The plugin is free. The edge starts at 9 euro.

Every feature that runs on your own server costs nothing, forever. Managed plans add the part you can't self-host: a security layer above WordPress and a page cache at the edge, sized by sites and pageviews. Keep whatever optimizer you already run. What these plans buy is attacks refused before PHP, locks a hacked site cannot switch off, uptime and edge-measured insight. Image transformation is a separate add-on for the sites that want it.

Managed plans

We run everything. You install a plugin.

Every plan is fully hardened. Twelve shields that refuse attacks before PHP (security headers, XML-RPC block, login country lock, wp-admin IP lock, login, comment and search flood limits, AI-crawler block, stray-PHP lock, WordPress surface lock, traversal guard, scanner lockout) and three locks a WordPress takeover cannot switch off (change, install, origin) come with every managed plan, Shield included. Plans differ in sites, pageviews, history and reporting, not in how safe your site is.
Every plan starts with a 14-day free trial at checkout. Enter a card, pay nothing today; billing starts automatically when the trial ends, and cancelling before that costs nothing. The license key arrives by email the moment checkout completes.

Plans are sized by sites and pageviews. The pageview number is a soft cap: shields and locks never pause; a license that stays above 150% for two monthly checks has HTML caching set to pass-through on its sites until it moves up. Image transformation is the Managed Images add-on. Hover any feature for details.

1 month free
Shield
€9€9/mo
 
Sites
1
Pageviews/mo
500k
URL rules
100
Origin Shield
1 day
Analytics
7 days
Reports
monthly
Managed Images
add-on
  • Twelve attack shields and three locks
  • Full-page cache, surgical purge
  • Origin Shield
  • Edge-measured insight
  • Email report & alerts
  • Everything in the panel below
Get Shield
Most popular1 month free
Shield Plus
€19€19/mo
 
Sites
1
Pageviews/mo
3M
URL rules
500
Origin Shield
7 days
Analytics
30 days
Reports
weekly
Managed Images
add-on
  • Everything in Shield, and:
  • The larger allowances above
Get Shield Plus
1 month free
Agency
€99€99/mo
 
Sites
10
Pageviews/mo
15M pooled
URL rules
1,000
Origin Shield
7 days
Analytics
90 days
Reports
weekly
Managed Images
100k pooled
  • Everything in Shield Plus, and:
  • One key, ten sites
  • Agency console
  • White-label client reports
  • Managed Images included, pooled
  • Priority support
Get Agency
Managed Images, the add-on: right-sized WebP and AVIF variants from the edge, no Cloudflare account, no plugin to configure. Sold per license in blocks of unique variants per 30 days; blocks stack, cancel any time. Without it your images keep serving from your own server. 10k: €6/mo 30k: €15/mo 100k: €39/mo
Already on a managed plan? Change it in place: the same subscription, prorated, no second checkout and no second key.
Every managed plan also includes
Stays up
Origin Shield
Incident history
Instant serves
Stays safe
Security headers pack
Login protection
Flood limits
Stray PHP and surface shields
Change lock & install lock
Login country lock
Edge URL rules
Stays honest
Audience analytics
404 cleanup inbox
Broken-image detection
Heaviest images & top URLs
Static-asset insight
Edge controls
Cache duration per path
Query-param manager
Cache protection
Dynamic content protection
Speculative loading
Asset URL versioning
…on top of the free plugin’s full toolbox (coverage audits, prewarming, alerts, fake-image repair, misses log, client reports), which works with the managed edge out of the box.
Edge shields. What each shield refused in 14 days on one real site: 129 XML-RPC calls, 31.2k login attempts with the 209 real logins let through. Every shield on every plan.
Probe shields. 169k stray PHP requests, 2.7k enumeration probes and 16 traversal probes answered before PHP ran; 3.2k scanners locked out after their fifth refusal.
Locks. Weakening a shield or changing code waits for a link mailed to your license address. The page shows what was refused, by plugin, and who unlocked what.

Self-hosted · free forever

Your Cloudflare. Your bill. Nothing to buy.

The Nivoli Edge plugin: €0, no account, no upsell walls

You already run a Cloudflare zone with Image Resizing? The plugin drives it, and every feature that runs on your own server is included: URL rewriting with automatic WebP/AVIF, presets and one-click size mapping, full-page caching with your own Fastly / Cloudflare Enterprise / webhook backend, coverage audits with weekly regression email, fake-image repair, Tinify compression with your own key, client reports, WP-CLI. Nothing phones home. About the plugin · docs · WordPress.

Free on every install: the security check. What this WordPress exposes, measured from inside it and from one visit to its own front door. Each finding says what the plugin can switch off here and what only a layer in front of PHP can refuse.

Prices are launch pricing and may change. Managed plans bill after the 14-day trial and can be cancelled anytime; yearly prices are shown per month and billed once a year (12 months for the price of 11); Managed Images blocks are a separate monthly subscription tied to your license, cancellable any time and effective to the end of the paid period; a variant is one unique image size and format in a rolling 30-day window. Full-page caching is included under fair use. VAT is handled at checkout; purchases are sold through Link, Stripe’s merchant-of-record service. Questions: support@nivoli.com.