MONA Shield is a lightweight security layer for your website, developed in-house by MONA to replace plugins such as Disable REST API. Its job is to close off the entry points attackers often use to scan websites, without affecting your day-to-day operations.

And like the rest of MONA's plugin suite, MONA Shield comes with a lifetime license per domain, granted once and used forever, with no annual fee.

Where WordPress websites usually get scanned

A default WordPress website leaves a few doors open that bad actors like to target. There is a public data gateway that lets outsiders read the website's information, including the list of user accounts. There is an old mechanism called XML-RPC that is often abused for mass password guessing. And websites often expose version information, which tells attackers how to go about attacking.

For non-technical people, these details are invisible. But they are exactly where automated scans aim first. MONA Shield closes these doors for you.

What MONA Shield does

• Blocks the public data gateway for visitors who aren't logged in: people who aren't logged in can't read the website's internal information, while essential features keep working normally.
• Turns off XML-RPC: closes an old entry point that password-guessing software likes to exploit.
• Hides clues that help scanners: conceals version information and other traces that help attackers plan an attack.

All of this is lightweight, so the website doesn't become a bulky fortress that slows pages down. It's the basic protection every website should have. It doesn't replace a full security solution, but it blocks most automated scans.

Security that comes with legal peace of mind

A safe website keeps attackers out and also runs on legal software. Cracked security plugins floating around online sometimes come with malware already inside, which is like letting the burglar in yourself. MONA Shield is genuine software, built on MONA's own source code with a lifetime license, so you're safe technically and covered legally.

FAQ

Does MONA Shield slow down the website?

No. It's a lightweight layer that only closes the doors scanners use, so it adds no load to page speed.

Does blocking the data gateway break any features?

No. The plugin only blocks anonymous visitors who are not logged in; the website's necessary features keep working normally.

Do I have to renew every year?

No. It's a lifetime license per domain, granted once and used forever.

Get advice on a website built on genuine, lifetime-licensed plugins

MONA's other lifetime-licensed plugins

MONA is building a full plugin suite to replace the third-party plugins on your website, all with a lifetime license per domain:

MONA Smart Form  ·  MONA Fields  ·  MONA Multilingual  ·  MONA SEO  ·  MONA Duplicator

See the overview at MONA lifetime-licensed plugins.

Developer information

• Developer: The MONA Group (MONA Media): founded in 2016, more than 200 staff, 14,000+ projects delivered, about 85% client retention.
• Product: MONA Shield, a WordPress plugin developed 100% in-house by MONA.
• License type: Lifetime use per domain, with no renewal or annual license fees.
• Support: Hotline 1900 636 648. Website: mona.media.