BD Security Firewall
Complete WordPress Security in One Plugin
BD Security Firewall delivers the protection you need to keep your WordPress site safe from hackers, bots, and brute force attacks. It replaces expensive solutions like Wordfence and Sucuri at a fraction of the cost — with no bloat, no ads, and no upsells buried in your dashboard.
Key Features
- Web Application Firewall (WAF) — Real-time blocking of SQL injection, cross-site scripting (XSS), and other OWASP Top 10 threats.
- Brute Force Protection — Configurable login attempt limits and lockout durations to stop credential-stuffing attacks cold.
- Rate Limiting — Throttle aggressive bots and scrapers before they consume your server resources.
- Geo-Blocking — Block or allow traffic by country to eliminate entire threat regions.
- Security Headers — Automatically set CSP, HSTS, X-Frame-Options, and other headers that harden your site.
- File Integrity Monitoring — Detect unauthorized changes to WordPress core files and get alerted immediately.
- Two-Factor Authentication — TOTP (authenticator app) with QR setup and one-time backup codes, enforceable per user role.
- Activity Logging — Track logins, failed attempts, and suspicious behavior with a searchable event log.
- WordPress Hardening — Hide WP version, disable XML-RPC, block PHP uploads, disable file editor, and force strong passwords.
- Auto Logout — Automatically end idle sessions after a configurable timeout.
Changelog
- v1.2.0 — Two-factor authentication (TOTP authenticator app + backup codes)
- v1.1.0 — WAF improvements
- v1.0.0 — Initial release
Web App Firewall
Real-time blocking of SQL injection, XSS, and other OWASP Top 10 threats.
Brute Force & 2FA
Login-attempt limits, lockouts, and TOTP authenticator-app two-factor with backup codes.
Geo-Blocking
Block or allow traffic by country to eliminate entire threat regions.
Integrity Monitoring
Detects unauthorized changes to WordPress core files and alerts you immediately.
No reviews yet. Be the first to review this product!
- Initial release.
- Stable version with full feature set.
Need Help?
We are committed to providing exceptional support for all our products. Whether you need help with installation, configuration, or have questions about features, our team is here to assist you.
Before reaching out, we recommend checking the product documentation and changelog for common answers. Most setup questions are covered in our getting-started guides.
For priority support, please include your order number and a detailed description of the issue, along with any relevant screenshots. This helps us resolve your inquiry faster.
What buyers tell us, anonymized.
No named testimonials yet — we run this catalog with a small team and ask permission before publishing anything attributable. These are anonymized signals from real support threads.
Frequently asked questions
Honest answers to the questions buyers ask before clicking buy.
Does it conflict with Wordfence or Sucuri?
You should pick one firewall. Running two security plugins side-by-side wastes CPU and creates conflicting redirects.
Will it lock me out of my own site?
No. Whitelist your IP under Settings → Whitelist before tightening rules. If you do get locked out, FTP-rename the plugin folder to disable it.
Does it conflict with caching plugins?
No. We tested with LiteSpeed Cache and WP Rocket on getbdshield.com itself. Dynamic features bypass page cache where required; static assets are cache-friendly.
What happens when my license expires?
The plugin keeps working with whatever it last had. You stop receiving updates and premium features get gated until you renew.
Whatu2019s the refund policy?
30-day refund, no questions asked. Email support@getbdshield.com from the address you bought with.
How much performance overhead does it add?
Negligible on every page load. Heavy operations (scans, backups, AI generation) run on cron, not on visitor requests.
Which WordPress and PHP versions are supported?
WordPress 6.0+ and PHP 8.0+. We test on the same stack getbdshield.com runs on (PHP 8.3, WP latest).
Does it work on multisite?
Yes, network-activate or per-site activate. Each subsite counts as one license seat.
The buy-time questions.
Six honest answers to the things buyers usually ask before they click checkout.
How does the license actually activate?
What does the 30-day refund actually cover?
What happens when my license expires?
Does this conflict with other plugins in the same category?
Who replies if I open a support ticket?
Can I use it across client sites if I'm an agency?
How BD Security Firewall compares
Honest head-to-head with the alternatives.
