WASecurity
WordPress Security Plugin
Bot protection, login security, attack detection and comprehensive logging for WordPress.
Description
WASecurity is a comprehensive WordPress security plugin that protects your website from bot attacks, brute-force attacks and other security threats.
The plugin was developed specifically for WordPress and offers a combination of proactive protection and detailed logging to detect and fend off attacks at an early stage.
Features
Bot Protection
Intelligent bot detection with optional JavaScript challenge to block automated attacks.
Login Protection
Protects the WordPress login with optional HTTP authentication against brute-force attacks.
Attack Detection
Detects suspicious activities such as SQL injection, XSS attempts and path traversal attacks.
Request Logging
Logs all requests with IP, user agent, request data and threat level.
Dashboard Widget
Clear widget in the WordPress dashboard with real-time statistics.
Email Notifications
Automatic alerts for excessive requests or detected attacks.
WordPress Hardening
Additional security measures such as XML-RPC deactivation and header protection.
Auto Updates
Automatic plugin updates via own update server.
Security Modules
Bot Challenge
Suspicious visitors must pass an invisible JavaScript challenge. Bots that cannot execute JavaScript are automatically blocked.
- Invisible to real visitors
- No CAPTCHAs required
- Whitelist for known bots
Login Protection
Optional HTTP Basic Authentication before the WordPress login. Attackers must first overcome this hurdle before reaching the login.
- Additional authentication layer
- Blocks automated attacks
- Simple configuration
Threat Detection
Analyses every request for known attack patterns and automatically classifies the threat level.
- SQL injection detection
- XSS attempt detection
- Path traversal protection
Logging & Analytics
Detailed logging of all requests with clear evaluation in the WordPress admin.
- IP-based statistics
- User agent analysis
- Threat timeline
Installation
- Download plugin ZIP or upload via FTP to
/wp-content/plugins/ - Activate the WASecurity plugin in WordPress admin under Plugins
- Activate desired security modules under Settings → WASecurity
- Optional: configure email for security alerts
Technical Details
System Requirements
- WordPress 5.0 or higher
- PHP 7.4 or higher
- MySQL/MariaDB for logging
Creates the following data
- Database table
wp_wasecurity_logs - Log directory in
/wp-content/wasecurity-logs/ - WordPress options with prefix
wasecurity_
WASecurity for your website?
The plugin is currently not publicly available. Contact me for a custom solution.
Get in touch now