FERNLEAF SYSTEMS LIMITED

What FERNLEAF SYSTEMS LIMITED does

Fernleaf Systems Limited is a privately held software company incorporated in Northern Ireland, United Kingdom, that develops and distributes WordPress-focused security, management, and utility plugins. The company was established in 2013 and operates from Belfast, with no disclosed external venture funding or parent company. Its product portfolio centers on the WordPress ecosystem and is structured around three core lines: Shield Security (a WordPress security plugin providing firewall protection, login security, audit trails, traffic logging, and bot detection), iControlWP (a service for managing multiple WordPress installations from a centralized dashboard), and a portfolio of free WordPress plugins including Custom Content By Country for geolocation-based content delivery. A distinguishing technical component is ShieldNET, an opt-in distributed threat intelligence network that aggregates anonymized IP behavior across Shield Security installations to identify malicious actors, alongside the NotBot system, which uses temporary cookies and nonce values to differentiate human visitors from bots without tracking personal information or IP addresses.

The company's go-to-market is product-led and community-driven, primarily leveraging the WordPress.org plugin repository for free distribution of plugins under GNU GPLv2+ licensing to drive organic discovery and adoption. Premium offerings — chiefly Shield Security PRO — are sold through the company's own e-commerce storefronts (getshieldsecurity.com and icontrolwp.com) on auto-renewing per-site subscription licenses with annual or monthly billing cadence. Payment processing is handled exclusively by Stripe and PayPal; Fernleaf does not store cardholder data. The target customer base is horizontal: individual site owners, freelancers, and small-to-medium businesses operating WordPress websites who require affordable, self-serve security and management tooling without enterprise-grade complexity. Distribution is entirely direct-to-consumer with no resellers or channel partners, and marketing spend appears minimal, relying on WordPress.org search visibility and opted-in email newsletters for customer engagement.

Name

FERNLEAF SYSTEMS LIMITED

Legal name

Fernleaf Systems Limited

Website

https://fernleafsystems.com

Company type

Private

Founded year

2013

Operating status

Operating

Short description

Fernleaf Systems Limited is a Belfast, Northern Ireland-based software company that develops WordPress security plugins, multi-site management tools, and utility plugins for individual site owners and SMBs, distributing free plugins via WordPress.org and monetizing through per-site subscription licenses.

Ownership category

akta.pro rank

Headquarters

HQ city

Belfast

HQ country

United Kingdom

HQ region

Europe

Offices1 record

Markets served

GTM type

B2C

Offering type

Software

Cost components

Technology or R&D, Infrastructure, Operations, Marketing or Sales, Personnel

Revenue model

1. Shield Security PRO License Subscriptions: Annual and monthly subscription licenses for the Shield Security PRO plugin. Subscriptions automatically renew on the anniversary of the purchase date unless cancelled. License pricing is per-site (one WordPress installation per license).
2. Plugin Extensions and Add-ons: Additional extensions and add-ons for Shield Security and other plugins sold as separate licenses with subscription renewals.
3. Support and Updates: Support and updates are provided for one year after original purchase and continue as long as subscription remains active for automatically renewing subscriptions.
4. Free WordPress.org Plugins: Free plugins distributed through WordPress.org repository following GPLv2+ license. No data is sent outside the site, serving as product-led growth to drive premium conversions.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels4 records

Core offering

Fernleaf Systems develops and sells WordPress-focused software, including the Shield Security plugin (a comprehensive WordPress security plugin with firewall, login protection, bot detection, and distributed threat intelligence via ShieldNET) and iControlWP (a service for managing multiple WordPress installations from a centralized dashboard). The company also distributes additional utility plugins such as Custom Content By Country through the WordPress.org plugin repository under GNU GPLv2+ licensing.

Product overview

Fernleaf Systems Limited offers a collection of WordPress-related products and services unified under a single company. The core offerings include Shield Security (a WordPress security plugin), iControlWP (a WordPress management service), and various WordPress plugins including Custom Content By Country. These products share common policies, terms, and infrastructure but operate as distinct product lines within the company's portfolio.

Differentiator

Problem solved

Functional benefit

Brands

• iControlWP: A WordPress management service that allows users to manage multiple WordPress sites from a centralized dashboard.
• Shield Security
• WorpDrive

Products and services

• Shield Security

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Partnerships

Three partnerships are on record, tiered core.

• Stripe, Inc.coreTechnology or IntegrationStripe is used as the primary payment processor for processing credit/debit card transactions. Fernleaf Systems does not receive or store credit card information - all billing information is received, stored, and processed by Stripe. Stripe is committed to GDPR compliance.
• PayPalcoreTechnology or IntegrationPayPal is used as an alternative payment processor for customer transactions. All billing information is received, stored, and processed by PayPal. Fernleaf Systems does not receive credit card information.
• WordPress.orgcoreTechnology or IntegrationPlatform for distributing WordPress plugins. The company's plugins (Shield Security, Custom Content By Country) are hosted on WordPress.org repository and must follow repository rules and guidelines.

Recent moves6 records

Expansion highlights3 records

Broad incumbents

• Jetpack (Automattic): Jetpack is Automattic's broad WordPress plugin suite covering security, performance, backups, and analytics. It is offered by the operator of WordPress.com, giving it structural distribution advantages over Shield Security and iControlWP.
• WPMU DEV: WPMU DEV provides a broad WordPress membership suite including security, hosting, backups, and management plugins. It competes with both Shield Security and iControlWP as a multi-product WordPress vendor with subscription bundles.

Direct peers

• MainWP: MainWP provides a self-hosted dashboard to manage multiple WordPress sites from one location, mirroring iControlWP's core value proposition of centralized WordPress administration for site owners and agencies.
• All In One WP Security & Firewall: All In One WP Security & Firewall is a popular free WordPress security plugin on WordPress.org covering firewall, login, and database security. It directly competes with Shield Security's free tier for the same SMB security-conscious site owners.
• ManageWP: ManageWP (owned by GoDaddy) is a cloud-based WordPress site management dashboard with backups, updates, and security features. It is a primary competitor to iControlWP and increasingly competes with Shield Security's site-management adjacency.
• Wordfence (Defiant): Wordfence is the leading WordPress security plugin providing firewall, malware scanning, and login protection. It directly competes with Shield Security on the same WordPress.org distribution channel and premium freemium model.
• Sucuri: Sucuri (owned by GoDaddy) provides website security including a WordPress security plugin and cloud-based firewall. It overlaps with Shield Security on WordPress-focused protection and competes for the same site-owner segment.
• BlogVault: BlogVault (now under InMotion) provides WordPress backup, security, and site management as a subscription product. Its bundled backup-plus-security approach overlaps with both Shield Security and iControlWP use cases.
• Solid Security (formerly iThemes Security): Solid Security from SolidWP offers WordPress-focused brute-force protection, file-change detection, and two-factor authentication. It serves the same SMB WordPress administrator customer as Shield Security.

Emerging players

• Patchstack: Patchstack focuses on WordPress vulnerability intelligence, virtual patching, and managed security. It overlaps with Shield Security on the threat-protection layer but is more focused on vulnerability feeds and developer-facing tooling.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about FERNLEAF SYSTEMS LIMITED