Shakvaro Shield — WordPress Security Plugin

Shakvaro Shield at a glance

Is Shakvaro Shield well maintained?

• Shakvaro Network Intel (own SaaS, optional) – aggregated IP reputation/blocklist + opt-in failed-login digests. Sends: SHA-256 hash of the site URL, plugin…
• Shakvaro WP Insights (own SaaS, optional, OFF by default, two-tier consent) – opt-in usage analytics. Sends: WP/PHP/MySQL versions, theme, locale, multisite…
• WordPress.org checksums (automatic, file integrity) – sends WP version/locale + plugin/theme slug+version (public). Endpoints…
• Have I Been Pwned – Pwned Passwords (optional) – sends only the first 5 chars of a SHA-1 password hash (k-anonymity); the plaintext password never leaves the…
• Cloudflare Turnstile (optional CAPTCHA) – sends the Turnstile token, user IP, and site secret key. Endpoint…
• Google reCAPTCHA v3 (optional CAPTCHA) – sends the reCAPTCHA token, user IP, and site secret key; Google’s script also collects browser signals. Endpoint…
• WPScan (optional vulnerability data) – sends installed plugin slugs and your WPScan API token. Endpoint: https://wpscan.com/api/v3/plugins/. Terms…
• Patchstack (optional vulnerability data) – sends your Patchstack API key. Endpoint: https://patchstack.com/database/api/v2/vulnerabilities. Privacy…
• NIST NVD (optional CVE enrichment) – sends a public CVE identifier. Endpoint: https://services.nvd.nist.gov/rest/json/cves/2.0. Privacy…
• Google Safe Browsing (optional URL reputation) – sends the URLs being checked and your Safe Browsing API key. Endpoint…
• PagerDuty Events (optional alerts) – sends an alert payload (title, severity, summary) and the routing key. Endpoint: https://events.pagerduty.com/v2/enqueue.…
• Datadog Logs (optional log forwarding) – sends event log entries and the API key. Endpoint: https://http-intake.logs..datadoghq.com/api/v2/logs. Terms…