Requires Magento 2.3+, PHP 7.2+ and an eComscan account (Advanced or up).
composer require sansec/magento2-module-shield
bin/magento setup:upgrade
bin/magento config:set sansec_shield/general/license_key <your license key>
bin/magento sansec:shield:sync-rules
You can configure your license key and other settings via System → Configuration → Security → Sansec Shield.
Test it by visiting your store and add ?SANSEC-SHIELD-TEST
to your URL, it should give you "permission denied". You'll see your first blocked attack appear instantly on your Shield Dashboard. If you do not want reports, you can disable it with:
bin/magento config:set sansec_shield/general/report_enabled 0
You can always view detailed logs in var/log/sansec_shield.log
.
See for FAQs our Shield guide.
Sansec Shield is published under the liberal MIT license.