A global protection suite. Protect your website with the best Joomla! and WordPress security extension — just download and install it. Ready to work in one minute, easy to set up and customize.
Buy Now
Protection against SQL injection, XSS, LFI/RFI, header modification, CSRF and clickjacking (Joomla also adds dedicated command and CRLF injection filters). Also guards user sessions against hijacking and your backend against brute-force and dictionary attacks, and blocks new administrator accounts however they were created.
Trusts real visitor IPs behind Cloudflare, Sucuri or any reverse proxy you configure — so the firewall never blocks your own CDN, and attackers can't spoof their IP by faking the wrong header.
A few plain-language questions — behind a CDN? old WordPress traffic? shared admin devices? — configure the whole firewall for your site in under a minute. Every answer stays editable later.
Get alerted the moment any of the thousands of files on your site is modified — even a minimal change.
Watches configuration.php, both index.php files and every installed template for changes, then emails you and automatically schedules a File Integrity scan — no need to notice it yourself.
Check file and folder permissions and fix misconfigurations with one click of the Repair button.
The most advanced malware scanner on the market: suspicious patterns, known malware filenames and multi-extension files, cross-checked against an online service with 40 anti-malware engines and millions of hashes. Mark a confirmed false positive as reviewed instead of a blanket exception — it stays quiet only until the file actually changes.
Hide your backend URL with a secret key to prevent dictionary and brute-force attacks.
A constantly updated database of every known Joomla! vulnerability, refreshed with every release — or within hours instead of waiting for the next release when paired with the Update Database add-on.
Once a fix is published, vulnerable extensions can update themselves automatically — with an automatic backup first and a one-click rollback, plus full history, if anything goes wrong. Requires the Update Database add-on.
Manage the extension remotely through Securitycheck Pro Control Center: check status, launch tasks and update everything from one console.
If the firewall ever blocks an administrator by mistake, a rescue link is emailed automatically — or recover access via FTP with a one-time rescue file, even if the panel itself is unreachable.
Run File Manager or File Integrity scans on a schedule, when your server has less load, without affecting quality of service.
Choose which user groups the Web Firewall rules apply to, and drag to reorder which filters get evaluated first.