Huzaifa Al Mesbah

<p>Access Defender is the most comprehensive WordPress security plugin for blocking VPNs, proxies, and suspicious traffic. Protect your website from malicious users, spam, fraud, and unauthorized access with our advanced multi-provider detection system.</p>
<p>NEW in Version 1.1.0: Revolutionary multi-provider system with automatic failover, real-time monitoring, and enhanced reliability!</p>
<h4>Quick Start Video Tutorial</h4>
<p>Watch our step-by-step installation and configuration guide:</p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/gWUFEuK1ZhA?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<h4>Key Features</h4>
<h4>Advanced VPN & Proxy Detection</h4>
<ul>
<li>99.9% Detection Accuracy – Industry-leading precision in identifying VPNs, proxies, and hosting providers</li>
<li>Multiple Detection Methods – Comprehensive IP analysis using advanced algorithms</li>
<li>Real-time Threat Assessment – Instant blocking of suspicious traffic</li>
</ul>
<h4>Multi-Provider System (NEW!)</h4>
<ul>
<li>4+ API Providers – Choose from free and premium services</li>
<li>Smart Auto-Rotation – Automatic switching between providers when limits are reached</li>
<li>Zero Downtime Protection – Seamless failover ensures continuous security</li>
<li>Load Balancing – Distribute requests across multiple providers for optimal performance</li>
</ul>
<h4>Real-time Monitoring & Analytics</h4>
<ul>
<li>Live Usage Statistics – Monitor API calls, success rates, and provider performance</li>
<li>Detailed Reporting – Track blocked attempts, provider efficiency, and security metrics</li>
<li>Performance Insights – Optimize your security setup with actionable data</li>
</ul>
<h4>Smart Configuration Options</h4>
<ul>
<li>Free Provider Auto-Rotation – Perfect for small to medium websites</li>
<li>Premium Provider Support – Enhanced reliability for high-traffic sites</li>
<li>Flexible API Management – Easy switching between providers</li>
<li>Custom Rate Limiting – Intelligent request management</li>
</ul>
<h4>User-Friendly Features</h4>
<ul>
<li>One-Click Setup – Get protected in minutes</li>
<li>Customizable Block Messages – Professional warning pages for blocked users</li>
<li>Admin Bypass – Administrators never get blocked</li>
<li>Bot-Friendly – Automatic detection and allowance of search engine crawlers</li>
</ul>
<h3>Why Choose Access Defender?</h3>
<h4>For Website Owners:</h4>
<ul>
<li>Protect against fraud, spam, and malicious activities</li>
<li>Reduce server load from suspicious traffic</li>
<li>Improve website performance and user experience</li>
<li>Maintain compliance with security standards</li>
</ul>
<h4>For E-commerce Sites:</h4>
<ul>
<li>Prevent fraudulent transactions and chargebacks</li>
<li>Block suspicious purchasing patterns</li>
<li>Protect customer data and payment information</li>
<li>Reduce cart abandonment from bot traffic</li>
</ul>
<h4>For Content Creators:</h4>
<ul>
<li>Protect premium content from unauthorized access</li>
<li>Prevent content scraping and theft</li>
<li>Ensure genuine user engagement metrics</li>
<li>Maintain advertising revenue integrity</li>
</ul>
<h3>Supported API Providers</h3>
<h4>Free Providers (Auto-Rotation Enabled):</h4>
<ul>
<li>IP-API.com (Free) – 45 requests/minute, reliable detection</li>
<li>Additional Free APIs – Coming soon for enhanced rotation</li>
</ul>
<h4>Premium Providers (Enhanced Performance):</h4>
<ul>
<li>ProxyCheck.io – Professional-grade detection with 99.9% accuracy</li>
<li>IPGeolocation.io – Advanced geolocation and VPN detection</li>
<li>IP-API.com (Pro) – Premium tier with higher limits (Coming Soon)</li>
</ul>
<h4>Smart Provider Management:</h4>
<ul>
<li>Sequential rotation through free providers</li>
<li>Automatic failover when rate limits are reached</li>
<li>Real-time provider health monitoring</li>
<li>Intelligent request distribution</li>
</ul>
<h3>Perfect For</h3>
<ul>
<li>E-commerce Websites – Prevent fraud and protect transactions</li>
<li>Membership Sites – Control access to premium content</li>
<li>Corporate Websites – Maintain security compliance</li>
<li>News & Media Sites – Protect against content scraping</li>
<li>SaaS Platforms – Prevent abuse and unauthorized access</li>
<li>Any WordPress Site – Universal security enhancement</li>
</ul>
<h3>Privacy & Security</h3>
<h4>Data Collection & Processing:</h4>
<p>Access Defender prioritizes your privacy while providing robust security. Here’s how we handle data:</p>
<h4>API Provider Data Sharing:</h4>
<p>When checking IP addresses, minimal data is shared with selected API providers for detection purposes only.</p>
<h4>Supported Providers & Their Policies:</h4>
<ul>
<li>IP-API.com – <a href="https://ip-api.com/docs/legal" rel="nofollow ugc">Privacy Policy</a></li>
<li>ProxyCheck.io – <a href="https://proxycheck.io/" rel="nofollow ugc">Privacy Policy</a></li>
<li>IPGeolocation.io – <a href="https://ipgeolocation.io/privacy-policy" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
<h4>Data Security Measures:</h4>
<ul>
<li>Encrypted API Communications – All provider requests use HTTPS</li>
<li>No Personal Data Storage – Only IP addresses are processed temporarily</li>
<li>Automatic Data Purging – Logs are cleared regularly</li>
<li>Secure Key Management – API keys are encrypted in database</li>
<li>WordPress Security Standards – Full compliance with WP security guidelines</li>
</ul>
<h4>Analytics & Telemetry:</h4>
<ul>
<li>Opt-in Only – Data collection requires your explicit consent</li>
<li>Anonymous Usage Data – Helps improve plugin performance</li>
<li>No Personal Information – Only technical usage statistics</li>
<li>Full Control – Disable anytime in settings</li>
</ul>
<h3>License & Legal</h3>
<h4>Open Source License</h4>
<p>Access Defender is licensed under GPLv2 or later. This ensures the plugin remains free and open-source while providing you with the flexibility to use, modify, and distribute it according to your needs.</p>
<h4>License Details:</h4>
<ul>
<li>Free to use for personal and commercial projects</li>
<li>Modify and customize according to your requirements</li>
<li>Redistribute under the same license terms</li>
<li>Access to complete source code</li>
<li>Community-driven development and support</li>
</ul>
<h4>Important Legal Information:</h4>
<p>This plugin provides security features but users should understand:</p>
<ul>
<li>No 100% Guarantee: No security measure is completely foolproof</li>
<li>Third-party Dependencies: Plugin functionality depends on external API services</li>
<li>Service Availability: API provider changes may affect functionality</li>
<li>User Responsibility: Proper configuration and monitoring are essential</li>
</ul>
<h4>Best Practices:</h4>
<ul>
<li>Regularly monitor plugin performance</li>
<li>Keep plugin updated to latest version</li>
<li>Test configuration on staging environment</li>
<li>Maintain backup security measures</li>
<li>Review API provider terms periodically</li>
</ul>
<p>By using Access Defender, you acknowledge these terms and agree to use the plugin responsibly as part of a comprehensive security strategy.</p>


Access Defender – Advanced VPN & Proxy Blocker

Amazing Features

Advanced VPN & proxy blocker for WordPress. 99.9% accuracy, multi-API rotation, real-time monitoring. Protect against fraud & spam.

Predax

<p><strong>Predax Fraud Guard for WooCommerce</strong> is an opt-in checkout-screening tool. After you enter a Predax API key and choose a protection mode, the plugin sends the customer’s IP to the Predax API during WooCommerce checkout so your store can decide whether to allow, tag, or block the order.</p>
<p>On a fresh install the plugin does nothing — no outbound requests are made until <strong>you</strong> complete setup and pick a protection mode. The default mode once configured is <strong>tag-only</strong> (no blocking), so you can see flagged orders in your dashboard before turning on anything that rejects a customer.</p>
<h4>How It Works</h4>
<ol>
<li><strong>You install and activate the plugin.</strong> Nothing happens — the plugin stays dormant until you finish setup.</li>
<li><strong>You enter a Predax API key</strong> (free account available at <a href="https://predax.io" rel="nofollow ugc">predax.io</a>).</li>
<li><strong>You pick a protection mode</strong> in Fraud Guard <span aria-hidden="true" class="wp-exclude-emoji">→</span> Settings (or in the 3-step setup wizard). Choices: Tag + note, Block high risk, or Block critical only.</li>
<li><strong>On each WooCommerce checkout after that point</strong>, the plugin sends the customer’s IP address to the Predax API, receives back a risk score and signal flags (is_vpn / is_proxy / is_tor / is_datacenter), and tags / holds / blocks the order according to your configuration. Results are cached for up to 5 minutes per IP.</li>
</ol>
<p>You can revoke the API key or switch the mode back to “Tag only” at any time.</p>
<h4>Risk Tagging</h4>
<p>Orders that reach the tag threshold (default: risk score 40) are tagged based on band:</p>
<ul>
<li><strong>Risk 40–69</strong> — tagged “Predax: Medium Risk” with an order note</li>
<li><strong>Risk 70–89</strong> — tagged “Predax: High Risk” with an order note</li>
<li><strong>Risk 90–100</strong> — tagged “Predax: Critical Risk” with an order note</li>
</ul>
<h4>Features</h4>
<ul>
<li><strong>Checkout screening</strong> (after you enable a protection mode) — every order is checked against Predax IP threat intelligence</li>
<li><strong>VPN / Proxy / Tor / Datacenter flags</strong> — detect anonymised connections at checkout</li>
<li><strong>Risk score threshold blocking</strong> — optionally block checkouts above a configurable risk score</li>
<li><strong>Automatic order hold</strong> (opt-in) — move high-risk orders to On Hold for manual review instead of processing them</li>
<li><strong>Order velocity rules</strong> (opt-in) — flag or block customers placing too many orders in a short window</li>
<li><strong>Billing country vs IP mismatch</strong> (opt-in) — flag or block orders where billing country differs from detected IP country</li>
<li><strong>Disposable email detection</strong> (opt-in) — reject checkouts using throwaway email providers (30+ supported)</li>
<li><strong>Refund / chargeback feedback</strong> (opt-in) — when a tagged order is refunded or cancelled, add its IP to your local deny list, and/or report the outcome to the Community Threat Network (when that opt-in is enabled)</li>
<li><strong>Order meta logging</strong> — stores risk score, threat flags, and detected country on every order for WooCommerce reporting</li>
<li><strong>Events Log</strong> — a dashboard page showing blocked attempts and flagged orders</li>
</ul>
<h4>Defaults</h4>
<p>All protection toggles default to <strong>off</strong> on a fresh install. The only thing the plugin writes to options on activation is a database version marker for the events-log table. You will need to explicitly enable any rule you want to apply.</p>
<h4>Free Tier</h4>
<p>Sign up at <a href="https://predax.io" rel="nofollow ugc">predax.io</a> for a free API key. No credit card required.</p>
<h3>Third Party Services</h3>
<p>This plugin connects to external services operated by Predax (https://predax.io) only when you have explicitly enabled a protection mode. By activating this plugin and entering an API key you agree to the <a href="https://predax.io/terms" rel="nofollow ugc">Predax Terms of Service</a> and <a href="https://predax.io/privacy" rel="nofollow ugc">Privacy Policy</a>.</p>
<p>You are responsible for ensuring your use of customer IP data at checkout complies with applicable privacy laws (including but not limited to GDPR, CCPA) and your own store’s privacy policy. This plugin does not assert PCI-DSS, GDPR, or CCPA compliance on your behalf.</p>
<h4>Predax IP Intelligence API</h4>
<p>Used to look up a risk score and classification signals for each checkout IP.</p>
<ul>
<li><strong>Data sent:</strong> the customer’s IP address at checkout; the browser-reported IANA timezone string (when available on the classic checkout form — used for the timezone-mismatch signal); your custom scoring weights (only if Custom Scoring is enabled).</li>
<li><strong>What is NOT sent:</strong> no billing/shipping names, street addresses, phone numbers, emails, product details, prices, or payment data. The billing-country-mismatch rule compares your order’s billing country against the API’s IP-country result locally — billing details never leave your site.</li>
<li><strong>When:</strong> during WooCommerce checkout validation, and only while a protection mode is saved in settings.</li>
<li><strong>Caching:</strong> classification results are cached in the site’s transients for 5 minutes per IP, so repeat checkouts from the same IP do not generate duplicate API calls.</li>
<li><strong>Endpoint:</strong> <code>POST https://predax.io/api/v1/check/ip</code></li>
<li><strong>Service URL:</strong> https://predax.io</li>
<li><strong>Terms of Service:</strong> https://predax.io/terms</li>
<li><strong>Privacy Policy:</strong> https://predax.io/privacy</li>
</ul>
<h4>Predax Community Threat Network (opt-in, off by default)</h4>
<p>The plugin can <strong>optionally</strong> send an anonymised telemetry signal — the IP address, its risk score and detection flags, its network (ASN) number and name, its country code, and the checkout outcome (allowed / monitored / blocked, or refund/chargeback feedback) — to the Predax Community Threat Network so all participating stores benefit from a shared feed. The Refund / Chargeback Feedback “Log” action reports through this same channel, so it requires this opt-in; its “Blacklist” action updates your local deny list regardless.</p>
<p>This feature is <strong>off by default</strong>. It is controlled by the <code>ipsentry_woo_community_enabled</code> option, which defaults to <code>'no'</code>, with a checkbox on the Advanced settings tab. The plugin will not send community-feedback telemetry unless you enable it. Customers’ personal data (names, emails, billing/shipping addresses, order contents) is never included in the telemetry payload.</p>
<ul>
<li><strong>Endpoint:</strong> <code>POST https://predax.io/api/v1/telemetry/event</code></li>
<li><strong>Service URL:</strong> https://predax.io</li>
<li><strong>Privacy Policy:</strong> https://predax.io/privacy</li>
</ul>
<h4>OAuth One-Click Connect (optional)</h4>
<p>Only triggered when an administrator clicks the <strong>Connect with Predax</strong> button in the setup wizard. Your browser is redirected to predax.io to authorise the connection, which returns an API key to your site.</p>
<ul>
<li><strong>Data sent:</strong> your WordPress site URL, site name, and a PKCE state/code-challenge pair. No customer data is involved.</li>
<li><strong>When:</strong> only during the click-to-connect OAuth flow.</li>
<li><strong>Endpoint:</strong> <code>POST https://predax.io/api/v1/oauth/token</code></li>
<li><strong>Service URL:</strong> https://predax.io</li>
<li><strong>Privacy Policy:</strong> https://predax.io/privacy</li>
</ul>
<h4>Cookies set by this plugin</h4>
<ul>
<li><strong><code>ipsentry_tz</code></strong> — set on WooCommerce checkout pages (only while an API key is configured) via <code>assets/js/ipsentry-woo-tz.js</code>. Stores the customer’s browser-reported IANA timezone (string, max 64 chars). Used server-side for the optional timezone-mismatch fraud rule. Expires after 24 hours (<code>max-age=86400</code>), <code>path=/</code>, <code>SameSite=Lax</code>, and marked <code>Secure</code> on HTTPS stores. The plugin reads this cookie only at checkout-validation time.</li>
</ul>
<p>The plugin does not set any advertising, analytics, or tracking cookies.</p>


Predax Fraud Guard for WooCommerce

Reduce WooCommerce fraud with Predax IP intelligence. After you enable a protection mode, each checkout IP is screened for VPN/proxy/Tor risk.

Access Defender – Advanced VPN & Proxy Blocker vs Predax Fraud Guard for WooCommerce