AI-powered WordPress security with zero performance impact.
GenesisGuard blocks SQL injection, XSS, RCE, and zero-day attacks before they reach your WordPress site — using behavioral analysis, ML anomaly detection, and a global threat intelligence network.
Wordfence and Sucuri load after WordPress boots — the slow request is already happening before they get a vote. GenesisGuard runs as a must-use plugin, so the verdict is in before wp-load.php is even included.
{ "ts": "2026-05-28T15:42:11Z",
"ip": "185.220.101.42",
"country": "RU",
"asn": 60068,
"method": "POST",
"path": "/wp-login.php",
"rule": "wp-login-bruteforce/v3",
"verdict": "block",
"score": 0.94,
"ms": 0.81
}What happens in the request path
No proxy, no extra hop. The plugin registers in WordPress's mu-plugins directory and runs synchronously inside PHP-FPM, before any theme or plugin file is loaded.
Total added latency for an allowed request, measured on a 4-core VPS: 0.7 ms p50, 1.4 ms p99.
┌─ inbound HTTP request │ ├─ nginx → PHP-FPM │ ├─ MU-plugin: GenesisGuard early hook ← us, here │ ├─ regex pattern scan ~0.2 ms │ ├─ IP reputation lookup ~0.3 ms │ └─ semantic AI (Pro+) ~0.4 ms │ ├─ verdict: allow | block | challenge │ ├─ wp-load.php ← WP only loads if allowed │ └─ theme + plugins
Signature scanners miss obfuscated payloads. We don't.
The semantic scanner reads request bodies the way a security engineer would — normalising encodings, unpacking common obfuscations, and asking an LLM whether the underlying intent matches a known attack class. Catches eval-base64-decode wrapping, hex-escaped payloads, and split-string injections that regex packs categorically can't see.
Early-load WAF
Runs as a must-use plugin, sub-millisecond rule evaluation, zero overhead on cached responses.
OWASP regex pack
25 curated rules covering SQLi, XSS, RCE, LFI, path traversal — with ReDoS guards on every pattern.
Cloud threat intelligence
IP reputation aggregated from every protected install. A new bad source teaches every other site within minutes.
Central dashboard + auto-heal
Multi-site view, real-time attack map, and file-integrity monitoring that reverts tampered core files automatically.
Pricing
One license per site. Cancel anytime. Paid tiers ship with a 14-day money-back guarantee.
Free
WAF + OWASP regex for a single site. Forever.
- 1 site
- Early-load WAF
- OWASP regex scanner
- Manual updates
- Community support
Pro
what most people pickAI-assisted detection + live threat-intel feed.
- 1 site
- Extended WAF
- Semantic AI scanner
- Cloud threat intelligence
- Auto-updates
- Email support
Business
For operators running attack maps + custom rules.
- 1 site
- Central dashboard
- Real-time attack map
- Priority updates
- Custom alert rules
- Priority support
FAQ
Will GenesisGuard slow my site down?
How is this different from Wordfence or Sucuri?
wp-load.php, not after), how it decides (LLM-assisted semantic scoring on top of regex, not regex alone), and where the intel comes from (real-time feed pooled from every install — not a vendor-curated update that ships once a day).What happens to my paid features if the trial lapses?
Drop it on any WordPress install in 60 seconds.
The free tier is permanent. Upgrade in the dashboard when you outgrow it.