Free WordPress Security Plugin
Your Site.
The Network's
Intelligence.
McCrossen SecurityShield™ combines on-site threat detection with the collective intelligence of the McCrossen Threat Intelligence Network™ — pre-blocking known attackers before they even knock.
How It Works
Five Stages. One Immune System.
Every threat that touches your site feeds the network. Every site on the network makes yours safer.
Collect
Login attempts, honeypot triggers, header anomalies, and behavioral signals are captured in real time across every request to your site.
Ingest
Each event is enriched with geolocation data, user-agent fingerprinting, and credential pattern analysis before scoring begins.
Score
Our proprietary threat scoring engine calculates a 0–100 reputation score per entity across 20+ signals. Honeypot hits lock the score permanently.
Build
High-confidence threat entities are compiled into the McCrossen Threat Intelligence Network™ feed — distributed to all connected sites every 6 hours.
Deliver
Your site pre-blocks confirmed threats before they attempt login, register, or probe your site — even if they’ve never visited before.
Features
Security That Gets Smarter.
Built-in detection tools combined with network-level intelligence — no configuration required.
Honeypot Detection
Invisible form fields catch bots automatically. If the field is filled, it’s a bot — zero false positives. Confirmed honeypot triggers lock the threat score permanently and add the entity to the MTIN™ feed.
Threat Scoring Engine
Every login attempt, scan, and probe is analyzed across 20+ signals. Scores escalate automatically — 24-hour ban, then 7 days, then 30 days. Persistent attackers earn permanent status.
Country & Geo-Blocking
Block entire countries, ASN ranges, or specific IP ranges with one click. Ideal for sites with no legitimate traffic from high-risk regions. Rules apply at the Apache layer before WordPress loads.
Email Domain Reputation
Login attempts from known-bad email domains are flagged automatically. The MTIN™ feed includes a curated blocklist of domains used by spambots, credential stuffers, and disposable address networks.
Real-Time Alerts
Email notifications on high-severity events with configurable thresholds. Know the moment an escalating attacker hits your site — before they succeed.
Security Event Log
90 days of security event history on every install. Full forensic history for every blocked IP, failed login, and honeypot trigger on your site.
Pricing
Free Forever. Connect for More.
The plugin is free — every protection feature ships in a single package. Connect SecurityShield™ to the McCrossen Marketing Platform to join the MTIN™ threat intelligence network and manage everything from one dashboard.
- Full threat detection engine (20+ signals)
- Honeypot & brute force protection
- CAPTCHA & rate limiting
- Auto-escalating bans — 24h to permanent
- Unlimited manual block rules
- Two-factor authentication (2FA)
- Security headers & login hardening
- File integrity & vulnerability scanning
- Email alerts
- 90-day security event log
- MTIN™ network feed (connect to platform)
- No nag screens, no upsell prompts
- Everything in the free plugin
- Unified security dashboard for your sites
- MTIN™ network stats & per-entity history
- Remote configuration management
- 59-signal SEO audits & one-click apply
- AI Marketing Advisor + document builder
- Connected GA4, Search Console, Business Profile
The plugin itself is always free, and every connected site receives the MTIN™ threat feed. Platform features (dashboards, SEO audits, AI tools) come with any McCrossen Marketing Platform subscription — Starter, Standard, Pro, or Agency. Plans start at $49/mo; cancel anytime.
Better Together
SecurityShield™ + McCrossen Platform
Connect SecurityShield™ to the McCrossen Marketing Platform and your threat data flows into a unified dashboard alongside your analytics, SEO, and AI advisor — one view of everything that matters.
Explore the Platform →