CyberPulse — Advanced Security & Bot Protection
| 开发者 | gataurus |
|---|---|
| 更新时间 | 2026年8月21日 18:12 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- ⚡ Real-Time Protection — monitors every request and blocks threats instantly
- 🍃 Lightweight & Fast — no database load, logs stored in files with automatic cleanup
- 🌍 10 Languages — Russian, English, German, French, Italian, Spanish, Portuguese, Chinese, Japanese, Korean
- 🚀 Easy to Use — install and protect your site in under a minute
- 🚫 No Ads — clean interface, no upsells in your admin panel
- 🔗 Works with Caching — compatible with WP Rocket, W3 Total Cache, LiteSpeed Cache, and CDN services
- 🤖 AI Scraping Protection — blocks GPTBot, ClaudeBot, PerplexityBot, CCBot, and other AI data collectors
- 🔍 Multi-layer bot detection (11 independent checks: User-Agent, HTTP headers, Referer, Accept-Language, and more)
- 🔐 Brute force protection — automatic permanent /24 subnet ban after exceeding attempt limit
- 🌍 IP Management — block IPs, subnets (/24), whitelist trusted addresses, detect visitor country by IP
- 📁 WordPress system files hiding — blocks access to wp-config.php, .env, .git, and other sensitive files
- ⏱️ Rate Limiting — configurable request limits to prevent DDoS and aggressive scraping
- ✅ IP Whitelist — manual and automatic (server IP, search engines, administrator IPs)
- 🛡️ XSS attack protection — blocks cross-site scripting in requests
- 🔎 404 scanner detection — blocks vulnerability scanners by excessive 404 errors
- 🔒 URL Firewall — manual path blocking for specific endpoints
- 👤 User-Agent blacklist with statistics — block specific bots by User-Agent
- 🔗 Referer verification — blocks suspicious requests without proper Referer header
- 📊 Security score dashboard — hourly attack histogram, fix recommendations
- 📧 Email alerts on attack spikes
- 📝 Event audit log — track logins, settings changes, and plugin activity
- 🎨 Dark & Light theme for admin panel
安装:
- Go to Plugins → Add New in your WordPress admin
- Search for "CyberPulse"
- Click Install Now and then Activate
- Navigate to CyberPulse in the admin menu
- ✅ Your site is protected — default settings provide optimal security
屏幕截图:
常见问题:
🔍 How does bot detection work?
CyberPulse analyzes 11 parameters of every request: User-Agent, HTTP headers, Accept-Language, Referer, browser headers (Sec-Fetch-*), and more. Suspicious requests are blocked automatically with temporary or permanent IP bans.
🌍 How does IP blocking work?
CyberPulse automatically detects visitor IP addresses, checks them against known malicious IP databases, and blocks suspicious IPs or entire /24 subnets permanently. You can also manually block IPs, subnets (CIDR), and whitelist trusted IP addresses.
⚡ Does it slow down my site?
No. CyberPulse is designed to be lightweight. All checks use efficient caching, and logs are stored in files — not in the database. It works smoothly with high-traffic sites.
🔗 Is it compatible with caching and CDN services?
Yes. CyberPulse works with WP Rocket, W3 Total Cache, LiteSpeed Cache, Cloudflare, and other CDN and caching solutions. Real visitor IPs are correctly detected via proxy headers.
🔎 Will it block search engines?
No. Google, Bing, Yandex, Baidu, DuckDuckGo, and other legitimate search bots are automatically detected and whitelisted by IP subnet and User-Agent signature.
✅ Can I whitelist my IP or specific services?
Yes. You can whitelist IPs, subnets (CIDR), hostnames, User-Agent patterns, and specific URL paths. Administrators are automatically whitelisted on login.
🔐 How does brute force protection work?
When failed login attempts exceed the limit (default: 5 attempts in 15 minutes), the entire /24 subnet is permanently blocked. No temporary bans — attackers go straight to permanent block.
🤖 Does it protect against AI scraping?
Yes. CyberPulse blocks known AI training bots: GPTBot (OpenAI), ClaudeBot (Anthropic), PerplexityBot, CCBot (Common Crawl), and others. AI scrapers are detected by User-Agent and IP signatures.
⭐ How is this different from other security plugins?
CyberPulse offers AI scraping protection, 10 languages out of the box, a real-time dashboard with hourly attack histogram, and a clean interface with no ads or upsells. It's lightweight and stores logs in files — not in your database.
🛡️ Is there a PRO version?
Yes. PRO adds 2FA authentication, geo-blocking (195 countries), DDoS protection, malware scanner, content copy protection, file integrity monitoring, and more. Learn more
更新日志:
- 🔒 Security: Fixed XSS vulnerabilities in 403 block page (replaced esc_url with esc_js for JavaScript context)
- 🔒 Security: Added strip_tags() before htmlspecialchars() in XSS detection to prevent stored XSS attacks
- 🔒 Security: Fixed SQL injection vulnerability in stale transients cleanup query
- 🔒 Security: Added current_user_can('manage_options') check to cybersec_handle_simple_check()
- 🔒 Security: Added IP validation in cybersec_ajax_human_verify() AJAX handler
- 🔒 Security: Added sanitize_text_field() for User-Agent in track_user_agent() function
- 🔒 Security: Fixed cookie removal logic in cybersec_remove_all_blocks()
- ⚡ Performance: Added throttling to cybersec_cleanup_expired_temp_blocks() (5 min cooldown)
- 🔧 Fixed: Proper variable naming in cybersec_cleanup_stale_transients() foreach loop
- 🐛 Fixed: Potential memory issue in cybersec_fs_put_contents() with large log files
- 🔒 Security fix: Added XSS protection with input sanitization and esc_url_raw
- 🛡️ Fixed 403 page bugs: increased token lifetime, IP validation
- 🚀 Performance optimization: added wp_cache for settings and whitelist
- 🔧 Fixed cron schedule error: registered cyberpulse_every_5_minutes
- 🧹 Added directory traversal protection in log functions
- ✅ Added nonce verification in AJAX human-verify handler
- 🔄 Full data cleanup on IP unblock (cookies, cache, transients)
- 🚀 Performance optimization: Added Object Cache support for 15+ functions (whitelist, offenders, threat level, UA stats, and more)
- 🛡️ Security enhancement: Removed browser header bypass in request checks, improved XSS validation for all users
- ⚡ Improved bot detection: Expanded real browser detection with 50+ UA patterns (VK, Telegram, WhatsApp, Instagram, and more)
- 🔧 Optimized log rotation with safe truncation to prevent file corruption
- 🧹 Enhanced transient cleanup with lower DB load
- 🌐 Added caching for geo-location lookups (ip-api.com)
- 📈 Security test now validates 20+ protection features
- 🌍 Added translation files for 10 languages
- 🔗 Updated PRO website link
- 🛠️ Fixed SQL compatibility with MariaDB
- 🚀 Initial release with AI scraping protection, bot detection, brute force defense, and more