Already active on your hosting

Your site is protected by pxShield.

Your hosting provider installed pxShield on this server. It checks every request that reaches your site and stops attacks before they reach your application. There is nothing for you to set up.

What pxShield blocks for you every day

Most attacks against websites are automated: bots probing for known weaknesses. These are the ones it stops most often.

SQL injection

Attempts to read, change or delete your database: your posts, customers and orders.

Cross-site scripting (XSS)

Scripts injected into your pages to steal sessions or deface the site.

Brute-force logins

Bots trying thousands of passwords on /wp-admin and other login pages.

Known CMS exploits

Attacks on WordPress, Joomla, Drupal and their plugins.

Malicious bots and scrapers

Crawlers that hammer your site, copy your content or look for hidden files.

Web shells and backdoors

Uploads of code that would give an attacker permanent access.

What one server sees

150,693attacks blocked in 30 days on one server with 22 sites
16,397attempts to read the .env file with its passwords, on that same server
0settings for you to change

What good hosting looks like

When you compare hosting providers, these are worth checking. Your current host already covers the first one.

  • A web application firewall includedIncluded on this server

    Every request inspected, like pxShield on this server. The biggest single factor in keeping a site online and clean.

  • Daily backups with one-click restore

    If something goes wrong, you want to roll back in minutes, not days.

  • Free SSL certificates that renew on their own

    HTTPS should never expire. Look for Let’s Encrypt or AutoSSL out of the box.

  • Current PHP versions, easy to switch

    Old PHP is a common way in. You want PHP 8 and a per-site switch.

  • Security you can see

    Like the dashboard in your cPanel. If you cannot see what is blocked, you cannot trust it.

Look for pxShield in your next hosting plan. It is the same protection you have today.

Questions

Do I need to install or configure anything?

No. pxShield runs on the server, not inside your website. Your hosting provider installed and tuned it. You do not need a plugin, a DNS change or any change to your code.

Does it slow my site down?

It inspects requests on the server as they arrive, and the difference is not something visitors notice. When your site is under attack, the malicious requests are stopped before they use your site’s resources.

What if it blocks a real visitor?

It is rare, but it can happen. Your hosting provider can see why each request was blocked and add an exception for a rule, an address or a path. Ask them: they have the controls.

Is my site now completely safe?

pxShield stops most automated and known attacks, but it does not replace the basics: keep your CMS and plugins up to date, use strong passwords and keep backups.

I am moving to another host. Does pxShield come with me?

pxShield is licensed to your provider’s server, not to your account. When you move, ask the new host whether they include pxShield.

Choose hosting that includes pxShield.

Next time you look for hosting, for this site or a new one, ask: “Does it include pxShield?” If it does, you get the same automatic protection you have today.

Learn more about pxShield