VistoShield
Free
Protect up to 3 WordPress sites with 5 fully active security modules, dashboard access to 5 more, and the option to unlock 4 advanced modules anytime with Pro.
Free forever. Upgrade to Pro ($89/site/year) or Max ($169/site/year) when you need more sites, longer history, or white-label branding.
What's in the Free Plan
Up to 3 WordPress sites — 5 fully active, 5 monitor-only, 4 premium modules (Pro required)
✅ 5 Fully Active Modules
Firewall & WAF
7 WAF rule categories, 14-point hardening checklist, HTTP security headers. Block SQL injection, XSS, and file inclusion attacks at the application layer.
Login Guard
Brute-force protection with login attempt limiting, CAPTCHA integration, and IP lockout. Two-factor authentication support for admin accounts.
Live Traffic Monitor
Real-time HTTP request monitoring with bot vs human classification. User agent analysis, response code breakdown, and geographic origin data.
Security Scanner
Manual malware scanning with file integrity monitoring. Detect modified core files, suspicious code patterns, and known malware signatures.
Activity Log
Track user actions, plugin changes, login events, and content modifications. 3-day event history with filterable log viewer.
👁 3 Monitor-Only Modules (Dashboard Only)
Bot Detector MONITOR ONLY
View bot detection dashboard and traffic classification. Full configuration and blocking rules require Pro.
DNS Monitor MONITOR ONLY
View DNS health scores and check results. Automated monitoring, change alerts, and scheduled checks require Pro.
Password Policy MONITOR ONLY
View password compliance dashboard. Full policy enforcement, expiration rules, and breach detection require Pro.
🔒 4 Premium Modules (Pro Required)
API Security PRO REQUIRED
REST API endpoint monitoring and access control. Disable unused endpoints, restrict authentication methods, and log API activity.
Vulnerability Patcher PRO REQUIRED
Virtual patching for known plugin and theme vulnerabilities. Protect your site while waiting for official updates from developers.
Incident Response PRO REQUIRED
Guided incident response workflows for common security events. Step-by-step playbooks for malware removal, account compromise, and data breach scenarios.
CDN Connector PRO REQUIRED
Cloudflare integration for DNS-level protection. Sync firewall rules between VistoShield and your CDN for layered defense.
Free Plan Limits
What the free plan includes — and what Pro unlocks
Up to 3 WordPress Sites
The free plan covers up to three WordPress installations. Pro supports up to 100 sites at $89/site/year, Max up to 250 sites at $169/site/year, all manageable from one cloud dashboard.
3-Day Dashboard Data
Event history, traffic logs, and scan results are retained for 3 days. Pro extends retention to 14 days. Max extends to 30 days for compliance needs.
Manual Scans Only
Security scans must be triggered manually. Pro adds scheduled scans with configurable frequency — hourly, daily, or weekly — so threats are caught automatically.
143 Bot Signatures (Weekly Updates)
The free signature database covers the most common bots. Pro includes 500+ premium signatures with daily updates for faster detection of emerging threats.
Community Support
Get help through the WordPress.org support forums and documentation. Pro includes priority email support with guaranteed 24-hour response from the development team.
Compare Plans
See exactly what changes when you upgrade
| Feature | Free | Pro ★ | Max |
|---|---|---|---|
| Security Modules | 5 active / 5 monitor-only / 4 locked | All 14 unlocked | All 14 unlocked |
| WordPress Sites | Up to 3 sites | Up to 100 sites | Up to 250 sites |
| Dashboard Data Retention | 3 days | 14 days | 30 days |
| Cloud Dashboard | — | ✓ | ✓ |
| Bot Signatures | 143 (weekly) | 500+ (daily updates) | 500+ (daily updates) |
| Scan Frequency | On-demand | Hourly | Hourly |
| Reporting | Weekly security report | PDF reports + weekly emails | White-label PDF |
| Team Members | Owner only | 5 | 20 |
| White-Label Branding | — | — | ✓ |
| API Access | — | — | ✓ |
| Notifications | Email + Slack + webhook | Email + Slack + webhook + SMS | |
| Support | Community | Priority support | Priority email (24h) |
| Price | $0 forever | $89/site/year | $169/site/year |
Common Questions
Is the free plan really free forever?
Yes. There is no time limit, no trial period, and no credit card required. 5 fully active modules, 5 monitor-only modules, and up to 3 sites work indefinitely on the free plan with the limits described above.
Can I upgrade later without losing my settings?
Yes. Activating a Pro license instantly unlocks premium features on top of your existing configuration. Nothing resets or changes — you keep everything you already set up.
What happens if I cancel Pro?
Your account reverts to the free plan. All settings, data, and configurations are preserved. You lose access to extended history, premium signatures, cloud dashboard, and reporting until you renew.
Do I need to install separate plugins for each module?
No. VistoShield is one plugin with 14 built-in modules. Install it once and enable the modules you need from the dashboard. All modules share the same admin interface and connect to the cloud dashboard.
Get Started with 5 Full Modules for Free
Install VistoShield from wordpress.org and protect up to 3 WordPress sites with 5 active security modules — no payment required.
No credit card required