# Your site is protected by pxShield

> For site owners whose hosting provider installed pxShield on their server.

Source: https://www.pyxsoft.com/landing/cpanel-users
Updated: 2026-11-10

---

Your hosting provider installed pxShield, a web application firewall, on the server that runs your site. It checks every request and stops attacks before they reach your application. You do not need to install a plugin, change DNS or touch your code.

## What it blocks

- SQL injection: attempts to read, change or delete your database.
- Cross-site scripting (XSS): scripts injected into your pages.
- Brute-force logins on /wp-admin and other login pages.
- Attacks on known weaknesses of WordPress, Joomla, Drupal and their plugins.
- Malicious bots and scrapers.
- Uploads of web shells and backdoors.

On one server with 22 sites, pxShield blocked 150,693 attacks in 30 days, including 16,397 attempts to read the .env file.

## Questions

- **Does it slow my site down?** It inspects requests on the server as they arrive; visitors do not notice the difference.
- **What if it blocks a real visitor?** Your hosting provider can see why each request was blocked and add an exception.
- **Is my site completely safe?** It stops most automated and known attacks. Keep your CMS and plugins updated, use strong passwords and keep backups.
- **Does pxShield come with me if I change hosts?** It is licensed to your provider's server. Ask your new host whether they include pxShield.

More about pxShield: [/waf](https://www.pyxsoft.com/waf).