Bedrock Shield is the WordPress safety net: install the plugin, connect once, leave defaults on. You never change DNS. For most sites, Basic (or Pro) alone is enough.

It does not replace updates or strong hosting. We copy your files and database and lock the copy. Pro and Shield Care copy every day. Basic copies once a week. A site not linked to the Hub copies every day on this computer. It also cannot absorb a volumetric flood that never reaches PHP. That is what an edge CDN is for, and that layer requires a nameserver or CNAME change. Skip it unless you are comfortable changing DNS later.

Ask your host about ModSecurity or Imunify if you want a host-level WAF with no DNS change. We do not partner with a host. No DNS change or protect this site.