lunexiait

Lunexia .htaccess Shield is a comprehensive security plugin that helps harden your website by automatically applying proven .htaccess security rules. The latest release includes a modern WordPress 7.0-ready admin interface, a polished dashboard, and premium workflow improvements for Firewall and Malware Scan access.
Key Features:
<ul>
<li>Redesigned Security Dashboard: Four separate protection score widgets for rule coverage, module coverage, malware scanning, and threat monitoring.</li>
<li>Premium Admin Tabs: Firewall and Malware Scan tabs now display premium badges like Advanced Settings.</li>
<li>Plugin Layout Centering: Admin screens are centered at 80% width for a clean, modern WordPress 7.0 experience.</li>
<li>Enterprise Protection Status Cards: View active/inactive protection modules such as bot protection, rate limiting, live traffic monitoring, and quarantine system status.</li>
<li>Security Statistics Panel: Track successful logins, failed logins, blocked IPs, pending approvals, and firewall protection status in one place.</li>
<li>Security Intelligence Dashboard: View malware detections, blocked attacks, IP reputation, and threat intelligence in a single admin experience.</li>
<li>One-Click Security Rules: Enable or disable security rules with a simple toggle interface.</li>
<li>Security Score: Visual protection score meter for instant status awareness.</li>
<li>Automatic .htaccess Management: Safely apply rules without manual editing.</li>
<li>Backup & Restore: Create backups before changes and restore if needed.</li>
<li>Admin Approval Workflow: Require admin approval for new Administrator/Editor accounts before login.</li>
<li>OTP Login Protection: Add one-time password verification for selected user roles.</li>
<li>Backend Access Protection: Restrict access to <code>wp-admin</code> and <code>wp-login.php</code> for blocked IPs.</li>
<li>Feature Preview: Preview recommended premium hardening features before enabling them.</li>
<li>System Status: Monitor your server’s security readiness.</li>
<li>Malware Scanner and Quarantine Manager: Premium scanner with quarantine controls, findings refresh, and scan actions.</li>
<li>WordPress 7.0 Compatible: Designed to look great in the new Modern admin theme.</li>
</ul>
Security Rules Included:
<ul>
<li>Disable directory browsing</li>
<li>Protect wp-config.php and .htaccess files</li>
<li>Block access to sensitive files</li>
<li>Disable XML-RPC for improved security</li>
<li>Prevent PHP execution in uploads folder</li>
<li>Malicious query string protection</li>
<li>Security headers (XSS, CSRF, HSTS, etc.)</li>
</ul>
Safe & Reliable: 
* Uses core functions for .htaccess manipulation 
* Creates automatic backups before changes 
* Checks file permissions before applying rules 
* Non-destructive – rules are wrapped in markers for easy removal
<h3>External Services</h3>
This plugin connects to external services as follows:
Google Sheets API Service 
This plugin uses the Google Sheets API (via Google Apps Script) to validate license keys when users activate a license. This is an optional feature and is only used when a user voluntarily attempts to activate a license key.
<ul>
<li>Purpose: Validates license key authenticity and domain binding</li>
<li>When it’s used: Only when users click “Activate License” in the plugin settings</li>
<li>What data is sent: License key and website domain name</li>
<li>Service provider: Google (Google Sheets / Google Apps Script)</li>
<li>Terms of Service: https://policies.google.com/terms</li>
<li>Privacy Policy: https://policies.google.com/privacy</li>
<li>Data retention: License validation data is stored only on the user’s Google Sheet, which they control</li>
</ul>
<h3>Support</h3>
For support, please visit the plugin forum or check the documentation.
<h3>License</h3>
This plugin is licensed under the GPLv2 or later.
<h3>Credits</h3>
Developed with security best practices in mind.

Lunexia .htaccess Shield

Professional website security hardening with IP blocking system by automatically applying common .htaccess security rules safely.

Vladimir Marusic

Maroon Horizon Smart Firewall is built for practical WordPress protection: block bad traffic, scan for malware, quarantine suspicious files, and reduce attack surface — without sending your site files off-server.
Advanced Security Check (Quick Scan) gives you an easy-to-understand Overall Security Rating, plus clear details and explanations for each check so you can quickly see what to improve and raise your security level.
This WordPress.org (FREE) build is fully functional for the FREE feature set and is designed to run locally for those features. Advanced capabilities are provided by a separate commercial PRO plugin (not included in this WordPress.org build).
Outbound network requests (if any) are disclosed under “External Services” and “Privacy”.
<h4>What you get in the FREE plugin (local-only)</h4>
<ul>
<li>Advanced Security Check (Quick Scan) with an Overall Security Rating and easy-to-follow explanations so you can improve your security level step by step.</li>
<li>Manual IP blocking and IP management.</li>
<li>Security patch toggles for common hardening actions.</li>
<li>Malware scanning of uploads and theme directories using local pattern detection (no external signatures).</li>
<li>Quarantine management (restore / delete quarantined files).</li>
<li>Quick file integrity checks (where supported in the FREE workflow).</li>
</ul>
<h4>Local-first design (privacy & control)</h4>
<ul>
<li>Malware scans run on your server.</li>
<li>Scanned file contents are not uploaded by the plugin.</li>
<li>External requests (if any) are limited and disclosed below.</li>
</ul>
<h4>Who it’s for</h4>
<ul>
<li>Site owners who want simple, practical protection without complex configuration.</li>
<li>Agencies and developers who need a clean hardening + scanning toolkit.</li>
<li>Anyone who wants a transparent FREE build, with an optional PRO upgrade path.</li>
</ul>
<h4>PRO features (separate commercial plugin, optional)</h4>
<ul>
<li>AI-Powered Threat Feed (encrypted subnet feed) and automatic sync.</li>
<li>Real-Time AI Threat Detection (AI model signatures).</li>
<li>AI-Powered Deep Scan and scheduled email reports.</li>
</ul>
<h4>Commercial PRO plugin</h4>
The PRO edition is a separate commercial plugin (not included in this WordPress.org build). 
Learn more: <a href="https://mh.ie/maroon-horizon-smart-firewall/" rel="nofollow ugc">https://mh.ie/maroon-horizon-smart-firewall/</a>
<h3>External Services</h3>
This plugin may perform outbound network requests in the following cases:
1) WordPress.org Core Checksums API (FREE: Core Integrity Scan) 
* Service provider: WordPress.org 
* Endpoint: https://api.wordpress.org/core/checksums/1.0/ 
* When: Only when you manually run the Core Integrity Scan from Maroon Horizon -> Scanner. 
* Data sent: WordPress version and locale via URL query parameters. Your server IP address is inherently shared as part of the HTTPS request. 
* Data received: Official JSON containing WordPress core file checksums, used to verify your local core files. No site files or content are uploaded. 
* Privacy: https://wordpress.org/about/privacy/
2) Freemius (optional: licensing, updates, opt-in telemetry) 
* Service provider: Freemius (freemius.com) 
* When: Only if you opt in to Freemius (for example, to manage licensing and receive updates). 
* Data sent: Technical information required for licensing and updates (and, if you opt in, diagnostic/usage metadata), as described by Freemius. 
* Data received: License status and update metadata needed to deliver plugin updates. 
* Terms: https://freemius.com/terms/ 
* Privacy: https://freemius.com/privacy/
3) Maroon Horizon service (mh.ie) (PRO only: encrypted threat-feed / AI signature bundles) 
* Service provider: Maroon Horizon Ltd – <a href="https://mh.ie" rel="nofollow ugc">https://mh.ie</a> 
* When: Only in the separate PRO plugin, when you use PRO features that require server-side data (e.g., Threat Feed sync / AI signature updates). 
* Data sent: Site URL, install ID, product/plan identifiers, license identifiers/keys, plugin/WP/PHP versions, plus standard HTTPS request metadata (including your server IP). 
* Data received: A JSON response containing metadata and a time-limited download URL, followed by encrypted bundles used by the PRO engine. No site files or content are uploaded. 
* Terms: https://mh.ie/terms 
* Privacy: https://mh.ie/privacy-policy
<h3>Privacy</h3>
Maroon Horizon Smart Firewall is designed to minimize data sharing.
<ul>
<li>Most FREE features run locally and do not transmit your site content.</li>
<li>Malware scanning runs locally on your server; scanned file contents are not uploaded by the plugin.</li>
<li>Any outbound requests (and the data exchanged) are disclosed in the “External Services” section above.</li>
<li>PRO-only services are not included in this WordPress.org build.</li>
</ul>

Maroon Horizon Smart Firewall – Malware Scanner & IP Blocking

Firewall, malware scan & IP blocking for WordPress, with Quick Scan Overall Security Rating, hardening, quarantine and integrity checks. PRO adds AI.

Lunexia .htaccess Shield vs Maroon Horizon Smart Firewall – Malware Scanner & IP Blocking