Sajber Sove

<p>Secure Owl Firewall is a fast, lightweight firewall plugin with an advanced rule engine featuring PCRE pattern matching, a transformation pipeline, and JSON-based rule configuration.</p>
<p>Key features:</p>
<ul>
<li>JSON-based rules — 100+ default rules covering SQLi, XSS, RCE, LFI, SSRF, Log4Shell, and more.</li>
<li>Transformation pipeline — urlDecode, lowercase, normalizePath, removeWhitespace, htmlEntityDecode, trim.</li>
<li>Six inspection targets — REQUEST_URI, QUERY_STRING, USER_AGENT, REFERER, COOKIE, POST.</li>
<li>MU-Plugin loader — runs before any regular plugin for earliest protection.</li>
<li>Rate limiting — optional transient-based IP and subnet banning.</li>
<li>IP whitelist with CIDR/subnet support (IPv4 + IPv6).</li>
<li>Per-rule toggle — disable individual rules from the admin panel without editing files.</li>
<li>File-based logging — 24MB cap with auto-rotation, protected log storage.</li>
<li>Configurable log retention policy for GDPR compliance.</li>
<li>Anonymize user IP addresses, enhancing privacy and GDPR compliance.</li>
<li>Filterable — extensive filter hooks for customization.</li>
</ul>
<h3>Filter Hooks</h3>
<ul>
<li><code>sswaf_ip_whitelist</code> — array of IPs to bypass the firewall</li>
<li><code>sswaf_trusted_proxies</code> — array of trusted proxy IPs for X-Forwarded-For</li>
<li><code>sswaf_post_scanning</code> — enable POST data inspection (default: true)</li>
<li><code>sswaf_rules_file</code> — path to the rules JSON file</li>
<li><code>sswaf_log_file</code> — path to the log file</li>
<li><code>sswaf_log_max_size</code> — maximum log size in bytes</li>
<li><code>sswaf_header_status</code> — HTTP status header for blocked requests</li>
<li><code>sswaf_before_block</code> — action hook fired before blocking a request</li>
<li><code>sswaf_rate_limit_ip_threshold</code> — override IP hit threshold</li>
<li><code>sswaf_rate_limit_ip_duration</code> — override IP ban duration</li>
<li><code>sswaf_rate_limit_ip_window</code> — override IP counting window</li>
</ul>


Secure Owl Firewall

Secure Owl Firewall is a smart rule-based protection that blocks threats and secures your site from attacks.

wtbplugins

<p>WTB Firewall is a lightweight but powerful WordPress firewall plugin designed to help you protect your site from unwanted visitors, brute-force attacks and malicious traffic.</p>
<p>The plugin allows you to define clear access rules, automatically block suspicious behaviour, and correctly detect real visitor IP addresses even when your site is behind a proxy or CDN.</p>
<h4>Core Features</h4>
<ul>
<li>Manual IP allow and block rules</li>
<li>Country-based access control</li>
<li>Automatic blocking after repeated authentication failures</li>
<li>Built-in rate limiting to protect your site from excessive requests and abuse</li>
<li>404 monitoring to detect and block traffic generating repeated missing-page errors</li>
<li>Proxy support with trusted header detection</li>
<li>Lightweight design with minimal performance impact</li>
<li>Clean WordPress-native admin interface</li>
</ul>
<h4>Why use WTB Firewall?</h4>
<p>Many WordPress security plugins include dozens of features that add complexity and overhead. WTB Firewall focuses on essential firewall functionality so you can:</p>
<ul>
<li>Stop brute-force login attempts</li>
<li>Restrict access from unwanted regions</li>
<li>Block abusive visitors quickly</li>
<li>Ensure accurate IP detection behind proxies or CDNs</li>
<li>Keep your site fast while improving security</li>
</ul>
<h4>Designed for Performance</h4>
<p>WTB Firewall is built with performance and reliability in mind. Rules are processed efficiently, unnecessary background tasks are avoided, and the plugin integrates cleanly with WordPress without slowing down your site.</p>


WTB Firewall

WordPress firewall plugin with IP blocking, country rules, brute-force protection and proxy support to secure your site.

Secure Owl Firewall vs WTB Firewall