Base manual
The Sentinel panel and the four lines of defense: prevention, identity, detection, response. All processed locally.
What is OLOsecurity
OLOsecurity is an all-in-one WordPress security plugin: firewall, antivirus, access management with 2FA, audit and cleanup in a single panel, Sentinel, 8 operational tabs.
The core choice: 100% local processing. Analysis, signatures and logs stay on your server; no traffic is sent to third-party clouds to be "analyzed". No third-party dataset is bundled into the plugin: feeds are downloaded on-demand from your site. GDPR made simple.
Compliance — GPL code, verifiable line by line. WP Plugin Check: 0 errors / 0 warnings.
Firewall · mini-WAF
- OWASP family rules: SQL injection, XSS, path traversal, LFI/RCE, enabled by group.
- IP reputation from public lists + advanced block rules.
- Rate limiting on anomalous requests.
- Geo-block IPv4 and IPv6 by country.
- Trusted proxies: recognition of Cloudflare and local networks to correctly evaluate
X-Forwarded-For.
Access & 2FA
- Anti brute-force: attempt limit, timed lockout, permanent auto-blocklist for repeat-offender IPs, allowlist/blocklist.
- 2FA TOTP: QR setup, recovery codes, email fallback, admin reset.
- Compromised passwords: HIBP check with k-anonymity: the password never leaves the server.
- CAPTCHA and user enumeration block.
- Anti fake-crawler: FCrDNS check: anyone posing as Googlebot gets unmasked.
- Optional hardening: XML-RPC, security headers, version hiding,
DISALLOW_FILE_EDIT, PHP upload block, .htaccess protection.
Scanner · three steps
- Integrity / checksum: trust-on-first-use baseline; compares core, plugins and themes against wordpress.org; detects modified files.
- Deep heuristics: scans PHP files (skips non-executables) with 5 strong heuristics calibrated against false positives; a masked double extension (e.g.
.jpg.php) is treated as an almost-certain webshell. - Malware signatures: MD5/SHA256 hash pass against the signature feed: O(1) lookup, negligible cost.
Performance: ~11.000 PHP files in ~2–3 seconds on a typical site; on hosts with timeouts, chunked mode with resume. CVE feed for installed plugins and themes, daily update via cron, indexes with autoload OFF.
Restore & log
- Guided cleanup post-attack: one-click core repair from the official version, plugin/theme reinstall from wordpress.org with automatic backup.
- Reversible quarantine for suspicious files.
- Salt regeneration and an incident report ready to hand over.
- Audit log "who/what/when" on a dedicated table, filterable, CSV export, 90-day retention.
- Monitoring: real-time traffic, event graph, disk space monitor, email digest, webhook.
Spec sheet
- Type
- All-in-one WordPress security plugin · Sentinel panel, 8 tabs
- Requirements
- WordPress 5.9+ (tested up to WP 7.0) · PHP 7.4+
- Processing
- 100% local, no traffic to third-party clouds
- Firewall
- Mini-WAF: OWASP family rules, IP reputation, rate limiting, geo-block IPv4/IPv6
- Access
- Anti brute-force, 2FA TOTP + recovery, HIBP k-anonymity, CAPTCHA, FCrDNS
- Scanner
- Checksum vs wordpress.org · 5 anti-webshell heuristics · MD5/SHA256 hash O(1)
- Performance
- ~11.000 PHP files in ~2–3 s · chunked mode with resume
- Feed
- maldet/rfxn.com, InterServer (~76.000 signatures) · OpenPhish + URLhaus (~30.000 URLs) · api.wordpress.org (checksum, CVE) · daily cron
- Recovery
- Guided cleanup, reversible quarantine, salt regeneration, incident report
- Register
- Audit log on a dedicated table · CSV export · 90 days
- License
- GPLv2 or later · WP Plugin Check 0 errors / 0 warnings