Version 1.4.0 · Free forever · GPL v2

Download 2MNY Shield

No registration required. No credit card. Just download and install.

WordPress Plugin

For WordPress 5.8+ (tested up to 7.0)

Includes: WAF (182 rules), scanner (237 sigs), FIM, live traffic, alerts, 2FA, headers, auto-fix (Pro), cloud sync (Pro)

Download WordPress Plugin (.zip)

Version 1.4.0 · 103 KB · GPL v2

File: 2mny-shield-wordpress-v1.4.0.zip

Standalone PHP Script

For cPanel, custom PHP, Laravel, CodeIgniter, raw PHP

Same 182 rules + 237 signatures + FIM + live traffic + alerts. Auto-fix + cloud sync in Pro. Same license works on both versions.

Download Standalone (.zip)

Version 1.4.0 · 56 KB · GPL v2

File: 2mny-shield-standalone-v1.4.0.zip

WordPress Installation

  1. Download the WordPress ZIP above.
  2. Log in to WordPress admin.
  3. Go to Plugins → Add New → Upload Plugin.
  4. Choose 2mny-shield-wordpress-v1.4.0.zip and click Install Now.
  5. Click Activate.
  6. Find 2MNY Shield in the sidebar — firewall, scanner, FIM, live traffic, and alerts are active.

Detailed guide: /shield/docs#install-wp

Standalone Installation

  1. Download 2mny-shield-standalone-v1.4.0.zip above and unzip it.
  2. Upload the resulting shield-standalone/ folder to your server (e.g. /home/user/shield-standalone/).
  3. Visit https://your-site.com/shield-standalone/installer.php.
  4. Enter admin password and (optional) Pro license key.
  5. Add to the top of your site's index.php:
    <?php require_once '/home/user/shield-standalone/shield.php';

Detailed guide: /shield/docs#install-sa

CHANGELOG

What's new in v1.4.0

New in v1.3.0 & v1.4.0:
  • INTelLive threat-intel blocklist — URLhaus + ThreatFox IPs & hosts, synced hourly from the 2MNY cloud
  • GEOCountry blocking with BD-admin allow-list (fail-open geo)
  • WAFVulnerability feed + virtual patching — rules auto-generated for newly published CVEs
  • HDRHost-header protection — blocks HTTP Host-header injection
  • NET2MNY Network blocklist sync — every protected site shares attack intelligence
Also in v1.2.0:
  • File Integrity Monitoring (SHA-256 hash baseline)
  • Live Traffic view (last 500 requests + block log)
  • Email alerts (6 types, rate-limited)
  • Real-time firewall at plugins_loaded priority 1
  • User enumeration protection (?author=N)
  • Brute-force rate limiting (5 attempts → 1h block)
Also in v1.2.0 (continued):
  • 182 firewall rules (was 9 in v1.0)
  • 237 malware signatures (was 9 in v1.0)
  • WordPress 7.0 compatibility
  • WordPress.org coding standards (escaping, nonces, capability checks)
  • Standalone version now includes FIM, live traffic, and alerts

Full changelog: /shield/docs

PRO TIERS

Want Auto-Fix and Cloud Sync?

Unlock auto-fix, cloud sync, and multi-site management — the cheapest Pro tier on the market.

Pro $89/yr (1 site) · Multi-Site $249/yr (5 sites) · Enterprise $499/yr (unlimited sites)

View Pro Plans →

Need help? [email protected] · Full docs: /shield/docs