires PHP
- 8.0
Frequently asked questions
Your site could be running at static speed today.
Install a plugin. Flip a toggle. Every page loads before PHP even boots.
Start with the free plugins
Install on your own site in minutes, no account and no time limit. Turn on Pro in place only when you need more.