Vladimir Marusic

Maroon Horizon Smart Firewall is built for practical WordPress protection: block bad traffic, scan for malware, quarantine suspicious files, and reduce attack surface — without sending your site files off-server.
Advanced Security Check (Quick Scan) gives you an easy-to-understand Overall Security Rating, plus clear details and explanations for each check so you can quickly see what to improve and raise your security level.
This WordPress.org (FREE) build is fully functional for the FREE feature set and is designed to run locally for those features. Advanced capabilities are provided by a separate commercial PRO plugin (not included in this WordPress.org build).
Outbound network requests (if any) are disclosed under “External Services” and “Privacy”.
<h4>What you get in the FREE plugin (local-only)</h4>
<ul>
<li>Advanced Security Check (Quick Scan) with an Overall Security Rating and easy-to-follow explanations so you can improve your security level step by step.</li>
<li>Manual IP blocking and IP management.</li>
<li>Security patch toggles for common hardening actions.</li>
<li>Malware scanning of uploads and theme directories using local pattern detection (no external signatures).</li>
<li>Quarantine management (restore / delete quarantined files).</li>
<li>Quick file integrity checks (where supported in the FREE workflow).</li>
</ul>
<h4>Local-first design (privacy & control)</h4>
<ul>
<li>Malware scans run on your server.</li>
<li>Scanned file contents are not uploaded by the plugin.</li>
<li>External requests (if any) are limited and disclosed below.</li>
</ul>
<h4>Who it’s for</h4>
<ul>
<li>Site owners who want simple, practical protection without complex configuration.</li>
<li>Agencies and developers who need a clean hardening + scanning toolkit.</li>
<li>Anyone who wants a transparent FREE build, with an optional PRO upgrade path.</li>
</ul>
<h4>PRO features (separate commercial plugin, optional)</h4>
<ul>
<li>AI-Powered Threat Feed (encrypted subnet feed) and automatic sync.</li>
<li>Real-Time AI Threat Detection (AI model signatures).</li>
<li>AI-Powered Deep Scan and scheduled email reports.</li>
</ul>
<h4>Commercial PRO plugin</h4>
The PRO edition is a separate commercial plugin (not included in this WordPress.org build). 
Learn more: <a href="https://mh.ie/maroon-horizon-smart-firewall/" rel="nofollow ugc">https://mh.ie/maroon-horizon-smart-firewall/</a>
<h3>External Services</h3>
This plugin may perform outbound network requests in the following cases:
1) WordPress.org Core Checksums API (FREE: Core Integrity Scan) 
* Service provider: WordPress.org 
* Endpoint: https://api.wordpress.org/core/checksums/1.0/ 
* When: Only when you manually run the Core Integrity Scan from Maroon Horizon -> Scanner. 
* Data sent: WordPress version and locale via URL query parameters. Your server IP address is inherently shared as part of the HTTPS request. 
* Data received: Official JSON containing WordPress core file checksums, used to verify your local core files. No site files or content are uploaded. 
* Privacy: https://wordpress.org/about/privacy/
2) Freemius (optional: licensing, updates, opt-in telemetry) 
* Service provider: Freemius (freemius.com) 
* When: Only if you opt in to Freemius (for example, to manage licensing and receive updates). 
* Data sent: Technical information required for licensing and updates (and, if you opt in, diagnostic/usage metadata), as described by Freemius. 
* Data received: License status and update metadata needed to deliver plugin updates. 
* Terms: https://freemius.com/terms/ 
* Privacy: https://freemius.com/privacy/
3) Maroon Horizon service (mh.ie) (PRO only: encrypted threat-feed / AI signature bundles) 
* Service provider: Maroon Horizon Ltd – <a href="https://mh.ie" rel="nofollow ugc">https://mh.ie</a> 
* When: Only in the separate PRO plugin, when you use PRO features that require server-side data (e.g., Threat Feed sync / AI signature updates). 
* Data sent: Site URL, install ID, product/plan identifiers, license identifiers/keys, plugin/WP/PHP versions, plus standard HTTPS request metadata (including your server IP). 
* Data received: A JSON response containing metadata and a time-limited download URL, followed by encrypted bundles used by the PRO engine. No site files or content are uploaded. 
* Terms: https://mh.ie/terms 
* Privacy: https://mh.ie/privacy-policy
<h3>Privacy</h3>
Maroon Horizon Smart Firewall is designed to minimize data sharing.
<ul>
<li>Most FREE features run locally and do not transmit your site content.</li>
<li>Malware scanning runs locally on your server; scanned file contents are not uploaded by the plugin.</li>
<li>Any outbound requests (and the data exchanged) are disclosed in the “External Services” section above.</li>
<li>PRO-only services are not included in this WordPress.org build.</li>
</ul>

Maroon Horizon Smart Firewall – Malware Scanner & IP Blocking

Firewall, malware scan & IP blocking for WordPress, with Quick Scan Overall Security Rating, hardening, quarantine and integrity checks. PRO adds AI.

Seventh Sky

Live Visitor Monitor provides real-time tracking and visualization of visitors on your WordPress site. See where your visitors are coming from on an interactive world map.
Key Features:
<ul>
<li>Real-time World Map – Visualize visitor locations on an interactive map with live markers</li>
<li>Live Visitor List – See active visitors with IP addresses, countries, cities, and pages visited in a sidebar</li>
<li>IP Blocking – Instantly block unwanted IP addresses from accessing your site with a dedicated Blocklist page</li>
<li>Geolocation – Automatic country, region, and city detection using IP geolocation (API or local database)</li>
<li>Auto-refresh – Dashboard updates every 5 seconds to show the latest visitors</li>
<li>Statistics Overlay – Real-time stats box showing online and active visitor counts</li>
<li>Comprehensive Settings – Full control over tracking, geolocation, privacy, and data management</li>
<li>Privacy Compliant – Includes GDPR compliance notices and IP anonymization options</li>
</ul>
How It Works:
The plugin automatically tracks visitors. Visitor data (IP address, current page, referrer) is sent to WordPress via AJAX and stored in the database. Geolocation data can be fetched from the bundled DB-IP Lite MMDB database, external IP geolocation APIs, or browser-provided coordinates when visitors allow location access. Results are cached for 1 hour to reduce API calls.
<h3>Live Visitor Monitor Pro</h3>
Need deeper reporting, bot controls, and local database features? <a href="https://7thskysoftware.com/wordpress-plugins/live-visitor-monitor/" rel="nofollow ugc">Upgrade to Live Visitor Monitor Pro</a>:
Pro Features:
<ul>
<li>Bot Detection – Detect suspicious automated traffic and common crawler patterns</li>
<li>AI Bot Detection – Identify common AI crawler and model-training bot signatures</li>
<li>Cautious Auto-Blocking – Optionally auto-block high-confidence unwanted bots while allowing known helpful crawlers</li>
<li>Bundled Local MMDB Database – Use the heavier local geolocation database only when Pro is installed and licensed</li>
<li>Advanced Analytics Dashboard – KPI cards, traffic graphics, daily visit trends, top pages, top referrers, top countries, unique IPs, and active visitor reporting</li>
<li>Dashboard Widgets – Show quick analytics summaries on the WordPress dashboard and Live Monitor dashboard</li>
<li>Visitor Log – Search visitor history by IP, location, page, referrer, and user agent</li>
<li>Visitor Log Retention Controls – Configure how many logs to keep, how long to keep them, rows per page, cleanup, and delete-all maintenance</li>
</ul>
<h3>External Resources</h3>
This plugin uses <a href="Leaflet.js" rel="nofollow ugc">JavaScript Library</a> & the following external resources:
<a href="https://db-ip.com/db/download/ip-to-city-lite" rel="nofollow ugc">DB-IP City Lite</a>: This local MMDB database performs offline IP geolocation when available. The Lite database is licensed under Creative Commons Attribution 4.0 International License.
<a href="https://ipwho.is" rel="nofollow ugc">ipwho.is</a> and <a href="http://ip-api.com" rel="nofollow ugc">ip-api.com</a>: These services perform IP geolocation (country, region, city, coordinates) when geolocation is enabled and no local database result is available. Results are cached for one hour to reduce API calls.
<a href="https://nominatim.org/release-docs/latest/api/Reverse/" rel="nofollow ugc">OpenStreetMap Nominatim</a>: This service performs reverse geocoding for browser-provided coordinates when visitors allow geolocation. Results are cached for one hour.
<a href="https://www.openstreetmap.org" rel="nofollow ugc">OpenStreetMap</a>: This service provides world map tiles for the dashboard and is used only when the live map is enabled. It has no rate limits, sends no user data (only map tile requests), and can be avoided by disabling the live map in Settings.
Note: External geolocation requests can be avoided by using the bundled local MMDB database and disabling browser coordinate lookup. The plugin will still track visitors, but location accuracy depends on the available source.

Live Visitor Monitor – Real-Time Visitor Monitoring with Smart IP Blocking

Monitor live visitors on your WordPress site with a real-time world map, visitor list, and IP blocking capabilities.

Maroon Horizon Smart Firewall – Malware Scanner & IP Blocking vs Live Visitor Monitor – Real-Time Visitor Monitoring with Smart IP Blocking