Security · 100% local
Knock wrong, stay out
OWASP firewall, 2FA, anti-webshell scanner and guided cleanup from the Sentinel panel. Everything processed on your own server: your traffic never ends up in someone else's cloud.
100% local
mini-WAF
TOTP 2FA
v1.2.0 · GPL
SQLi ✕ XSS ✕ path traversal ✕ LFI/RCE ✕ brute force ✕ fake crawlers ✕ webshell ✕ compromised passwords ✕ bot ✕ SQLi ✕ XSS ✕ path traversal ✕ LFI/RCE ✕ brute force ✕ fake crawlers ✕ webshell ✕ compromised passwords ✕ bot ✕ SQLi ✕ XSS ✕ path traversal ✕ LFI/RCE ✕ brute force ✕ fake crawlers ✕ webshell ✕ compromised passwords ✕ bot ✕ SQLi ✕ XSS ✕ path traversal ✕ LFI/RCE ✕ brute force ✕ fake crawlers ✕ webshell ✕ compromised passwords ✕ bot ✕ SQLi ✕ XSS ✕ path traversal ✕ LFI/RCE ✕ brute force ✕ fake crawlers ✕ webshell ✕ compromised passwords ✕ bot ✕ SQLi ✕ XSS ✕ path traversal ✕ LFI/RCE ✕ brute force ✕ fake crawlers ✕ webshell ✕ compromised passwords ✕ bot ✕ SQLi ✕ XSS ✕ path traversal ✕ LFI/RCE ✕ brute force ✕ fake crawlers ✕ webshell ✕ compromised passwords ✕ bot ✕ SQLi ✕ XSS ✕ path traversal ✕ LFI/RCE ✕ brute force ✕ fake crawlers ✕ webshell ✕ compromised passwords ✕ bot ✕ SQLi ✕ XSS ✕ path traversal ✕ LFI/RCE ✕ brute force ✕ fake crawlers ✕ webshell ✕ compromised passwords ✕ bot ✕ SQLi ✕ XSS ✕ path traversal ✕ LFI/RCE ✕ brute force ✕ fake crawlers ✕ webshell ✕ compromised passwords ✕ bot ✕
While you were reading this page
47
attempts
blocked by an average WordPress site exposed online. You don't need to be famous to be a target: being online is enough.
The Sentinel panel
Four lines of defense, declassified
Eight operational sheets — these are the four that make the difference.
01 · Prevention
→
Firewall · mini-WAF
OWASP rules by family (SQLi, XSS, traversal, LFI/RCE), IP reputation, rate limiting, IPv4/IPv6 geo-block.
02 · Identity
→
Access & 2FA
Anti brute-force, TOTP with recovery codes, compromised passwords (HIBP, k-anonymity), CAPTCHA, anti fake-crawler with FCrDNS verification.
03 · Detection
→
Scanner
Core, plugin and theme integrity via checksum; deep anti-webshell scan; CVE feed and updated malware signatures.
04 · Response
→
Recovery
Guided post-attack cleanup, reversible quarantine, salt regeneration, incident report ready to hand over.
Transparency
0/0
WP Plugin Check: zero errors, zero warnings
GPL code you can read line by line. The opposite of security-in-cloud services that send your traffic to their datacenters: here, analysis, signatures and logs stay right at home. GDPR made simple.
Coming soon
Demo or free/full version coming soon: follow OLOtheme on LinkedIn to stay updated.