DDoS Protection · Brute Force
XML-RPC Protection
Disable or restrict the XML-RPC protocol, which is often used for brute-force attacks and DDoS amplification. Granular control: disable it entirely or allow only selected methods.

Key Features
Block all XML-RPC requests with one switch if you do not use Jetpack or the WP mobile app.
Compared to alternatives
Complete protection against pingback-DDoS attacks
Disabling XML-RPC does not affect REST API operation
Instantly enable or disable XML-RPC
Interface Gallery
Screenshots for a detailed look at the feature.






Simple, transparent pricing
Choose access to the COS WP Woo capabilities you need across 54 mapped tasks. Products, customers, prices and orders remain unified in WooCommerce.
Starter
$490/year
≈ $41 per month · 2 months free
Perfect for a single WooCommerce store.
- 1 site license
- Store basics (Tabs, Compare, Cart)
- Basic Security (Login, CAPTCHA)
- CSS Editor
- Email support
- B2B module
- 1C Integration
Professional
Most Popular$990/year
≈ $83 per month · 2 months free
Full power for growing businesses.
- 5 site licenses
- Everything in Starter
- All Store tools (Filter, Shipping, Catalog)
- Typesense Search
- B2B module
- Full Security suite (WAF, 2FA)
- Mega Menu + Media Folders
- Priority support
Enterprise
$1,990/year
≈ $166 per month · 2 months free
Maximum features, zero limits.
- Unlimited sites
- Everything in Professional
- 1C OData Integration
- Custom Fields (ACF replacement)
- Typesense + Curation
- B2B Payment Gateways
- Updates with active subscription
- Priority + Slack support
COS WP Woo
COS / SUPPORT
Still have questions?
Can't find what you're looking for? Our team is here to help.
FAQ
These will stop working: the WordPress mobile app, Jetpack, and some IFTTT integrations. The REST API will continue to work.
COS WP WOO / START
Ready to try XML-RPC Protection?
Close an outdated protocol and eliminate an entire class of attacks.
