BotFend Anti-Bot Firewall

Stop Bots Before They Reach Your WordPress Site

BotFend Anti-Bot Firewall is a professional-grade WordPress security plugin that blocks malicious bots, scrapers, and automated attacks before they consume your server resources. Built with a high-performance architecture, it features an early-loading Web Application Firewall (WAF) that neutralizes threats at the server level—before WordPress even loads.

🔥 Why Choose BotFend?

✨ Key Features

• 🛡️ Web Application Firewall (WAF) – Blocks attacks before WordPress loads using auto_prepend_file
• 🎯 Intelligent Bot Detection – Signature-based and behavioral analysis to catch automated threats
• 📊 Behavioral Analysis – Monitors visitor patterns to detect bots mimicking human activity
• 🔄 Adaptive Protection Modes – Learning, Standard, Aggressive, and Emergency modes
• 📁 File Guard – Monitors upload directories and auto-fixes permission changes
• 🌍 Geo-Location Filtering – Block or allow traffic by country
• 🚫 Tor Node Blocking – Blocks Tor traffic. No API key required
• 🔗 XML-RPC & Brute-Force Protection – WordPress hardening against common attacks
• 📊 Smart Log Aggregation – Prevents database bloat even under heavy attack
• ⏱️ Perpetual Offender Tracking – Auto-upgrades temporary bans to permanent blocks

🔌 External Services (Optional)

All services are disabled by default and require manual activation with free API keys:

• AbuseIPDB – Real-time IP reputation checking (free API key required)
• Google reCAPTCHA – Bot verification challenge (free API key required)
• IPHub – Proxy/VPN/Tor detection (free API key required)
• Cloudflare Integration – Edge-level IP blocking (Pro feature)

📋 Requirements

• WordPress 6.4 or higher
• PHP 8.0 or higher

🔧 Installation

1. Upload the plugin files to /wp-content/plugins/botfend-anti-bot-firewall
2. Activate the plugin through the ‘Plugins’ menu in WordPress
3. Configure your protection settings in the BotFend dashboard
4. Optional: Enable external services with free API keys

📝 Changelog

Version 4.9.0 (May 2026)

• Initial release on WordPress.org
• Complete refactor from Safebot Defender
• Added File Guard feature
• Added geo-location filtering
• Four adaptive protection modes
• External services disabled by default (privacy first)
• Compatible with WordPress 6.4+ and PHP 8.0+

License: GPLv2 or later