NinjaFirewall (WP + Edition) is a true web application firewall. Although it can be installed and configured as a plugin, it is a standalone firewall that sits in front of WordPress. It allows any blog administrator to take advantage of very advanced and powerful security features that are usually not available at the WordPress level, but only in security applications such as the Apache ModSecurity module or the Suhosin PHP extension.

Features

• Standalone Web Application Firewall.
• Protects against remote and local file inclusion, code execution, uploading, SQL injection, bots and scanners, XSS, PHP injection, privilege escalation and many other threats.
• The fastest and most effective brute-force attack protection for WordPress.
• Intercepts and cleans up all HTTP requests before they reach WordPress, as well as the response body.
• Support for multiple sites.
• Powerful access control (user role, IP, geolocation, URL, bot / user agent, rate limit).
• Event notifications.
• Centralized logging.
• Keeping a log of the system log.
• And much more..