Shared intelligence. Local decisions.
The Watchdog Threat Network adds a reputation layer built from high-confidence attack activity across connected Watchdog sites.
It is designed to help your site make better local decisions — not to hand control to the cloud. Network records are used as risk context, while automatic blocking stays conservative and optional.
Risk feed + signal sharing
Connected via license
NETWORK
Only high-confidence local events.
Recent active network records.
Your site remains in control.
Network reputation without blind cloud blocking.
Threat Network gives Watchdog a wider view of suspicious IPs and attack patterns while keeping the final decision inside each protected WordPress site.
Shares high-confidence signals
Connected sites can contribute attack signals when Watchdog sees strong evidence of malicious activity.
- Early WAF blocks
- Backdoor probes
- Known exploit attempts
Receives active feed records
Your site can receive recent risk records from the network and use them as extra context.
- Watch, suspicious and high-risk levels
- Recent active window
- Expiration-aware records
Keeps decisions local
Network intelligence influences local scoring; it does not automatically take over your site.
- Local risk scoring
- Optional confirmed auto-block
- Safer default behavior
Four simple steps behind the network layer.
The Threat Network is designed to be useful without being heavy. Sites register securely, submit only strong signals, receive recent feed records and make local decisions.
License connection
When a valid license activates, the site can register with the Threat Network and receive a site-bound token.
Signal outbox
High-confidence events can be queued locally and submitted later through the normal WordPress layer.
Risk feed
The site refreshes a token-secured feed of recent active network records and stores it locally.
Local scoring
Traffic Shield can use network context alongside local behavior before deciding what to do.
Threat signals, not customer data.
The network layer is designed around security signals. Its job is to share risk intelligence, not personal information or store data.
- IP/risk/event-style security context
- No checkout data sharing
- No customer account data sharing
- Token-secured site communication
Active records should not live forever.
Network records are meant to represent recent risk. Old signals expire from the active feed so the radar and scoring layer stay relevant.
- Recent active feed window
- Feed TTL behavior
- Local cache refresh
- History separated from live risk
Most network records score. Confirmed records can block.
Watch, suspicious and high-risk signals are best used as extra scoring context. Automatic blocking should stay reserved for confirmed attack intelligence.
- Risk scoring by default
- Confirmed auto-block optional
- Local settings still apply
- Trusted IPs respected
The network should be visible, not mysterious.
Watchdog shows feed status, connection status, signal results and network context so admins can see whether the layer is working.
- Connection diagnostics
- Feed refresh status
- Signal sharing status
- Threat Radar visualization
Your site should not have to learn every attacker alone.
Many WordPress attacks are repeated across sites. When one site sees a strong malicious pattern, the network can help other connected sites treat that activity with more caution.
Network reputation can raise or lower local risk decisions when the same IP or pattern appears elsewhere.
When a site is under pressure, adaptive refresh behavior can help keep the local feed more current.
High-confidence early blocks can become queued network signals without slowing the early request path.
License-connected registration and shared intelligence make the network useful across managed WordPress portfolios.
Threat Network makes other Watchdog layers smarter.
Add shared intelligence to your local WordPress security decisions.
Threat Network gives Watchdog Security Suite PRO an extra reputation layer while keeping your site in control of what gets watched, scored or blocked.