Firewall

SQL injection

Blocks requests that try to read or change your database through forms and links.

Cross-site scripting (XSS)

Blocks attempts to inject scripts into your pages to steal visitor sessions.

File inclusion and path traversal

Blocks attempts to read server files or load code from outside your website.

Known malicious bots

Blocks scanners and bots with a bad reputation.

Login brute force

Slows down, then blocks, repeated failed sign-in attempts.

WordPress XML-RPC abuse

Blocks mass sign-in attempts through xmlrpc.php.