WP Manifestindependent plugin directory
manifest / security / upshield

UpShield WAF

High-performance Web Application Firewall for WordPress

by UpShield Security · github.com/nhattnh/upshield · website

★ 1stars
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/nhattnh/upshield/archive/refs/heads/main.zip
Readme github.com/nhattnh/upshield ↗

Enterprise-Grade Web Application Firewall for WordPress

Developed by UpTech

Documentation • Quick Start • Features • Contributing

Why UpShield?

Most WordPress security plugins are bloated, slow, and expensive. UpShield is different:

Problem UpShield Solution
Slow scans Optimized async scanning
Expensive premium Free forever, no feature locks
Closed source 100% open source
No visibility Real-time traffic monitoring
US/EU focused Built for APAC + Global

Features

Core Protection

  • SQL Injection (SQLi) Detection
  • Cross-Site Scripting (XSS) Prevention
  • Remote Code Execution (RCE) Blocking
  • Local File Inclusion (LFI) Protection
  • XML-RPC Attack Prevention
  • User Enumeration Blocking

Intelligent Defense

  • AI-Powered Bot Detection
  • Behavioral Analysis
  • Rate Limiting (Global + Per-Endpoint)
  • Country-Based Blocking/Allowing
  • Threat Intelligence Integration (400K+ IPs)

Modern Features (v1.1+)

  • Two-Factor Authentication (TOTP)
  • Telegram Real-Time Alerts
  • HTTP Security Headers (CSP, HSTS, etc.)

Monitoring & Analytics

  • Live Traffic Monitor
  • Attack Pattern Analysis
  • Geographic Threat Map
  • Detailed Security Reports

Quick Start

Installation

Method 1: WordPress Admin

  1. Download the latest release
  2. Go to Plugins → Add New → Upload Plugin
  3. Activate UpShield WAF
  4. Navigate to UpShield → Settings

Method 2: WP-CLI

wp plugin install upshield-waf --activate

Method 3: Composer

composer require uptech/upshield-waf

First-Time Setup

The setup wizard will guide you through:

  1. Enable WAF protection
  2. Configure protection level
  3. Set up alerts (email/Telegram)
  4. Optional: Enable 2FA for admins

Documentation

Topic Description
Installation Guide Step-by-step setup
Configuration All settings explained
Threat Intelligence How our threat feed works
API Reference REST API documentation
Troubleshooting Common issues & fixes
Changelog Version history

Architecture

┌─────────────────────────────────────────────────────────────┐
│                    UpShield WAF Engine                       │
├─────────────────────────────────────────────────────────────┤
│                                                              │
│  ┌──────────────┐  ┌──────────────┐  ┌──────────────┐       │
│  │   Request    │  │    Rule      │  │   Threat     │       │
│  │   Analyzer   │──│   Matcher    │──│  Detector    │       │
│  └──────────────┘  └──────────────┘  └──────────────┘       │
│         │                                    │               │
│         ▼                                    ▼               │
│  ┌──────────────┐                    ┌──────────────┐       │
│  │     Rate     │                    │   Response   │       │
│  │   Limiter    │                    │   Handler    │       │
│  └──────────────┘                    └──────────────┘       │
│                                                              │
├─────────────────────────────────────────────────────────────┤
│  Integrations: Telegram │ 2FA │ Cloudflare │ Security Hdrs  │
└─────────────────────────────────────────────────────────────┘

Performance

Benchmarked on standard WordPress installation:

Metric Without UpShield With UpShield Impact
TTFB 245ms 248ms +1.2%
Memory 48MB 52MB +8.3%
CPU Baseline +0.5% Minimal

UpShield is optimized to add minimal overhead while providing maximum protection.

Security

Responsible Disclosure

Found a vulnerability? Please email security@uptech.vn.

Do NOT create public GitHub issues for security vulnerabilities.

See SECURITY.md for full details.

Contributing

We welcome contributions! See CONTRIBUTING.md for guidelines.

# Development setup
git clone https://github.com/nhattnh/upshield.git
cd upshield
composer install

License

UpShield WAF is open-source software licensed under the GPL-3.0 License.

Support

If UpShield helps protect your site, consider:

  • Star this repo - It helps others discover UpShield
  • Report bugs - Help us improve
  • Suggest features - Shape the roadmap

Made with care by UpTech

Protecting WordPress sites since 2024