Sajber Sove

Secure Owl Firewall is a fast, lightweight firewall plugin with an advanced rule engine featuring PCRE pattern matching, a transformation pipeline, and JSON-based rule configuration.
Key features:
<ul>
<li>JSON-based rules — 100+ default rules covering SQLi, XSS, RCE, LFI, SSRF, Log4Shell, and more.</li>
<li>Transformation pipeline — urlDecode, lowercase, normalizePath, removeWhitespace, htmlEntityDecode, trim.</li>
<li>Six inspection targets — REQUEST_URI, QUERY_STRING, USER_AGENT, REFERER, COOKIE, POST.</li>
<li>MU-Plugin loader — runs before any regular plugin for earliest protection.</li>
<li>Rate limiting — optional transient-based IP and subnet banning.</li>
<li>IP whitelist with CIDR/subnet support (IPv4 + IPv6).</li>
<li>Per-rule toggle — disable individual rules from the admin panel without editing files.</li>
<li>File-based logging — 24MB cap with auto-rotation, protected log storage.</li>
<li>Configurable log retention policy for GDPR compliance.</li>
<li>Anonymize user IP addresses, enhancing privacy and GDPR compliance.</li>
<li>Filterable — extensive filter hooks for customization.</li>
</ul>
<h3>Filter Hooks</h3>
<ul>
<li><code>sswaf_ip_whitelist</code> — array of IPs to bypass the firewall</li>
<li><code>sswaf_trusted_proxies</code> — array of trusted proxy IPs for X-Forwarded-For</li>
<li><code>sswaf_post_scanning</code> — enable POST data inspection (default: true)</li>
<li><code>sswaf_rules_file</code> — path to the rules JSON file</li>
<li><code>sswaf_log_file</code> — path to the log file</li>
<li><code>sswaf_log_max_size</code> — maximum log size in bytes</li>
<li><code>sswaf_header_status</code> — HTTP status header for blocked requests</li>
<li><code>sswaf_before_block</code> — action hook fired before blocking a request</li>
<li><code>sswaf_rate_limit_ip_threshold</code> — override IP hit threshold</li>
<li><code>sswaf_rate_limit_ip_duration</code> — override IP ban duration</li>
<li><code>sswaf_rate_limit_ip_window</code> — override IP counting window</li>
</ul>

Secure Owl Firewall

Secure Owl Firewall is a smart rule-based protection that blocks threats and secures your site from attacks.

ipintelai

IPIntel AI Firewall (WAF) integrates AI-powered IP reputation analysis into WordPress 
to help site owners detect and mitigate automated abuse, scanners, and malicious traffic.
Incoming requests are evaluated using external reputation signals and risk scoring. 
Based on the assessed risk level, traffic may be allowed, challenged for human verification, 
or blocked automatically.
The plugin is designed to be easy to use and does not require custom code or 
infrastructure management.
Project website: 
<a href="https://ipintel.ai" rel="nofollow ugc">https://ipintel.ai</a>
<h3>Features</h3>
<ul>
<li>AI-powered IP reputation and risk scoring</li>
<li>Automatic allow, challenge, or block decisions</li>
<li>Human verification challenge for suspicious traffic</li>
<li>Compatible with aggressive caching environments (one-time manual configuration required)</li>
<li>Optional visual security badge</li>
<li>Simple configuration for non-technical users</li>
<li>Free API key available with daily request limits</li>
</ul>
<h3>Data Privacy</h3>
This plugin connects to the IPIntel.ai API to analyze visitor IP addresses 
for security and threat detection purposes.
Data transmitted to the external service: 
– Visitor IP address 
– API key (used solely for request authentication)
No WordPress user account data, cookies, or User-Agent information are transmitted.
The external service is used exclusively to determine whether a request 
should be allowed, challenged, or blocked.
A free API key is available with a daily request limit.
Get API key: 
<a href="https://ipintel.ai/dashboard" rel="nofollow ugc">https://ipintel.ai/dashboard</a>
Higher request limits require an upgrade.
Terms of Service: 
<a href="https://ipintel.ai/terms" rel="nofollow ugc">https://ipintel.ai/terms</a>
Privacy Policy: 
<a href="https://ipintel.ai/privacy" rel="nofollow ugc">https://ipintel.ai/privacy</a>
<h3>Page Cache Compatibility</h3>
IPIntel AI Firewall relies on per-visitor verification.
When full-page caching is enabled, the cache must vary by the 
verification cookie in order for challenges to work correctly.
For LiteSpeed Cache: 
– Go to LiteSpeed Cache → Cache → Vary 
– Add the following cookie: 
 ipintel_human_ok 
– Save changes and purge the cache
This is a one-time configuration step.
Without cache variation, it is technically impossible for any WordPress 
plugin to reliably challenge unverified visitors.
<h3>Optional Footer Badge</h3>
The plugin includes an optional footer badge that can be enabled 
from the settings page.
When enabled, the badge displays a small visual indicator showing 
that the site is protected by IPIntel.ai.
The badge does not collect data, perform tracking, 
or load external resources.
The footer badge is disabled by default and can be turned on or off at any time.

IPIntel AI Firewall

IP reputation firewall (WAF) for WordPress using AI-powered threat analysis and automatic request verification.

Secure Owl Firewall vs IPIntel AI Firewall