Quickstart and modes
The quickstart asks two things, the mode and, for the Community Network, the access key. It reads your plan from the key check and switches on a recommendation for that plan. Everything else is preconfigured and can be changed later on the Protection page.
The quickstart
It opens under ReportedIP Hive after activation and stays reachable from the Community page. The Community Network card is marked as recommended; Local Shield is always available and never blocked. The Community Network needs a checked key: click Check next to the field, and the result shows your plan and the domains in use. Switch protection on applies the recommendation, I will set everything up myself applies the same recommendation and opens the settings in expert mode, and an existing JSON export can be imported instead.
| Plan | What the recommendation switches on |
|---|---|
| Every plan | Brute-force protection at the Balanced level (5 failed sign-ins in 15 minutes, 24-hour block, community protection level 75 %), the firewall, bot verification (block in the Community Network, flag in Local Shield), disposable mail blocking on sign-ups and forms, the comment spam filter, Contact Form 7 protection, the basic security headers, the community check on forms (Community Network only), logs for 30 days with addresses anonymised after 7 days. |
| Professional, with the add-on | Tor exit node blocking, the HSTS header without preload, storefront 2FA for WooCommerce customers, the computation check on forms, logs for 90 days. 2FA mails and SMS go through the managed relay. |
| Business and up, with the add-on | The audit trail, protection for the further form plugins, logs for one year. |
Three switches sit below the recommendation and are written exactly as you leave them:
- 2FA for administrators, ticked: a 7-day grace period, and your own setup starts right after the quickstart.
- "Protected by ReportedIP" badge in the footer, not ticked. It stays off until you tick it.
- Alert mails to the site admin address on critical events, ticked.
Running the quickstart again applies the recommendation for your plan and the three switches; every other setting stays as it is. A later plan upgrade switches on what the new plan recommends for every setting you have not changed yourself, and a banner lists what changed.
Local Shield and Community Network
You can switch between the two at any time on the Community page. Local data is kept either way.
| Local Shield | Community Network | |
|---|---|---|
| Sixteen sensors, firewall, block ladder | Yes | Yes |
| 2FA with app, e-mail, passkey or security key | Yes | Yes |
| Reputation check of attacking addresses at sign-in and on forms | No | Yes |
| Blocked addresses shared with the community | No | Yes, in batches by WP-Cron |
| Signed firewall rulesets from reportedip.com | No, the bundled baseline | Yes, every six hours |
| Features of the Pro add-on that need the service (relay, Tor list, groups, fleet) | No | Yes |
| Account and key | Not needed | Free account and Community Access Key |
| Requests to reportedip.com | None, even with a key stored | Listed on Privacy and external services |
The Community Access Key
Create a free account on reportedip.com and copy the key from API Keys in your account. Enter it in the quickstart or on the Community page, Settings tab, in the connection card; Test Connection checks it again later. Every request carries the key and the address of the site, which is how the service counts the domains of your plan. On a network the key is stored once for all sites.
| Plan | Checks per day | Reports per day | Domains |
|---|---|---|---|
| Free | 1,000 | 50 | 1 |
| Contributor | 5,000 | 200 | 1 |
| Professional | 25,000 | 1,000 | 3 |
| Business | 100,000 | 5,000 | 15 |
| Enterprise | Unlimited | Unlimited | Unlimited |
Lookups are cached (positive results 24 hours, negative 2 hours by default), so a quiet site uses a fraction of its quota. When the quota runs out, the site keeps its local protection and the reputation check fails open. Authentication explains roles and limits on the API side.
After the quickstart
The dashboard opens with a status line: green with the setup date, yellow without a key or with an exhausted daily quota. Below it, next-step cards suggest what is still open, such as Hide Login, Extended Protection, a detected form plugin that is not protected yet or your own second factor; each card has an action or a link and can be put aside for seven days. One row per protection area shows its short status and leads to the setting. All settings are on the Protection page, the expert switch sits in the page header.
Last updated: · Maintained by the ReportedIP team