WP Manifestindependent plugin directory
manifest / security / wp-plugin-gw-security

Gary Wallage Industrial Security

High-performance, zero-bloat security and anti-malware hardening engine for the Gary Wallage ecosystem. Provides request firewalling, uploads protection, user enumeration shielding, lightweight malware scanning, and security headers without database bloat.

by Gary David Wallage · github.com/gdwallage/wp-plugin-gw-security · website

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/gdwallage/wp-plugin-gw-security/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/gdwallage/wp-plugin-gw-security ↗

Gary Wallage Industrial Security (gw-security)

High-performance, zero-bloat security and anti-malware hardening engine for the Gary Wallage Photography ecosystem.

Features

  • Zero-Overhead WAF: Lightweight SQLi, XSS, RFI, and directory traversal inspection without database overhead.
  • Uploads Lockdown: Blocks PHP/executable script execution in /wp-content/uploads/.
  • User Enumeration Defense: Shields /?author=N and locks down REST API /wp/v2/users for unauthenticated queries.
  • Login Sanitizer: Generic error messages to prevent username harvesting.
  • Built-in Malware Scanner: High-speed scanner for webshells, base64 payloads, and backdoor signatures.
  • Security Headers: Standard HTTP headers (X-Content-Type-Options, X-Frame-Options, Permissions-Policy, etc.).
  • 2FA Immunity: 100% compatible with WP 2FA, OpenID Connect Generic, and Authentik.