Jibong Purr-tection

The challenge

Security plugins often lock essentials behind upgrades or overwhelm site owners with settings. The goal was complete protection that is free forever, safe by default and explained in plain language.

What I worked on

• 01

  Web application firewall with a learning mode

• 02

  Malware scanner with WordPress.org checksum comparison

• 03

  Two-factor login with passkeys and authenticator apps

• 04

  Security score with one-click hardening

• 05

  Audit log, live traffic and instant alerts

Implementation

A web application firewall checks every request as soon as plugins load, with a 7-day learning mode before it blocks anything. The malware scanner compares WordPress core and plugins with official WordPress.org checksums and scans every other PHP file in small background steps. Login security adds two-factor sign-in by email code, authenticator app or passkey, brute-force protection and a hidden login URL. A security score with one-click fixes, an audit log and alerts by email, Slack, Telegram or webhook tie it together.