Protects your WordPress forms, WooCommerce checkout, chat widget, and login endpoints from bots, spam, and brute-force attacks without forcing customers to solve image puzzles and without sending visitor data to Google reCAPTCHA or Cloudflare Turnstile. Runs 100% on your server with zero cookies and full Amendment 13 compliance.
Human visitors submit forms effortlessly while automated scripts and credential stuffers are blocked server-side.
Layer 1: Block headless bots that POST directly to endpoints or submit forms in milliseconds.
How it works: A lightweight local script verifies genuine DOM focus/input interaction and enforces a configurable minimum fill time verified via HMAC-SHA256.
Layers 2 & 3: Catch autofill spam bots and bulk link-drop scripts.
How it works: Injects an accessible-safe hidden honeypot trap into protected forms and evaluates submission patterns without false positives on real inquiries.
Layers 4 & 5: Stop password brute-forcing and form flooding from abusive sources.
How it works: Tracks request velocity using a daily salted SHA-256 hash of the remote IP. Raw IP addresses are never written to the database.
Coverage: Secure every entry point on your site with a single cohesive plugin.
How it works: Protects Elementor Pro Forms, Contact Form 7, WPForms, WooCommerce Checkout & Registration, WordPress Comments, wp-login.php, xmlrpc.php, plus Israsky Chat and Lidin forms.
Unlike reCAPTCHA or Turnstile, Israsky Shield never leaks visitor data to third parties or hurts conversion rates.
| Parameter | Specification |
|---|---|
| Runtime Environment | WordPress 6.0+, PHP 7.4 to 8.4+ |
| External Requests & Cookies | 0 external network calls, 0 cookies, 0 third-party scripts |
| Personal Data (PII) | 0 bytes stored: IPs are hashed with a daily rotating salt; isr_shield_log records only anonymous counters and rule IDs |
| Protected Integrations | Elementor Pro, Contact Form 7, WPForms, WooCommerce Checkout & Auth, WP Comments, wp-login.php, xmlrpc.php, Israsky Chat, Lidin |
| What It Does Not Do | Does not replace network-layer hosting WAF/DDoS mitigation and does not perform credit card fraud scoring |
All prices are in ILS and include VAT. Order directly on Israsky.
Best for: Any WordPress site or WooCommerce store looking to eliminate form spam and login attacks without reCAPTCHA.
What is included: 1 production domain + 1 staging domain, signed updates via plugins.israsky.co.il, and technical support.
Price: ₪290 / first year renewal from year 2 – ₪145/year (incl. VAT)
Best for: Businesses combining Shield anti-spam with Israsky Consent and WooCommerce store modules.
What is included: All 7 Israsky WordPress & WooCommerce plugins for 1 live + 1 staging site.
Price: ₪600 / first year renewal from year 2 – ₪300/year (incl. VAT)
Best for: Web agencies and developers protecting multiple client sites across Israel.
What is included: Full Israsky plugin suite, free domain transfers, and priority engineering support.
Price: ₪1,800 or ₪3,900 / year up to 5 sites (₪900 renewal) or unlimited sites (₪1,950 renewal)
We engineer plugins for long-term business reliability in Israel and never plant kill-switches in your frontend.
This plugin is pre-selected in the form below. Enter your website URL and contact details: we will verify compatibility, issue an official Israeli tax invoice (חשבונית מס/קבלה), and deliver your license key or perform turnkey installation.
Google reCAPTCHA loads heavy external scripts, sets tracking cookies that require prior consent under Amendment 13, and frustrates mobile shoppers with image challenges. Israsky Shield runs silently on your server with zero external data sharing.
The minimum fill-time threshold is adjustable in settings, and verification combines multiple signals (signed token, DOM interaction events, and honeypot state) to avoid false positives.
Yes. All clients on our Managed Hosting & Care plans (S, M, L) and Digital Department plans receive Israsky Shield at no additional cost.
Send us your website URL and requirements, and we will advise whether a single license, the ₪600 All-In Bundle, or turnkey setup is the best fit.
