CyberPulse — Advanced Security & Bot Protection

🛡️ CyberPulse (Cyber Pulse) is a powerful security firewall with IP blocking and whitelist that protects your website 24/7.

Every request is analyzed in real time. Bots, scanners, and attackers are blocked instantly — before they reach your site. The plugin detects suspicious behavior, blocks AI data collectors like GPTBot and ClaudeBot, and stops brute force attacks with automatic IP bans.

Why Choose Cyber Pulse:

• ⚡ Real-Time Protection — monitors every request and blocks threats instantly
• 🍃 Lightweight & Fast — no database load, logs stored in files with automatic cleanup
• 🌍 10 Languages — Russian, English, German, French, Italian, Spanish, Portuguese, Chinese, Japanese, Korean
• 🚀 Easy to Use — install and protect your site in under a minute
• 🚫 No Ads — clean interface, no upsells in your admin panel
• 🔗 Works with Caching — compatible with WP Rocket, W3 Total Cache, LiteSpeed Cache, and CDN services

Protection Features:

• 🤖 AI Scraping Protection — blocks GPTBot, ClaudeBot, PerplexityBot, CCBot, and other AI data collectors
• 🔍 Multi-layer bot detection (11 independent checks: User-Agent, HTTP headers, Referer, Accept-Language, and more)
• 🔐 Brute force protection — automatic permanent /24 subnet ban after exceeding attempt limit
• 🌍 IP Management — block IPs, subnets (/24), whitelist trusted addresses, detect visitor country by IP
• 📁 WordPress system files hiding — blocks access to wp-config.php, .env, .git, and other sensitive files
• ⏱️ Rate Limiting — configurable request limits to prevent DDoS and aggressive scraping
• ✅ IP Whitelist — manual and automatic (server IP, search engines, administrator IPs)
• 🛡️ XSS attack protection — blocks cross-site scripting in requests
• 🔎 404 scanner detection — blocks vulnerability scanners by excessive 404 errors
• 🔒 URL Firewall — manual path blocking for specific endpoints
• 👤 User-Agent blacklist with statistics — block specific bots by User-Agent
• 🔗 Referer verification — blocks suspicious requests without proper Referer header
• 📊 Security score dashboard — hourly attack histogram, fix recommendations
• 📧 Email alerts on attack spikes
• 📝 Event audit log — track logins, settings changes, and plugin activity
• 🎨 Dark & Light theme for admin panel

External Services

This plugin connects to external services to provide specific functionality.

🌍 IP Geolocation
* Service: ip-api.com
* Purpose: Determines visitor country for statistics
* Data sent: Visitor IP address
* When: On each page visit from non-whitelisted IP
* Terms of Service: https://ip-api.com/docs/legal
* Privacy Policy: https://ip-api.com/docs/legal

🖥️ Server IP Detection
* Service: https://www.ipify.org/
* Purpose: Detects the server’s public IP address
* Data sent: None (only receives IP)
* When: Once on plugin activation, then cached for 24 hours

🔒 Threat Intelligence
* Service: blocklist.de, abuse.ch (FeodoTracker), Tor Project
* Purpose: Checks visitor IPs against known malicious IP databases
* Data sent: None (downloads threat lists locally)
* When: Periodically (cached for 24 hours)
* blocklist.de: https://www.blocklist.de/en/impressum.html
* abuse.ch: https://abuse.ch/
* Tor Project: https://www.torproject.org/about/trademark/

🔄 WordPress.org API
* Service: api.wordpress.org
* Purpose: Checks for WordPress core updates (security score feature)
* Data sent: None (standard WordPress update check)
* When: On security score calculation
* Privacy Policy: https://wordpress.org/about/privacy/

Source Code

The original unminified developer source code is available at:
https://github.com/gataurus/cyberpulse