A Web Application Firewall is coming to PhantomGuard Free!
A web application firewall is coming to the free PhantomGuard WordPress plugin.
Think of it as a bouncer for your website. A web application firewall It checks every visitor before your site loads and turns away the ones who are clearly up to no good.
PhantomGuard already protects WordPress sites from traffic floods, keeps attackers away from your server, scans for malware and locks down weak spots. The new firewall adds another layer that runs right inside your site, so you're protected even when traffic reaches your site directly.
What the firewall does
The firewall starts working before your theme and other plugins load, so it can stop bad requests before they touch anything important.
It looks at what each visitor is trying to do: the page they ask for, the forms they submit and the data their browser sends along. If something looks like an attack, it gets blocked.
Blocked visitors see a simple "access denied" page with a reference number. You'll find the same number in the plugin's list of recent blocks, so you can always see what was stopped and why.
What it protects you from
The firewall is built for the attacks WordPress sites see every day, including:
- Attempts to break into your database or inject harmful code into your pages
- Bots snooping around for private files and passwords
- Automated tools scanning your site for weaknesses
- Brute-force login attacks that hammer your site with password guesses
- Harmful files disguised as normal uploads
- Known security holes in popular WordPress plugins
Not sure yet? Turn on learning mode. The firewall will just watch and take notes without blocking anything, so you can see how it behaves before switching it on for real.
It won't get in your way
A firewall is only useful if your site still works normally. The default settings are made for WordPress, so writing posts, using the block editor, managing your dashboard and running a WooCommerce shop all work as usual.
If you want stricter or more relaxed protection, you can pick a different level for each site.
You'll never be locked out of your own site, because logged-in admins are always let through. That check uses your real WordPress login, so attackers can't fake it. You can also add trusted IP addresses, and an "Add my IP" button does it in one click.
Safe by design
If the firewall ever has a problem of its own, it steps aside and lets your site keep running. A firewall issue should never take your website down.
How updates work
New threats appear all the time, especially new security holes in WordPress plugins. That's why the firewall gets regular rule updates:
- Free users get new protection rules 7 days after they're released.
- Premium users get them the same day they're released.
That week can matter. When a new plugin vulnerability goes public, attackers often start exploiting it within days. Premium users are protected right away. Free users get the same protection, just a week later.
If your site is important to your business, or you manage sites for clients, Premium gives you that extra head start. The free plugin still includes the full firewall and regular updates.
Frequently asked questions
Does this replace PhantomGuard's other protection?
No, it works alongside it. PhantomGuard's network protection stops traffic floods and attacks before they reach your server. The firewall adds a second check inside your WordPress site itself.
Will it break my site, my admin area or my shop?
It's built not to. The default settings are made for WordPress and WooCommerce, and logged-in admins are never blocked. If you want to be extra careful, start in learning mode.
Does it work with my hosting?
It works on all the common web servers WordPress runs on. For most sites it works right after you install it. If your host needs one extra setting, the plugin tells you exactly what to do.
When can I get it?
We're putting the finishing touches on it now and will announce the release date soon.