Description

Professional WordPress security designed to detect suspicious activity, respond automatically, and help protect your website around the clock.

WP Aegis provides intelligent protection against brute-force attacks, malicious requests, automated bots, user enumeration, vulnerability scanning, authentication attacks and other suspicious WordPress traffic.

Instead of relying on a single security rule, WP Aegis monitors multiple signals and builds a threat score for suspicious visitors. Repeated or increasingly dangerous behaviour can trigger automatic rate limiting and IP blocking.

Key Features

Intelligent Threat Detection

WP Aegis monitors incoming WordPress traffic for suspicious behaviour including:

• Brute-force login attempts
• WordPress username enumeration
• Vulnerability scanning
• Malicious URL requests
• .env and configuration-file probes
• PHP shell and backdoor probes
• Directory traversal attempts
• REST API abuse
• XML-RPC authentication attacks
• Excessive 404 scanning
• Automated bot activity
• High-frequency requests
• Suspicious authentication behaviour

Threat Scoring

Suspicious activity contributes to an IP-based threat score.

This allows WP Aegis to distinguish between an isolated suspicious request and a visitor repeatedly displaying malicious behaviour.

As the threat level increases, WP Aegis can progressively respond with stronger protection.

Automatic IP Blocking

Repeated attackers can be automatically blocked.

WP Aegis uses escalating block durations so persistent attackers receive progressively stronger penalties.

Depending on the configured security policy, repeated offenders can progress from temporary blocks to extended or permanent blocking.

Brute-Force Protection

WP Aegis monitors failed WordPress authentication attempts and helps protect login endpoints against automated password attacks.

Repeated login failures contribute to the attacker’s threat score and can result in automatic blocking.

WordPress User Enumeration Protection

Attackers frequently attempt to discover valid WordPress usernames before launching password attacks.

WP Aegis detects common username-enumeration techniques and records them as suspicious security events.

Malicious Request Detection

WP Aegis examines requests for patterns commonly associated with automated vulnerability scanners and exploit attempts.

This includes probes for sensitive configuration files, vulnerable plugin paths, PHP shells, traversal attacks and other suspicious resources.

Bot and Automated Traffic Detection

Automated scanners can generate large numbers of requests while searching for vulnerable WordPress installations.

WP Aegis monitors suspicious automated behaviour and request frequency to help identify potentially hostile traffic.

Advanced Rate Limiting

WP Aegis Pro provides enhanced request-rate enforcement designed to reduce abusive high-frequency traffic before it becomes a larger attack.

Automatic Subnet Protection

When enabled, WP Aegis Pro can analyse suspicious activity originating from related network ranges and use that intelligence as part of its automated protection system.

Country Access Controls

WP Aegis Pro includes geographical access controls that can be used to enforce country-based security policies.

Security Event Logging

Security events are recorded inside WordPress so administrators can see what WP Aegis is detecting.

Logs can include information such as:

• Date and time
• Source IP address
• Security event
• Severity
• Threat-score contribution

This provides visibility into automated attacks and suspicious activity that would otherwise often go unnoticed.

Security Dashboard

The WP Aegis dashboard provides an overview of security activity and protection status directly inside WordPress.

Administrators can monitor detected threats, blocked addresses and other important security information without relying on an external dashboard.

Security Notifications

WP Aegis can notify administrators about important security activity.

WP Aegis Pro also includes security digest functionality for summarising relevant security events.

Built for WordPress

WP Aegis is developed specifically for WordPress and integrates directly with the WordPress security and administration environment.

There is no separate security dashboard required for normal operation.

Simple Licence Activation

WP Aegis Pro is designed to be straightforward to install and activate:

1. Install the WP Aegis plugin.
2. Enter your licence key.
3. Click Activate Licence.
4. WP Aegis Pro protection is enabled.

No licence-server configuration or editing of wp-config.php is required.

28-Day Pro Trial

New WP Aegis installations include a 28-day Pro trial, providing access to Pro functionality before a paid licence is required.

When the trial ends, WP Aegis does not simply stop protecting the website.

Core baseline security features remain available, while Pro functionality requires an active licence.

Baseline Protection

Core WP Aegis protection includes:

• Request and firewall inspection
• Manual IP and network-range blocking
• Essential security event logging
• Login protection
• Emergency recovery controls
• Security dashboard access

WP Aegis Pro

An active Pro licence unlocks additional protection including:

• Country access enforcement
• Advanced request-rate enforcement
• Automatic subnet blocking
• Daily security digests

WP Aegis Pro – 1 Site Licence

This product provides a licence for one WordPress website.

Licence period: 1 year
Website activations: 1
Product: WP Aegis Pro
Platform: WordPress

Your licence key is generated automatically after the qualifying WooCommerce order completes and is associated with your purchase.

Registered customers can also access their WP Aegis licence from the My Account area.

Licence Renewal

WP Aegis Pro licences are valid for the purchased licence period.

An active licence is required to continue using Pro functionality after the licence expires. Baseline WP Aegis security functionality remains available without an active Pro licence.

Important Security Information

No WordPress security product can guarantee that a website will never be compromised.

WP Aegis is designed to reduce attack exposure, detect suspicious behaviour and automatically respond to many common forms of hostile WordPress traffic. Website owners should continue to maintain WordPress core, themes and plugins, use strong authentication credentials, maintain reliable backups and follow appropriate server-security practices.