obsyde

<p>Obsyde Aegis protects your WordPress site with enterprise-grade security monitoring. The plugin intercepts every request, checks it against known attack signatures, and blocks threats in real time. Local protection runs unconditionally — no account required. When connected to the optional Obsyde dashboard service, detected events are additionally reported for centralised monitoring, geo maps, and AI-powered analysis.</p>
<p><strong>Key Features:</strong></p>
<ul>
<li><strong>Real-time local threat detection</strong> — SQL injection, XSS, path traversal, remote code execution, and 50+ attack patterns. Works without any account.</li>
<li><strong>WordPress-specific protection</strong> — wp-login.php brute force detection, xmlrpc.php abuse blocking, REST API user enumeration prevention. Works without any account.</li>
<li><strong>Automated IP blocking</strong> — Local pattern-match blocks and (optionally) a curated blocklist synced from the Obsyde platform</li>
<li><strong>Community threat intelligence</strong> — 44,000+ known malicious IPs from 8 free intelligence sources (via the optional Obsyde sync), updated every 6 hours</li>
<li><strong>Centralised dashboard (optional)</strong> — When an Obsyde API key is configured, view all security data on obsyde.com with real-time alerts, geo maps, and AI analysis</li>
<li><strong>Zero performance impact</strong> — Pattern matching runs in under 5ms; no external API calls during page load (reporting is batched via WP-Cron)</li>
<li><strong>Cloudflare compatible</strong> — Proper IP detection behind Cloudflare, nginx, and other reverse proxies</li>
</ul>
<p><strong>How It Works:</strong></p>
<ol>
<li>Install and activate the plugin — local firewall protection starts immediately</li>
<li>The plugin intercepts every HTTP request before WordPress processes it</li>
<li>Requests are checked against local attack signatures and (if an API key is configured) the synced Obsyde blocklist</li>
<li>Threats are blocked with a 403 response</li>
<li>If an Obsyde API key is configured, events are batched and sent to your dashboard every 60 seconds; the Obsyde blocklist syncs every 5 minutes. Without a key, local protection still runs — events are just not reported externally.</li>
</ol>
<p><strong>Protection Levels:</strong></p>
<ul>
<li><strong>Low</strong> — Block known attacks only</li>
<li><strong>Medium</strong> — Block attacks and suspicious patterns (recommended)</li>
<li><strong>High</strong> — Aggressive blocking including empty User-Agent rejection</li>
<li><strong>Paranoid</strong> — Maximum protection (may cause false positives)</li>
</ul>
<h3>External services</h3>
<p>This plugin provides local firewall protection that runs entirely in your WordPress installation and does not require any external service.</p>
<p>When you choose to connect the plugin to the optional Obsyde dashboard service by entering an API key, the plugin communicates with the Obsyde API at https://obsyde.com/api/v1/plugin/ for centralised threat monitoring. This service is provided by Obsyde Ltd.</p>
<p><strong>What data is sent, when, and why:</strong></p>
<ul>
<li><strong>Threat events</strong> — When the local firewall blocks a request, an event containing the attacker’s IP address, a UTC timestamp, the attack type (e.g. “sqli_probe”), severity, HTTP method, request path (truncated to 2048 characters), and User-Agent string (truncated to 512 characters) is queued. Once per minute (via WP-Cron) any queued events are POSTed in a single batch to <code>/plugin/events</code>. This lets the Obsyde dashboard display, analyse, and correlate threats across all of your sites.</li>
<li><strong>Blocklist sync</strong> — Once every 5 minutes (via WP-Cron) the plugin sends a GET request to <code>/plugin/blocklist</code> to retrieve the current curated list of malicious IPs. No site data is sent in this request; only the site API key identifies the request.</li>
<li><strong>Heartbeat</strong> — Once every 5 minutes (via WP-Cron) the plugin sends a POST request to <code>/plugin/heartbeat</code> containing your WordPress version, PHP version, and plugin version so the Obsyde dashboard can show whether the site is reachable and up to date.</li>
<li><strong>Connection test</strong> — When you click the “Test Connection” button in the settings, a single GET request is sent to <code>/plugin/config</code> to verify your API key.</li>
</ul>
<p><strong>No data is sent to any external service until you configure an API key.</strong> If you remove the API key or deactivate the plugin, no further external communication occurs.</p>
<p>This service’s terms and privacy policy:</p>
<ul>
<li>Terms of service: https://obsyde.com/terms</li>
<li>Privacy policy: https://obsyde.com/privacy</li>
</ul>


Obsyde Aegis

Real-time threat detection, automated IP blocking, and AI-powered security analysis.

SECURAS TECHNOLOGIES

<p>Experience effective web security with CyberShield, the advanced Web Application Firewall (WAF) from Securas Technologies, designed to actively protect your digital assets from emerging threats and cyberattacks.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Comprehensive Dashboard</strong>: Easily navigate through the firewall features. CyberShield gathers all the data from your security features on one dashboard, enabling a quick check on your website’s security posture.</li>
<li><strong>Advanced Statistics</strong>: Measure and improve your cybersecurity performance with comprehensive statistics.</li>
<li><strong>PHP Configuration Audit</strong>: Enhances your PHP settings including error reporting, file permissions, session management, and encryption to prevent common vulnerabilities.</li>
<li><strong>At-risk Visitor Identification</strong>: Prevent cyberattacks with our advanced detection and prevention system that identifies at-risk visitors.</li>
<li><strong>SQL Injection Protection</strong>: Our AI-powered detection scans and sanitizes every query that reaches your database to prevent SQL injection attacks.</li>
<li><strong>Bot Detection</strong>: Conserve bandwidth and resources by filtering out harmful or irrelevant bots, including scrapers, spammers, and crawlers.</li>
<li><strong>IP Auto-Ban</strong>: Automatically ban IPs that exhibit suspicious activity, helping to keep your website secure with minimal downtime.</li>
<li><strong>Exposed Services Monitoring</strong>: Identify and report any network services that are publicly accessible and may be vulnerable to exploitation.</li>
<li><strong>Leaked Data Monitoring</strong>: Continuously scan various sources to detect if your credentials have been compromised, ensuring rapid response to secure your accounts.</li>
<li><strong>More Features</strong>: Explore additional capabilities on our <a href="https://securas.fr/cybershield-security/" rel="nofollow ugc">CyberShield Official Page</a>.</li>
<li><strong>IP Geolocation</strong>: Identify the location of your visitors and block or allow access based on their location using https://ipinfo.io/.</li>
</ul>
<h3>[0.1.6] – 2024-10-25</h3>
<h3>Minor Bug Fix</h3>
<h3>[0.1.5] – 2024-10-25</h3>
<h3>Minor Bug Fix</h3>
<h3>[0.1.4] – 2024-10-25</h3>
<h3>Minor Bug Fix</h3>
<h3>[0.1.3] – 2024-10-25</h3>
<h3>Minor Bug Fix</h3>
<h3>[0.1.2] – 2024-10-25</h3>
<h3>Minor Bug Fix</h3>
<h3>[0.1.1] – 2023-08-27</h3>
<h3>Minor Bug Fix</h3>
<h3>[0.1.0] – 2023-08-27</h3>
<h3>Added</h3>
<ul>
<li>Service Check Module: Enhances monitoring and diagnostics.</li>
<li>AI Threat Detection Module: Specializes in detecting SQL injection attacks.</li>
<li>Support Ticketing System: Streamlined helpdesk for better user assistance.</li>
<li>Multi-Language Support: Now available in French, English, and Arabic.</li>
<li>Client PHPinfo Fetching Function: Gathers configuration information for support purposes.</li>
</ul>
<h3>Thrid Party Libraries</h3>
<ul>
<li><a href="https://ipinfo.io/" rel="nofollow ugc">IPInfo</a>: We use Ipinfo for IP geolocation services. By using this plugin, you agree to the following terms and conditions:
<ul>
<li><a href="https://ipinfo.io/privacy-policy" rel="nofollow ugc">IpInfo’s privacy policy</a></li>
<li><a href="https://ipinfo.io/terms" rel="nofollow ugc">IpInfo’s terms of service</a></li>
</ul>
</li>
</ul>
<p>Got more questions? <a href="mailto:contact@securas.fr" title="Securas Contact" rel="nofollow ugc">Contact us!</a></p>


Cybershield Firewall

CyberShield, Your First Line of Defense Against Web Attacks.

Obsyde Aegis vs Cybershield Firewall