Vladimir Marusic

<p>Maroon Horizon Smart Firewall is built for practical WordPress protection: block bad traffic, scan for malware, quarantine suspicious files, and reduce attack surface — without sending your site files off-server.</p>
<p>Advanced Security Check (Quick Scan) gives you an easy-to-understand Overall Security Rating, plus clear details and explanations for each check so you can quickly see what to improve and raise your security level.</p>
<p>This WordPress.org (FREE) build is fully functional for the FREE feature set and is designed to run locally for those features. Advanced capabilities are provided by a separate commercial PRO plugin (not included in this WordPress.org build).</p>
<p>Outbound network requests (if any) are disclosed under “External Services” and “Privacy”.</p>
<h4>What you get in the FREE plugin (local-only)</h4>
<ul>
<li>Advanced Security Check (Quick Scan) with an Overall Security Rating and easy-to-follow explanations so you can improve your security level step by step.</li>
<li>Manual IP blocking and IP management.</li>
<li>Security patch toggles for common hardening actions.</li>
<li>Malware scanning of uploads and theme directories using local pattern detection (no external signatures).</li>
<li>Quarantine management (restore / delete quarantined files).</li>
<li>Quick file integrity checks (where supported in the FREE workflow).</li>
</ul>
<h4>Local-first design (privacy & control)</h4>
<ul>
<li>Malware scans run on your server.</li>
<li>Scanned file contents are not uploaded by the plugin.</li>
<li>External requests (if any) are limited and disclosed below.</li>
</ul>
<h4>Who it’s for</h4>
<ul>
<li>Site owners who want simple, practical protection without complex configuration.</li>
<li>Agencies and developers who need a clean hardening + scanning toolkit.</li>
<li>Anyone who wants a transparent FREE build, with an optional PRO upgrade path.</li>
</ul>
<h4>PRO features (separate commercial plugin, optional)</h4>
<ul>
<li>AI-Powered Threat Feed (encrypted subnet feed) and automatic sync.</li>
<li>Real-Time AI Threat Detection (AI model signatures).</li>
<li>AI-Powered Deep Scan and scheduled email reports.</li>
</ul>
<h4>Commercial PRO plugin</h4>
<p>The PRO edition is a separate commercial plugin (not included in this WordPress.org build).<br />
Learn more: <a href="https://mh.ie/maroon-horizon-smart-firewall/" rel="nofollow ugc">https://mh.ie/maroon-horizon-smart-firewall/</a></p>
<h3>External Services</h3>
<p>This plugin may perform outbound network requests in the following cases:</p>
<p>1) WordPress.org Core Checksums API (FREE: Core Integrity Scan)<br />
* Service provider: WordPress.org<br />
* Endpoint: https://api.wordpress.org/core/checksums/1.0/<br />
* When: Only when you manually run the Core Integrity Scan from Maroon Horizon -> Scanner.<br />
* Data sent: WordPress version and locale via URL query parameters. Your server IP address is inherently shared as part of the HTTPS request.<br />
* Data received: Official JSON containing WordPress core file checksums, used to verify your local core files. No site files or content are uploaded.<br />
* Privacy: https://wordpress.org/about/privacy/</p>
<p>2) Freemius (optional: licensing, updates, opt-in telemetry)<br />
* Service provider: Freemius (freemius.com)<br />
* When: Only if you opt in to Freemius (for example, to manage licensing and receive updates).<br />
* Data sent: Technical information required for licensing and updates (and, if you opt in, diagnostic/usage metadata), as described by Freemius.<br />
* Data received: License status and update metadata needed to deliver plugin updates.<br />
* Terms: https://freemius.com/terms/<br />
* Privacy: https://freemius.com/privacy/</p>
<p>3) Maroon Horizon service (mh.ie) (PRO only: encrypted threat-feed / AI signature bundles)<br />
* Service provider: Maroon Horizon Ltd – <a href="https://mh.ie" rel="nofollow ugc">https://mh.ie</a><br />
* When: Only in the separate PRO plugin, when you use PRO features that require server-side data (e.g., Threat Feed sync / AI signature updates).<br />
* Data sent: Site URL, install ID, product/plan identifiers, license identifiers/keys, plugin/WP/PHP versions, plus standard HTTPS request metadata (including your server IP).<br />
* Data received: A JSON response containing metadata and a time-limited download URL, followed by encrypted bundles used by the PRO engine. No site files or content are uploaded.<br />
* Terms: https://mh.ie/terms<br />
* Privacy: https://mh.ie/privacy-policy</p>
<h3>Privacy</h3>
<p>Maroon Horizon Smart Firewall is designed to minimize data sharing.</p>
<ul>
<li>Most FREE features run locally and do not transmit your site content.</li>
<li>Malware scanning runs locally on your server; scanned file contents are not uploaded by the plugin.</li>
<li>Any outbound requests (and the data exchanged) are disclosed in the “External Services” section above.</li>
<li>PRO-only services are not included in this WordPress.org build.</li>
</ul>


Maroon Horizon Smart Firewall – Malware Scanner & IP Blocking

Firewall, malware scan & IP blocking for WordPress, with Quick Scan Overall Security Rating, hardening, quarantine and integrity checks. PRO adds AI.

SyntaxCloud

<p>sHub-Logは、WordPressサイトのセキュリティを強化するためのプラグインです。<br />
主な機能：</p>
<ul>
<li>ログイン試行の記録</li>
<li>設定ファイル探索、裏口探索、プラグイン脆弱性スキャン、管理画面ハッキング、スパムなどのカテゴリ別検知</li>
<li>不正なクエリパラメータ、大量リクエスト、REST API悪用試行のオプション検知</li>
<li>直近7日間のアタック統計サマリーと詳細ログ表示</li>
<li>直近24時間のアタック推移グラフ（1時間 / 2時間 / 3時間間隔）</li>
<li>CSVエクスポートとAJAXカテゴリフィルタリング</li>
<li>アタックログ保存期間（30日 / 90日 / 無期限）の選択</li>
<li>WP-Cronによる古いアタックログの自動削除</li>
<li>アタック統計・一覧の表示期間（7日 / 30日 / 全期間）の選択</li>
<li>アタック急上昇時のメールアラートと通知クールダウン</li>
<li>syn-c.jp 上のアラート定義・メールテンプレート取得に対応（取得失敗時は内蔵デフォルトで動作）</li>
<li>指定回数以上の失敗でIPアドレスをブロック</li>
<li>ブロック時間の設定</li>
<li>カスタムリダイレクトURLの設定</li>
<li>管理画面でのログ確認とIP管理</li>
<li>大量リクエストのしきい値・計測窓のカスタマイズ</li>
<li>攻撃特徴を伴うリクエストのみを計測する誤検知低減モード</li>
<li>ログイン済みユーザー・正規クローラー（FCrDNS検証）のレート計測除外</li>
<li>不審な404多発（巡回スキャン）の検知</li>
<li>IPホワイトリスト（検知・ブロック対象外）</li>
<li>信頼するプロキシ経由時の X-Forwarded-For / CF-Connecting-IP からの実IP取得</li>
<li>URLの多重デコード・パス正規化による難読化リクエストの検知精度向上</li>
<li>IPごとにリスクスコアを時間窓で累積し、記録・ブロックを判定するスコアリング（既定OFF）</li>
<li>配点・しきい値は管理画面で調整可能。syn-c.jp 上の署名付き配点定義の取得にも対応</li>
</ul>


sHub-Log

WordPressの不正ログイン試行、不審な404、不正リクエストを記録し、一定回数でIPをブロックするセキュリティプラグイン。

Maroon Horizon Smart Firewall – Malware Scanner & IP Blocking vs sHub-Log