Creators & Serial Entrepreneurs

Main Shield — Web Application Firewall

Protects every app on your platform — WordPress, CRM, analytics, all of them.
Stops SQL injection, XSS, brute force, known vulnerabilities. You don't need to be a security expert.

How it works
Schedule a demo
Main Shield protects every app on your Ecomposable platform — automatically.

Every app

Protected automatically on your platform

Zero config

On by default. No setup required.

Always updated

Threat rules updated daily by our team

Main Shield is our security commitment

We built Main Shield because we refuse to let our clients manage their own WAF rules. Every platform we manage gets enterprise-grade protection automatically. It is our service, our responsibility.

What You Get

Features: Standard vs Advanced

Standard Protection

Included. On by default. What most teams need.

  • OWASP Top 10 protection

  • SQL injection blocking

  • XSS filtering

  • Brute force protection (login attempts, API abuse)

  • Rate limiting

  • Bot detection

  • DDoS mitigation (basic)

  • Geo-blocking (optional)

  • Real-time threat logging

Advanced Features

For teams with specialized requirements.

  • Everything in standard

  • Custom rules per app

  • IP allow/deny lists

  • WAF logs export (SIEM integration)

  • PCI-DSS compliance mode

  • Priority threat response

See It in Action

Main Shield — 3-Minute Overview

See how Main Shield blocks real-world attacks before they reach your apps.

Our Rationale

Why We Built Main Shield

We see clients get hacked because they didn't set up their WAF properly. We decided to fix that.

Shared protection

Every app on your platform gets the same enterprise-grade firewall. WordPress, Mattermost, Baserow — all protected by the same shield.

No security expertise required

You're a creator, not a cybersecurity engineer. Main Shield runs silently in front of your apps, blocking threats you don't even know about.

Always updated

New vulnerabilities emerge daily. Our team updates rules and signatures automatically. You don't manage anything.

Transparent Pricing

What You Pay

Protection is not optional. That is why it is included.

Main Shield on Your Ecomposable Platform

Standard protection

OWASP Top 10, SQL injection, XSS, brute force, rate limiting, bot detection, basic DDoS

Included — In your platform management fee — no separate charge

Advanced custom rules

Per-app rules, SIEM export, PCI-DSS mode, priority response

Retainer-based — Billed as part of your management retainer

Getting Started

How Main Shield Works

There is nothing to install. It is on when your platform goes live.

1. It is on by default

When your platform is provisioned, Main Shield activates automatically in front of every app. No configuration needed.

2. It blocks threats silently

SQL injection attempts, XSS attacks, brute force login tries — blocked before they reach your applications. You see nothing. That is the point.

3. You can review logs

From your platform dashboard, you can see what Main Shield blocked. This helps you understand threats targeting your apps — even if you're not a security engineer.

4. Advanced features on request

If you need custom rules, SIEM integration, or PCI-DSS mode, tell us. We configure it for you as part of your management retainer.

How This Works

Main Shield Is Our Service

Main Shield is not an open source project. It is not a tool you contribute to or sponsor. It is a security layer we built, we manage, and you benefit from automatically.

How to contribute ?

Donation

Direct financial support for the project. The simplest way to say "this tool matters to us" and fund ongoing development.

  • Funds core development and security

  • Supports community initiatives

  • One-time or recurring options

Bug reports, documentation

Bug reports, documentation, patches, translations. Every contribution helps, from small fixes to major features.

  • Submit pull requests on GitHub

  • Report bugs or request features

  • Help translate or document

AI & Compute

We're exploring new ways to support open source: AI-assisted contributions, shared compute for CI/testing, and programmatic bug triage. Not ready yet — coming soon.

If you're curious, ask us about the vision.

Ecomposable depends on WordPress too. We run it on our own platform. We support the ecosystem because it supports us. No pressure — just transparency.
We're also building features that let your platform contribute back automatically: AI agents scanning for bugs and submitting fixes, idle compute cycles powering CI/testing for open source projects, fully opt-in and transparent. Details in our AI Contribution Vision.

FAQ

Common Questions

Do I need to configure Main Shield?

No. It is configured and managed by our team. Standard protection is on by default and works out of the box for every app on your platform.

Will Main Shield break my apps?

No. It is tuned to protect without interfering with legitimate traffic. If something is blocked incorrectly, we fix the rules immediately.

Can I add custom rules?

Yes. If you have specific security requirements — IP whitelists, custom rate limits, app-specific rules — we build them for you as part of your advanced retainer.

How often are threat rules updated?

Daily. Our security team monitors emerging threats and updates Main Shield rules automatically. You never have to think about it.

store
Find more tools

Marketplace

Find Open source tools and production-ready Packaged Business Capabilities from Ecomposable and third-party developers. Or sell your own tools. An open marketplace — you're never locked in.

group
Experts near you or remotly

Certified Partners Network

Specialized help near you or remotely. Developers, architects, consultants you can rely on. Like the AWS partner network, but for Ecomposable. Open. Regional. Not locked into us.

Ready for Automatic Protection?

The Shield comes on every Ecomposable platform. Or see the full managed tools catalog.

Founding cohort: Early access open. Limited spots. WordPress migration included.

Explore The Toolkit
Schedule a demo

Learn, Connect, Build

We do not just provide infrastructure. We provide the playbook, the community.

The tools to build your platform and run your business.

Coming Soon !

AI SaaS Playbook.com

Learn

The hard truths about Creator SaaS. Escaping the Apple Tax, the Vibecode Trap, and building infrastructure that lasts.

AI SaaS Builders.com

Connect

Where builders hang out. Architecture reviews, office hours, peer validation, and agency lead-gen.

SaaS Toolkits.com

Build

Deployable solutions for real problems. Global Payments Kit, Social Safety Kit, White-Label SaaS Starter.