Webboll Security

Webboll Security is an advanced security plugin that protects your WordPress site with a behavior-based approach. Instead of looking at individual requests, it reads attacker intent early by examining the visitor’s sequence of actions.

Free features:

• Custom login URLs (hide wp-admin and wp-login.php)
• Separate admin and member login gates
• Brute-force protection with automatic IP blocking
• Threat engine analyzing seven attack types with risk scoring
• REST API and XML-RPC protection
• Two-factor authentication (2FA) for admin and member logins
• Honeypot bot traps
• Activity log of all security events
• Threat report with 24-hour and 7-day summaries
• Bot detection with reverse-DNS verification of legitimate search engine bots
• Panic mode for one-click lockdown
• Email notifications
• Multi-language support (7 languages)

Pro features:

• Attack-Time Shield — verification gate for suspicious visitors during active attacks
• Geo-Blocking — allow or block access by country
• IP Reputation Databases — automatic blocking via AbuseIPDB, Spamhaus and other lists
• Malware Scanner — scans files for malicious code using heuristics
• File Integrity Monitoring — detects file changes with SHA-256 fingerprinting
• Adaptive Learning Pool — learns attack patterns and quarantines new threats
• IP Trajectory Analysis — tracks attacker movement across your site
• Cloudflare Integration — real IP detection and blocking through Cloudflare
• SMS Notifications — instant alerts for critical security events

External services

This plugin can connect to the following third-party services. Each one is optional and is only contacted when you enable and configure the corresponding feature. No data is sent to any of them unless you turn the feature on.

Cloudflare Turnstile (CAPTCHA) — Used to verify that a login/form submission is human when you select Turnstile as your CAPTCHA provider. When a protected form is submitted, the visitor’s Turnstile token and IP address are sent to Cloudflare for verification. The Turnstile script is also loaded on protected pages. Terms: https://www.cloudflare.com/terms/ — Privacy: https://www.cloudflare.com/privacypolicy/

hCaptcha (CAPTCHA) — Used to verify that a submission is human when you select hCaptcha as your CAPTCHA provider. On submission, the visitor’s hCaptcha token, secret key and IP address are sent to hCaptcha for verification, and the hCaptcha script is loaded on protected pages. Terms: https://www.hcaptcha.com/terms — Privacy: https://www.hcaptcha.com/privacy

Google reCAPTCHA (CAPTCHA) — Used to verify that a submission is human when you select reCAPTCHA as your CAPTCHA provider. On submission, the visitor’s reCAPTCHA token and IP address are sent to Google for verification, and the reCAPTCHA script is loaded on protected pages. Terms: https://policies.google.com/terms — Privacy: https://policies.google.com/privacy

ip-api.com (IP geolocation) — Used to look up the country and network information of an IP address shown in the IP management and threat screens. When you request details for an IP (or geo-blocking evaluates a visitor), that IP address is sent to ip-api.com. Terms & Privacy: https://ip-api.com/docs/legal

NetGSM (SMS) — Used to send SMS notifications and one-time codes if you enable SMS and enter your NetGSM credentials. When an SMS is triggered, the destination phone number, message text and your NetGSM credentials are sent to NetGSM. Terms & Privacy: https://www.netgsm.com.tr/sozlesme/

Twilio (SMS) — Alternative SMS provider. If you enable Twilio and enter your credentials, the destination phone number, message text and your Twilio credentials are sent to Twilio when an SMS is triggered. Terms: https://www.twilio.com/en-us/legal/tos — Privacy: https://www.twilio.com/en-us/legal/privacy