Allow PowerSEC through Cloudflare or a firewall
If Cloudflare or a firewall challenges PowerSEC's requests, actions to your site can be delayed. Here is the one-minute allow rule that fixes it.
Behavioral WAF: learning, monitor, and block modes
PowerSEC's Behavioral WAF is a pattern-inspection layer that runs on top of the standard Firewall. It is off by default and ships with three operating modes designed to roll out safely without breaking your site. Why three modes? Web Application Firewalls famously block…
Performance impact of PowerSEC
PowerSEC is designed to be lightweight. Here's what to expect for performance impact and how to tune if needed. Typical impact The figures below are typical estimates for a site with average traffic (1000 visits/day) on standard shared hosting — actual impact varies by host,…
Web Application Firewall (WAF) basics
The PowerSEC WAF inspects every HTTP request to your WordPress site and blocks attacks before they reach your code. How requests flow Rule sets PowerSEC includes: - OWASP Core Rule Set — covers SQL injection, XSS, RFI/LFI, and other OWASP Top 10 categories - WordPress-specific…