WPZora Logo LeadShield Cloud

LeadShield Setup Guide

Use this guide to connect a WordPress website, configure SaaS policies, and create protected SafeLinks.

1. Connect a WordPress site

  1. Create an account and verify your email.
  2. Add your website from Sites.
  3. Generate an API key from the dashboard.
  4. Install the WordPress Connector plugin.
  5. Paste the SaaS URL and API key, then click Save & Test Connection.
SaaS URL: https://leadshield.wpzora.com

2. Manage protection from the cloud

Go to Sites → Protection Settings. The connector only sends email, IP and context data; LeadShield Cloud decides whether to allow, monitor or block.

  • Set Protection Mode to Monitor while testing.
  • Enable Email/IP layers per context: registration, login, checkout, Contact Form 7, comments, sitewide visits and API.
  • Configure Email Firewall rules and HardShield IP rules from the same page.

3. Test sitewide IP blocking

For normal page visit blocking, all of these must be enabled:

Cloud policy: Protection Mode = Block Mode
Cloud policy: Sitewide IP/Page Visit = Enabled and IP Layer = Enabled
Connector: Enable sitewide IP agent hook
Connector: turn Bypass logged-in administrators off while testing as admin.
Purge LiteSpeed/server/page cache before testing.

5. Universal API protection

Developers can call the cloud endpoint directly before accepting leads, signups or orders from custom websites.

POST /api/protect.php api_key=YOUR_API_KEY context=universal_api domain=example.com email=buyer@example.com ip=1.2.3.4

6. Plans, billing and limits

LeadShield supports Free, Starter, Pro and Agency plans with monthly usage, site and API key limits. PayPal subscriptions can activate paid plans automatically.