CyberPulse — Advanced Security & Bot Protection

Description

🛡️ CyberPulse is a powerful security firewall that protects your website 24/7.

Every request is analyzed in real time. Bots, scanners, and attackers are blocked instantly — before they reach your site. The plugin detects suspicious behavior, blocks AI data collectors like GPTBot and ClaudeBot, and stops brute force attacks with automatic IP bans.

Why Choose CyberPulse:

• ⚡ Real-Time Protection — monitors every request and blocks threats instantly
• 🪶 Lightweight & Fast — no database load, logs stored in files with automatic cleanup
• 🌍 10 Languages — Russian, English, German, French, Italian, Spanish, Portuguese, Chinese, Japanese, Korean
• 🚀 Easy to Use — install and protect your site in under a minute
• 🚫 No Ads — clean interface, no upsells in your admin panel
• 🔗 Works with Caching — compatible with WP Rocket, W3 Total Cache, LiteSpeed Cache, and CDN services

Protection Features:

• 🤖 AI Scraping Protection — blocks GPTBot, ClaudeBot, PerplexityBot, CCBot, and other AI data collectors
• 🔍 Multi-layer bot detection (11 independent checks: User-Agent, HTTP headers, Referer, Accept-Language, and more)
• 🔐 Brute force protection — automatic permanent /24 subnet ban after exceeding attempt limit
• 📁 WordPress system files hiding — blocks access to wp-config.php, .env, .git, and other sensitive files
• ⏱️ Rate Limiting — configurable request limits to prevent DDoS and aggressive scraping
• ✅ IP Whitelist — manual and automatic (server IP, search engines, administrator IPs)
• 🛡️ XSS attack protection — blocks cross-site scripting in requests
• 🔎 404 scanner detection — blocks vulnerability scanners by excessive 404 errors
• 🔒 URL Firewall — manual path blocking for specific endpoints
• 👤 User-Agent blacklist with statistics — block specific bots by User-Agent
• 🔗 Referer verification — blocks suspicious requests without proper Referer header
• 📊 Security score dashboard — hourly attack histogram, fix recommendations
• 📧 Email alerts on attack spikes
• 📝 Event audit log — track logins, settings changes, and plugin activity
• 🎨 Dark & Light theme for admin panel

External Services

This plugin connects to external services to provide specific functionality.

🌍 IP Geolocation
* Service: ip-api.com
* Purpose: Determines visitor country for statistics
* Data sent: Visitor IP address
* When: On each page visit from non-whitelisted IP
* Terms of Service: https://ip-api.com/docs/legal
* Privacy Policy: https://ip-api.com/docs/legal

🖥️ Server IP Detection
* Service: https://www.ipify.org/
* Purpose: Detects the server’s public IP address
* Data sent: None (only receives IP)
* When: Once on plugin activation, then cached for 24 hours

🔒 Threat Intelligence
* Service: blocklist.de, abuse.ch (FeodoTracker), Tor Project
* Purpose: Checks visitor IPs against known malicious IP databases
* Data sent: None (downloads threat lists locally)
* When: Periodically (cached for 24 hours)
* blocklist.de: https://www.blocklist.de/en/impressum.html
* abuse.ch: https://abuse.ch/
* Tor Project: https://www.torproject.org/about/trademark/

🔄 WordPress.org API
* Service: api.wordpress.org
* Purpose: Checks for WordPress core updates (security score feature)
* Data sent: None (standard WordPress update check)
* When: On security score calculation
* Privacy Policy: https://wordpress.org/about/privacy/

Source Code

The original unminified developer source code is available at:
https://github.com/gataurus/cyberpulse