Revenue Shield
Ad blockers affect publisher revenues. Revenue Shield is an advanced solution designed for publishers to recover lost ad revenue by asking users to whitelist your site, while also providing powerful security hardening and WAF features.
🛑 REVENUE SHIELD ENGINE
Free (Lite) Features: * Smart Detection: Detects basic adblockers via DOM element checks. * Customizable Warning: Change the warning title and message to fit your brand. * Dismissible Popups: Allow users to close the warning and continue reading by simply clicking “Skip” or pressing the ESC key.
PRO Features: * Hard-Lock Engine: Removes the “Skip” button and disables the ESC key. * Polymorphic Anti-Tamper: Randomizes HTML/CSS/JS variables per reload to defeat AdBlock static rules and Inspect Element bypassing. * Content Blurring: Adds a premium frosted-glass blur over your entire website content. * AdBlock Redirect: Instantly redirect adblock users to a specific URL instead of a popup. * rDNS SEO Bot Verification: Uses cached Reverse DNS lookup to securely verify real Google/Bing bots.
🔒 SYSTEM HARDENING & SECURITY
Free (Lite) Features:
* Customizable Brute Force Protection: Limit malicious login attempts based on IP with adjustable max retries and lockout durations.
* Hide WP Version: Removes your WordPress version from the source code.
* Disable File Editor: Prevents editing theme/plugin files directly from the dashboard.
* Custom DB Logging: Threat logs and statistics are stored in custom, highly optimized database tables to prevent wp_options bloat and ensure maximum server performance.
PRO Features:
* Enterprise WAF Engine: Scans GET, POST, COOKIE, and User-Agent parameters. Automatically decodes Base64/URL payloads to detect hidden XSS, SQLi, and LFI attacks.
* Malicious File Upload Protection: Scans the $_FILES array to block dangerous extensions (.php, .phtml, .svg, .exe) uploaded via forms or comments.
* Geo-Blocking: Block specific countries from accessing your WordPress login portal using ISO country codes.
* Manual IP Blacklist: Instantly block specific malicious IP addresses at the server level.
* Hide Login Page: Change your wp-login.php path to a secret custom URL (e.g., /my-secret-door).
* DDoS Rate Limiting: Blocks IPs making excessive requests (e.g., >120 requests per minute).
* Block Empty User-Agents: Blocks primitive scrapers and bad bots that send no browser identity.
* Disable XML-RPC: Blocks the WordPress XML-RPC endpoints to prevent pingback attacks.
* CSV Export: Easily export your Threat Logs to a CSV file for enterprise reporting.