Paul G.
Paul Goodchild is the founder and CEO of Shield Security for WordPress – a best-in-class security plugin for the protection of critical WordPress-based websites and businesses.
Paul focuses on security features that deliver realworld results for client through the prevention of security breaches before they can happen. Prevention is preferrable over busy-security-work that sees you putting out fires and cleaning up your sites after an infection has taken hold.
Paul maintains that while a security plugin for WordPress is absolutely crucial, “security” is a practice and must involve your entire website and WordPress hosting environment, including your own local device security and security hygiene.

Latest blogs from Paul
Beyond CAPTCHA: Advanced WPForms Spam Prevention Strategies
Stop WPForms spam in its tracks. Learn prevention strategies beyond CAPTCHA, from built-in features to third-party tools. Protect your forms effectively!
Continue Reading →How to Configure X-XSS-Protection Header in WordPress
Secure your WordPress site: Learn to set up X-XSS-Protection header and advanced XSS defences. Protect against cross-site scripting now.
Continue Reading →
Critical WordPress Threats; & Shield Your Comment Forms
A wave of security risks is hitting countless WordPress sites this week, fueled by WP Ghost, while DollyWay malware continues to target thousands. Explore our blog for smarter solutions to fight spam and protect your comment forms.
Continue Reading →Implementing WordPress HSTS: Step-by-Step Guide
Boost WordPress security with our step-by-step HSTS guide. Learn manual and plugin methods, best practices, and troubleshooting tips to protect your site from attacks.
Continue Reading →How to Add CAPTCHA to WordPress Comment Forms
Tired of spam comments? Learn how to add CAPTCHA to your WordPress forms, boost security, and maintain user-friendly engagement.
Continue Reading →
Unmasking Hidden Risks in Plugins & Themes; Catch and Crush Malware
WordPress plugins and themes, both big and small, continue to hide security risks—one affects 5+ million installs. Plus, discover how to spot and tackle malware threats.
Continue Reading →
Weekly Vulnerabilities; Trust-Building and Performance Strategies
This is a fresh roundup of plugin and theme vulnerabilities with key maintenance steps to keep your WordPress site secure, reliable, and performing at its best.
Continue Reading →
Some vulnerable plugins removed from WP.org; & the ‘Security Through Obscurity’ myth
There's a few ultra critical vulnerabilities this week, with some removed from the WP repo. You can check out the upcoming WP virtual conference and uncover the "Security Through Obscurity" myth from our blog archive.
Continue Reading →
Ongoing Attacks on Major Plugins, Millions Exposed; & Best Practices for Handling WordPress Automatic Updates
While it's a calm week in WordPress security, high-traffic plugins like Elementor, SVG Support continue to be targeted, affecting millions. We're also sharing one of our blog articles on best practices for balancing control and security in WordPress automatic updates.
Continue Reading →
Recurring Vulnerabilities in Avada, Forminator, Rank Math SEO; X-Frame Guide for Advanced User Security
Security patches are required for a few widely used plugins and themes with recurring vulnerabilities, including the Widget Options plugin having a high severity and no fix yet. Don’t miss the latest WordPress news and X-Frame options guide for advanced security, from our blog archive.
Continue Reading →