LocoAI
89LocoAI - Auto Translate For Loco Translate is a powerful tool for developers looking to quickly translate thei...
Free
70k+ installs 4.9★ (637)
NETSENSAI Shield
Hardens and protects your site by locking down login, REST API, XML‑RPC, file editor, and applying HTTP security headers.
The facts
- Rating
- 5★ from 5
- Active installs
- 1k+
- Price
- Free
- Last updated
- 19 Aug 2026
- Added
- Apr 2025
- Requires WP
- 5.6
- Tested up to
- WP 7.1
- Downloads
- 7,902
Our analysis
AI-assistedNETSENSAI Shield is a WordPress plugin designed to enhance the security of your site. It offers features such as changing the login URL, disabling the REST API for non-logged-in users, and preventing unauthorized access through XML-RPC. The plugin also integrates with W3 Total Cache to manage caching settings effectively.
This plugin is suitable for WordPress site owners looking to improve their site's security and performance. It provides essential tools to protect against common vulnerabilities while also offering user-friendly notifications regarding security changes.
Best for: WordPress site owners who want to enhance security and performance.
What it does well
- ✓Changes the login URL to reduce brute force attack risks
- ✓Disables REST API for non-logged-in users
- ✓Prevents unauthorized access through XML-RPC
- ✓Integrates with W3 Total Cache for improved performance
- ✓Sends email notifications when the login URL changes
Where it falls short
- •Limited information on additional features or user support
Verdict
NETSENSAI Shield provides a solid set of security features for WordPress users. It is particularly useful for those who prioritise protecting their site from common threats.
From the developer
Rafal Gierlicki's own description of NETSENSAI Shield, lightly tidied.
NETSENSAI Shield offers a range of security features, including:
Changing the login URL to reduce brute force attack risks.
Disabling the REST API (WP API JSON) for non-logged-in users.
Disabling XML-RPC to prevent unauthorized access.
Disabling the WordPress file editor to avoid accidental or malicious changes.
Disabling Application Passwords to block unauthorized API access.
Applying advanced HTTP security headers (e.g., HSTS, X-Frame-Options, Content-Security-Policy).
Integration with W3 Total Cache:
Permanently disable .htaccess writes by W3TC
Runtime disabling of Page Cache UI
One-time full cache flush on first admin page load
Automatic cache flush on Secure Options save
Physical cleanup and permanent disable via the W3TC API
Suppression of Site Health REST API availability notices for non-logged-in users (removes false Site Health errors while maintaining full API blocking).
In addition, the plugin provides helpful user feedback:
Email notifications when the login URL changes – sends a localized HTML email (Polish or English) with your old and new login links, change date and the plugin logo, so you remember to update your bookmarks.
Tagged as
Alternatives
Other plugins for integrating services.
The AI + Automation plugin for WordPress. Automate workflows across all your plugins and apps, add an AI agent...
Free
40k+ installs 4.9★ (156)
Create custom interactive maps with free Leaflet-based styles, no Google Maps API key, frontend marker submiss...
Free
10k+ installs 5★ (67)
Activity Log
87Monitor every change on your WordPress site — who did what, when, and where it came from — for a complete audi...
Free
200k+ installs 4.3★ (74)
Reviews Feed
87No API key required. Display Yelp and Google reviews for any business in a clean, customizable feed on your si...
Free
100k+ installs 4.4★ (34)
Contact Form, Google Sheet, MailChimp, Brevo, Webhook, Zoho CRM Automation and Integration plugin that Connect...
Free
20k+ installs 4.9★ (160)