PluginScout

WP Shieldon — WordPress Security Plugin

WP Shieldon – WordPress Firewall

by Terry L. · WordPress.org page · Website

v2.0.2 Tested up to WP 6.2.11 PHP 7.1.0+

WP Shieldon has 100+ active installs on WordPress.org and 6,209 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on June 21, 2023, tested up to WordPress 6.2.11.

WP Shieldon at a glance

Active installs
100+
Total downloads
6,209
Downloads, last 30 days
available after 30 days of tracking
30-day growth
tracking since September 4, 2026

Is WP Shieldon well maintained?

Support threads resolved
No open threads
nothing waiting on the WordPress.org forum
WordPress compatibility
Behind
tested up to WordPress 6.2.11, not yet with the current 7.1

Features

The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.

  • Realtime statistics – See who are browsing your website and their status
  • Beautiful and detailed statistics and dashboard
  • Block bad bots by default – Backlink crawlers, copyright crawlers and WayBack machine bot
  • IP manager – Block signle IP or IP range as you want. (IPv6 supported)
  • Online session control – You can limit just how many visitors browsing your website. Good for webmasters whose blog is hosted on a share hosting
  • SEO friendly – You can allow popular search engines such as Google, Bing, Yahoo and others, put them in the whitelist
  • XML RPC, Login, Signup page protection
  • Multiple data drivers – Redis, SQLite, File system, MySQL
  • Multiple CAPTCHA modules – Google reCAPTCHA v2, v3 and Image CAPTCHA
  • XSS Protection
  • Page authentication
  • Many others you can find by yourself

WP Shieldon reviews and ratings

3 reviews on WordPress.org, with the most recent ones as their authors posted them.

3.7 out of 5

3 reviews

5★
2
4★
0
3★
0
2★
0
1★
1
  • Working

    Thanks

    Vu Tru So
  • Very weak against other free plugins in this category

    What this plugin does it's hard to say. I wasn't able to trigger any of its "firewall" although I wasn't trying XSS it's claiming. You should avoid this plugin. Why?1. Useless on its own2. Poorly written code3. Doesn't clean up the database after uninstall4. For little it does, it consumes too much of the CPU power5. Long time not updated Other well established free plugins offer much more then this, I wouldn't trust it.

    Jaro
  • Give it a try

    Looks good, makes sense, works. Try this WAF plugin :-)

    Andrea

Details

WP Shieldon is a WordPress security plugin based on Shieldon library, a Web Application Firewall (WAF) for PHP.

The full description, screenshots and every review live on the WordPress.org page.

Rankings WP Shieldon competes in

Tags

  • anti-scriping
  • Brute Force
  • firewall
  • security
  • xss protection

More from Terry L.

Version
2.0.2
Last updated
Jun 21, 2023
First published
Jun 18, 2019
Requires WordPress
4.7
Tested up to
6.2.11
Requires PHP
7.1.0
Pricing
Free on WordPress.org

WP Shieldon FAQ

What does WP Shieldon do?

According to its WordPress.org readme, WP Shieldon offers Realtime statistics – See who are browsing your website and their status, Beautiful and detailed statistics and dashboard, Block bad bots by default – Backlink crawlers, copyright crawlers and WayBack machine bot, IP manager – Block signle IP or IP range as you want. (IPv6 supported) and Online session control – You can limit just how many visitors browsing your website. Good for webmasters whose blog is hosted on a share hosting.

How many active installs does WP Shieldon have?

WordPress.org reports 100+ active installs for WP Shieldon as of September 7, 2026.

Is WP Shieldon still maintained?

The last release was on June 21, 2023, more than a year ago. WordPress.org shows a warning on plugins that go this long without an update.

Is WP Shieldon free?

WP Shieldon is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.