Sajber Sove

<p>Secure Owl Firewall is a fast, lightweight firewall plugin with an advanced rule engine featuring PCRE pattern matching, a transformation pipeline, and JSON-based rule configuration.</p>
<p>Key features:</p>
<ul>
<li>JSON-based rules — 100+ default rules covering SQLi, XSS, RCE, LFI, SSRF, Log4Shell, and more</li>
<li>Transformation pipeline — URL decode, lowercase, normalize path, remove whitespace, HTML entity decode, trim</li>
<li>Inspection targets — REQUEST_URI, QUERY_STRING, USER_AGENT, REFERER, COOKIE, and POST</li>
<li>MU-Plugin loader — runs before regular plugins for earliest protection</li>
<li>Rate limiting — optional transient-based IP and subnet banning</li>
<li>Login protection — PIN field, speed limit and honeypot to block brute-force attacks</li>
<li>IP whitelist — CIDR/subnet support for both IPv4 and IPv6</li>
<li>IP blacklist — CIDR/subnet support for both IPv4 and IPv6</li>
<li>Per-rule toggle — disable individual rules from the admin panel without editing files</li>
<li>File-based logging — 64MB cap with auto-rotation and protected storage</li>
<li>Log retention — configurable policy for GDPR compliance</li>
<li>IP anonymization — masks user IP addresses for enhanced privacy and GDPR compliance</li>
</ul>
<h3>Filter Hooks</h3>
<ul>
<li><code>sswaf_ip_whitelist</code> — array of IPs to bypass the firewall</li>
<li><code>sswaf_ip_blacklist</code> — array of IPs to block before any rules run</li>
<li><code>sswaf_trusted_proxies</code> — array of trusted proxy IPs for X-Forwarded-For</li>
<li><code>sswaf_post_scanning</code> — enable POST data inspection (default: true)</li>
<li><code>sswaf_rules_file</code> — path to the rules JSON file</li>
<li><code>sswaf_log_file</code> — path to the log file</li>
<li><code>sswaf_log_max_size</code> — maximum log size in bytes</li>
<li><code>sswaf_header_status</code> — HTTP status header for blocked requests</li>
<li><code>sswaf_before_block</code> — action hook fired before blocking a request</li>
<li><code>sswaf_rate_limit_ip_threshold</code> — override IP hit threshold</li>
<li><code>sswaf_rate_limit_ip_duration</code> — override IP ban duration</li>
<li><code>sswaf_rate_limit_ip_window</code> — override IP counting window</li>
</ul>


Secure Owl Firewall

Secure Owl Firewall is a smart rule-based protection that blocks threats and secures your site from attacks.

te_taipo

<h4>PARETO SECURITY FEATURES</h4>
<p>Had enough of the security theatre presented by the raft of WordPress security plugins? Time to put a stop to the attacks!</p>
<p>Firstly WordPress and most other CMS\’s are built using PHP. PHP is a very insecure programming language, even worse in the hands of amateurs.</p>
<p>WordPress has been plagued by plugins authored by amateurs that bring with them security vulnerabilities.</p>
<p>Security plugin designers mostly focus on cleaning up attacks rather than stopping them dead in their tracks.</p>
<p>Pareto Security class acts as a Central Security Hub checking all inputs from users, preventing bad requests from executing on your website.</p>
<ul>
<li>Real Attack Prevention that can be achieved via a plugin</li>
<li>Automatic Blacklist Management</li>
<li>Easy-To-Use</li>
<li>No customisation needed</li>
<li>Works silently, you only get notified when you really want to be notified</li>
<li>Completely Free</li>
<li>and much more…</li>
</ul>
<h4>PARETO SECURITY PROTECTION</h4>
<ul>
<li>Pareto Security Protection identifies and blocks malicious traffic.</li>
<li>Pareto Security Protection dynamic IP Blacklist protects your site while reducing load.</li>
<li>Protects your site at the entry-point, disabling attack peneration of your WordPress site.</li>
<li>Extends WordPress inbuilt security, defends your website against vulnerabilities added in via bad plugin coding.</li>
<li>[disabled] Optionally prevent Tor users/bots from interacting with login forms and search functions of your site while still allowing them to <em>view</em> your site.</li>
<li>Optionally only allow standard web clients and trusted crawlers to access your website, discouraging others from doing so.</li>
</ul>
<h4>PARETO SECURITY TOOLS</h4>
<ul>
<li>Monitor blocked attack attempts</li>
<li>Optionally receive notifications of <em>REAL</em> attack attempts that Pareto Security has blocked</li>
</ul>
<h4>A Word on Security:</h4>
<p>By the very nature of plugins, no plugin should ever claim to be a Web Application Firewall.</p>
<p>No security plugin can save your website from really-really badly written site, theme and/or plugin code.</p>
<p>No security plugin can save your site from attacks that result from when administrators do not follow basic security practices.</p>
<p>Keeping any CMS as secure as possible is not easy. The very best thing you can do to prevent attacks is to always keep your website code, themes and plugins up to date, and remove any plugins and themes you are not using.</p>


Pareto Security

WordPress Core Security: Secure your website with real security.

Secure Owl Firewall vs Pareto Security