Sajber Sove

<p>Secure Owl Firewall is a fast, lightweight firewall plugin with an advanced rule engine featuring PCRE pattern matching, a transformation pipeline, and JSON-based rule configuration.</p>
<p>Key features:</p>
<ul>
<li>JSON-based rules — 100+ default rules covering SQLi, XSS, RCE, LFI, SSRF, Log4Shell, and more</li>
<li>Transformation pipeline — URL decode, lowercase, normalize path, remove whitespace, HTML entity decode, trim</li>
<li>Inspection targets — REQUEST_URI, QUERY_STRING, USER_AGENT, REFERER, COOKIE, and POST</li>
<li>MU-Plugin loader — runs before regular plugins for earliest protection</li>
<li>Rate limiting — optional transient-based IP and subnet banning</li>
<li>Login protection — PIN field, speed limit and honeypot to block brute-force attacks</li>
<li>IP whitelist — CIDR/subnet support for both IPv4 and IPv6</li>
<li>IP blacklist — CIDR/subnet support for both IPv4 and IPv6</li>
<li>Per-rule toggle — disable individual rules from the admin panel without editing files</li>
<li>File-based logging — 64MB cap with auto-rotation and protected storage</li>
<li>Log retention — configurable policy for GDPR compliance</li>
<li>IP anonymization — masks user IP addresses for enhanced privacy and GDPR compliance</li>
</ul>
<h3>Filter Hooks</h3>
<ul>
<li><code>sswaf_ip_whitelist</code> — array of IPs to bypass the firewall</li>
<li><code>sswaf_ip_blacklist</code> — array of IPs to block before any rules run</li>
<li><code>sswaf_trusted_proxies</code> — array of trusted proxy IPs for X-Forwarded-For</li>
<li><code>sswaf_post_scanning</code> — enable POST data inspection (default: true)</li>
<li><code>sswaf_rules_file</code> — path to the rules JSON file</li>
<li><code>sswaf_log_file</code> — path to the log file</li>
<li><code>sswaf_log_max_size</code> — maximum log size in bytes</li>
<li><code>sswaf_header_status</code> — HTTP status header for blocked requests</li>
<li><code>sswaf_before_block</code> — action hook fired before blocking a request</li>
<li><code>sswaf_rate_limit_ip_threshold</code> — override IP hit threshold</li>
<li><code>sswaf_rate_limit_ip_duration</code> — override IP ban duration</li>
<li><code>sswaf_rate_limit_ip_window</code> — override IP counting window</li>
</ul>


Secure Owl Firewall

Secure Owl Firewall is a smart rule-based protection that blocks threats and secures your site from attacks.

wedos.com

<p>Activate WEDOS Global protection — WAF, DDoS protection and CDN for your WordPress website.</p>
<h3>WEDOS Global (CDN Cache & Security)</h3>
<p>WEDOS Global Protection plugin helps site administrators activate WEDOS.protection from inside WordPress. The plugin provides a simple landing page for non-technical users, guided website and DNS setup, a dashboard with protection status, and a consent step before any external service activation request is sent.</p>
<h3>Cloud WAF & DDoS Protection</h3>
<p>By filtering traffic and blocking harmful cyberattacks on cloud servers, our WAF provides protection for your WordPress websites without putting any extra load on your local resources.</p>
<h3>Global CDN Cache</h3>
<p>The WEDOS Global CDN will ensure a significant increase of your WordPress loading speed, and better overall server response all around the world.</p>
<h3>Links to Documentation and Other Sources</h3>
<ul>
<li><a href="https://www.wedos.com/protection/" rel="nofollow ugc">WEDOS Global</a></li>
<li><a href="https://kb.wedos.com/en/kategorie/wedos-global-en/" rel="nofollow ugc">Knowledge Base</a></li>
<li><a href="https://help.wedos.com" rel="nofollow ugc">Community Help</a></li>
</ul>
<h3>External Services</h3>
<p>This plugin connects to the following external services:</p>
<p><strong>WEDOS Global Protection (plugin.wedos.global)</strong></p>
<ul>
<li>Verify domain ownership via a local verification file</li>
<li>Register and activate the domain protection service</li>
<li>Check the protection and DNS status</li>
</ul>
<p>Data sent: domain name, server IP address, admin email address, unique request ID. No personal visitor data is ever transmitted.</p>
<p><strong>WEDOS CDN (wp-cdn.wedos.com)</strong></p>
<ul>
<li>Serves WordPress core and WooCommerce static assets (JS, CSS) from WEDOS CDN edge nodes</li>
<li>Fetches a manifest file listing available asset versions and their SHA-256 hashes</li>
<li>Assets are only rewritten when local file hash matches the CDN manifest — no data about visitors is transmitted</li>
<li>CDN is opt-in and can be disabled at any time from the dashboard</li>
</ul>
<p><strong>Anonymous telemetry (plugin.wedos.global/cdn-plugin/telemetry.php)</strong></p>
<ul>
<li>Sends anonymous usage statistics once daily when opted in: plugin version, WordPress version, rewrite count</li>
<li>No domain name, no IP address, no personal data is included</li>
</ul>
<p>The service is provided by WEDOS Group SA, 7 Rue Robert Stumper, L-2557 Luxembourg, EU.</p>
<ul>
<li><a href="https://www.wedos.com/en/terms-of-service/" rel="nofollow ugc">Terms of Service</a></li>
<li><a href="https://www.wedos.com/en/privacy-policy/" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
<p>By activating the plugin and clicking “Create request”, you explicitly consent to your domain data being sent to the WEDOS Global Protection service.</p>


WEDOS | Protection & Cache Performance

Activate WEDOS Global protection — WAF, DDoS protection and CDN for your WordPress website.

Secure Owl Firewall vs WEDOS | Protection & Cache Performance