guelfoweb

<p>WordPress Application Firewall. Protects against current attacks. Email notification is disabled by default, notification can be activated and configured in <strong>Settings > WP WAF</strong>. Go to your WP WAF configuration page.</p>


WP WAF

WordPress Application Firewall. Protects against current and future attacks.

Sajber Sove

<p>Secure Owl Firewall is a fast, lightweight firewall plugin with an advanced rule engine featuring PCRE pattern matching, a transformation pipeline, and JSON-based rule configuration.</p>
<p>Key features:</p>
<ul>
<li>JSON-based rules — 100+ default rules covering SQLi, XSS, RCE, LFI, SSRF, Log4Shell, and more.</li>
<li>Transformation pipeline — urlDecode, lowercase, normalizePath, removeWhitespace, htmlEntityDecode, trim.</li>
<li>Six inspection targets — REQUEST_URI, QUERY_STRING, USER_AGENT, REFERER, COOKIE, POST.</li>
<li>MU-Plugin loader — runs before any regular plugin for earliest protection.</li>
<li>Rate limiting — optional transient-based IP and subnet banning.</li>
<li>IP whitelist with CIDR/subnet support (IPv4 + IPv6).</li>
<li>Per-rule toggle — disable individual rules from the admin panel without editing files.</li>
<li>File-based logging — 24MB cap with auto-rotation, protected log storage.</li>
<li>Configurable log retention policy for GDPR compliance.</li>
<li>Anonymize user IP addresses, enhancing privacy and GDPR compliance.</li>
<li>Filterable — extensive filter hooks for customization.</li>
</ul>
<h3>Filter Hooks</h3>
<ul>
<li><code>sswaf_ip_whitelist</code> — array of IPs to bypass the firewall</li>
<li><code>sswaf_trusted_proxies</code> — array of trusted proxy IPs for X-Forwarded-For</li>
<li><code>sswaf_post_scanning</code> — enable POST data inspection (default: true)</li>
<li><code>sswaf_rules_file</code> — path to the rules JSON file</li>
<li><code>sswaf_log_file</code> — path to the log file</li>
<li><code>sswaf_log_max_size</code> — maximum log size in bytes</li>
<li><code>sswaf_header_status</code> — HTTP status header for blocked requests</li>
<li><code>sswaf_before_block</code> — action hook fired before blocking a request</li>
<li><code>sswaf_rate_limit_ip_threshold</code> — override IP hit threshold</li>
<li><code>sswaf_rate_limit_ip_duration</code> — override IP ban duration</li>
<li><code>sswaf_rate_limit_ip_window</code> — override IP counting window</li>
</ul>


Secure Owl Firewall

Secure Owl Firewall is a smart rule-based protection that blocks threats and secures your site from attacks.

WP WAF vs Secure Owl Firewall