ZEISMO Security – Firewall, Malware Scanner & Login Protection

ZEISMO Security combines a WordPress firewall, malware scanner, login protection and practical hardening in one local security console. The plugin starts in monitor mode. It inspects suspicious request patterns and records evidence without blocking visitors. After reviewing the activity on your own site, you can enable blocking by attack category. Included controls

• Request monitoring for SQL injection, cross-site scripting, path traversal, local and remote file inclusion, command injection and scanner patterns.
• A weighted risk score with monitor and block modes.
• Local file-integrity comparisons for supported files in core directories, plugins and themes.
• Local malware pattern scanning with bounded file coverage and scan-limit notices.
• Login attempt limiting and failed-login history.
• Temporary and permanent IP bans plus an allowlist.
• Optional XML-RPC blocking, neutral login errors, REST user-enumeration protection and reduced version exposure.
• Optional browser security headers and WordPress file-editor hardening.
• Local threat history, activity summaries and critical-event email alerts.
• A measured configuration score and WordPress toolbar status.

WordPress malware scanning and file integrity Run a local scan to review suspicious PHP, JavaScript, iframe, redirect and spam patterns in supported files. Integrity checks compare file hashes with a locally recorded baseline to identify additions, modifications and removals. They do not compare every file against an official clean-copy database. Review the site before accepting a new baseline. Scans cover supported readable files in wp-admin, wp-includes, the plugins directory and the active theme root. Uploads, the database and root-level files are outside these scan roots. Files over 2 MB, unsupported extensions and symbolic links are excluded. A result with no findings is not proof that the entire website is clean. Guided setup that keeps you in control Follow four steps: understand your protection, choose safeguards, select alerts and privacy, then review and apply. New installations start in Monitor. After an update, the next visit to ZEISMO Security requires setup review for that version. Existing firewall mode, enabled status, access rules and two-factor enrollment are preserved. Completing setup opens Overview; other WordPress administration remains available. The searchable Guide explains all 52 included control entries, including the cases where several labels use the same scanner or firewall. A complete English handbook is included, with task walkthroughs, compatibility notes and recovery instructions. Local by design The WordPress.org edition runs its available security controls on your own WordPress site. No account, licence token or remote ZEISMO service is required for local security controls. Local features in this edition are not restricted by a paid plan. Blocking is disabled by default. Logged-in editors are excluded from firewall enforcement, and the request filter fails open if it cannot evaluate a request. No security plugin can guarantee that a site will not be compromised. Read the complete user guide | Product information A support conversation you can return to Contact ZEISMO support opens a private conversation on our website. Sign in or create a free ZEISMO account and verify your email, then describe the problem. Support replies refresh while the conversation is open and are saved for later. No paid plan is required for the support conversation. The plugin does not automatically send your site address, files or logs. Email notifications are not automatic; return to the conversation for later replies. You can also email support@zeismo.com or online@zeismo.com. Do not send passwords, licence tokens, authenticator secrets or recovery codes. Support availability and a fix are not guaranteed by opening a conversation. Optional separate Content Protection add-on Security Pro and higher include a separately installed Content Protection add-on, when available. It can discourage ordinary text selection, copying, context menus and image dragging while excluding interactive controls and selected pages. It is not bundled into this WordPress.org package; all local controls in this package remain free. It cannot prevent screenshots, page-source access or determined copying.

1. Back up your site, then install the ZEISMO Security ZIP through Plugins > Add New > Upload Plugin and activate it.
2. Open ZEISMO Security > Setup.
3. Keep monitor mode enabled while you review the first events and scanner results.
4. Open Firewall when you are ready to enable blocking for selected attack categories.
5. Review Settings for IP retention, trusted-proxy configuration, login protection, hardening and alerts.
6. Test visitor login, forms and any checkout or REST integrations after each enforcement change. If legitimate traffic is affected, return to monitor mode and review the matching event.
7. Review events and scan results regularly, keep WordPress updated and maintain independent backups.

For sites behind a trusted reverse proxy, define ZEISMO_SEC_TRUSTED_PROXIES in wp-config.php with the actual proxy IP addresses or CIDR ranges before selecting a forwarded-address mode. Quarantine is available only when ZEISMO_SEC_QUARANTINE_DIR points to an existing private writable directory outside all public document roots. Review findings and keep backups before moving files.

1.2.0

• Require setup review on first plugin visit after each update, preserving existing firewall state and returning to Overview after completion.
• Open a private support conversation with saved replies from the support button; no automatic site data upload.
• Add complete English feature-reference documentation, task walkthroughs and authentic screenshots.
• Add confirmed, permission-checked removal of bans and trusted addresses, with an audit entry and immediate effect.
• Correct event grouping, IPv6 masking, daily chart counters and quarantine confirmation.
• Keep both ZEISMO support email addresses available alongside saved account conversations.
• Add a searchable handbook explaining every included control, with use cases, limits and troubleshooting.
• Add a four-step setup tutorial with selectable safeguards, alerts/privacy choices, review before applying and a post-setup checklist.
• Include a complete printable handbook in docs/security-guide.html.
• Correct management links and privacy wording; hide unsupported country/score ban choices from new-rule entry.
• Redesigned security workspace, navigation, setup, controls, reports and responsive layouts.
• Clarified available controls and disabled firewall states.

1.1.0

• Add optional administrator and security-change email alerts with bounded sending and visible mail status.
• Add optional administrator authenticator codes and one-use recovery codes, with confirmed setup, encrypted local storage and replay/attempt protection.
• Print private scan reports with coverage notes.
• Keep the baseline and suppress false deletions on incomplete scans. Explain unsuccessful baseline refreshes.

1.0.0

• Initial WordPress.org release.
• Added local request monitoring and optional category-based firewall blocking.
• Added integrity and malware pattern scanning.
• Added login protection, hardening, ban, allowlist, alert and local activity tools.
• Added measured configuration status and accessible administration workflows.