MONA Shield is a lightweight security layer for your website, developed in-house by MONA to replace plugins such as Disable REST API. Its job is to narrow the doors that bad actors often exploit to scan websites, without affecting your day-to-day operations.

And like the rest of MONA's plugin suite, MONA Shield comes with a lifetime licence per domain, granted once and used forever, with no annual fee.

Where WordPress websites usually get scanned

A default WordPress website leaves a few doors open that bad actors like to target. There is a public data gateway that lets outsiders read the website's information, including the list of user accounts. There is an old mechanism called XML-RPC that is often abused for mass password guessing. And websites often expose version information, which tells attackers how to go about attacking.

For non-technical people, these details are invisible. But they are exactly where automated scans aim first. MONA Shield closes these doors for you.

What MONA Shield does

• Blocks the public data gateway for anonymous visitors: strangers who are not logged in cannot read the website's internal information, while the necessary features keep working normally.
• Turns off XML-RPC: closes an old entry point that password-guessing software likes to exploit.
• Hides scanning clues: conceals version information and other traces that help attackers plan an attack.

All of this is done lightly, without turning the website into a bulky fortress that slows pages down. It is the basic protection every website should have; it doesn't replace a comprehensive security solution, but it blocks most automated scans.

Security that comes with legal peace of mind

A safe website is not only one that keeps bad actors out; it also runs on legal software. Cracked security plugins floating around online are sometimes exactly where malware is pre-installed, which means inviting the thief into your own house. MONA Shield is genuine software, built on MONA's own source code with a lifetime license, so you are safe technically and at ease legally.

FAQ

Does MONA Shield slow down the website?

No. It is a lightweight security layer that only closes scanning doors, adding no load to page speed.

Does blocking the data gateway break any features?

No. The plugin only blocks anonymous visitors who are not logged in; the website's necessary features keep working normally.

Do I have to renew every year?

No. It's a lifetime licence per domain, granted once and used forever.

Get advice on a genuine, lifetime-licensed website

MONA's other lifetime-licensed plugins

MONA is developing a complete plugin suite to replace third-party software on your website, all with a lifetime licence per domain:

MONA Smart Form  ·  MONA Fields  ·  MONA Multilingual  ·  MONA SEO  ·  MONA Duplicator

See the overview on the page MONA lifetime-licensed plugins.

Developer information

• Developer: The MONA Group (MONA Media), founded in 2016, more than 200 staff, 14,000+ projects completed, a client retention rate of about 85%.
• Product: MONA Shield, a WordPress plugin developed 100% in-house by MONA.
• Licence type: Lifetime use per domain, no renewal fees, no annual licence fees.
• Support: Hotline 1900 636 648. Website: mona.media.