A real Web Application Firewall for Joomla. Blocks SQL injection, XSS, LFI/RFI and header-tampering attacks, hides your backend behind a secret key, and protects logged-in sessions from hijacking. No credit card, no time limit. Free — forever.
Download for Free
SQL injection, XSS, LFI/RFI and header-tampering protection, with IPv6-aware blacklist and whitelist.
Hide your admin URL behind a secret key and block malicious user-agents before they reach Joomla.
Stops concurrent-login abuse and detects session hijacking attempts in real time.
Audit file and folder permissions and spot misconfigurations at a glance.
Cross-checks every installed component's version against our database, so you don't have to track CVEs yourself — the bundled database refreshes with every Securitycheck release. Pair it with the Update Database add-on for new vulnerabilities within hours instead of waiting for the next release — and on Pro, a queued automatic update of the affected extension.
Pairs with the free Spam Protection plugin to block bot sign-ups via StopForumSpam.