Use this plugin to filter the access to your website redirecting the non-auth users to a payment page o something similar.

Site protection plugin for dev instances to avoid indexing by search engines. Doesn't allow access to the site without being logged-in.

With features as vulnerability scanner, core scanner, block suspicious requests, hide versions, disable pings, captcha login and more.