Features Compare Install FAQ Download
⚡ Version 1.0 • Open Source • Free Forever

Advanced Traffic
Firewall for ProcessWire

Enterprise-grade security with VPN/Proxy/Tor detection, AI bot blocking, rate limiting, and 10+ protection layers. Zero configuration required.

Get Started → View on GitHub
// Enable firewall protection in seconds
$modules->get('WireWall')->enabled = true;
$modules->get('WireWall')->block_proxy_vpn_tor = true;
$modules->get('WireWall')->block_ai_bots = true;
// That's it! Your site is now protected 🛡️

Works seamlessly with

⚡
🌍
☁️
🐘
🌐
💎
FEATURES

Everything you need
to stay protected

10+ security layers working together to block threats before they reach your application

🌍

GeoIP Country Blocking

Blacklist or whitelist countries with MaxMind GeoLite2 support. Automatic HTTP fallback ensures seamless operation even without local databases. Supports both IPv4 and IPv6 with CIDR notation.

195+

Countries supported

🔒

VPN/Proxy/Tor

Multi-API detection system that identifies VPN, proxy, and Tor traffic automatically.

⚡

Rate Limiting

Intelligent per-IP rate limiting protects against DDoS and brute force attacks.

🤖

AI Bot Blocking

Block GPTBot, ClaudeBot, GrokBot from scraping your content for AI training.

🎭

JS Challenge

Detect headless browsers and fake user agents with automatic JavaScript verification.

🏢

Datacenter & ASN Blocking

Block entire datacenters (AWS, Google Cloud, Azure) and ASN networks. Perfect for preventing automated attacks from cloud infrastructure.

📊

Analytics

Detailed logging with country, ASN, and block reason tracking.

🎯

Custom Rules

Country-specific rules, path blocking, referer filtering, and more.

COMPARISON

Why choose WireWall?

See how WireWall compares to other security solutions

Feature
WireWall
Cloudflare
Wordfence
🌍 Country Blocking
✓
✓
✗
🔒 VPN/Proxy/Tor Detection
✓
✓
✗
🤖 AI Bot Blocking
✓
✗
✗
🏢 ASN Blocking
✓
✓
✗
🎭 JavaScript Challenge
✓
✓
✗
🖥️ Self-Hosted
✓
✗
✓
💰 Free Forever
✓
Limited
Limited
⚡ No External Dependencies
✓
✗
✗
⚙️ ProcessWire Native
✓
✗
✗
INSTALLATION

Get started in minutes

Three simple steps to enterprise-grade security

1

Download & Install

Download WireWall and place it in your ProcessWire modules directory.

cd site/modules/
git clone https://github.com/wirewall
2

Activate Module

Go to Modules → Refresh, then install and enable WireWall from the admin panel.

Admin → Modules → Install
✓ Enable WireWall
✓ Configure settings
3

You're Protected!

WireWall is now protecting your site 24/7. View logs and statistics anytime.

Setup → Logs → wirewall
View blocked requests
Monitor traffic patterns
CONFIGURATION

Simple yet powerful

Configure WireWall with an intuitive interface or use direct API calls. Set up country blocking, rate limits, bot detection, and more in seconds.

Start Protecting →
Example Configuration
// Block countries
blocked_countries = ['RU', 'CN'];

// Enable VPN detection
block_proxy_vpn_tor = true;

// Block AI bots
block_ai_bots = true;

// Rate limiting: 60 req/min
rate_limit_requests = 60;
FAQ

Frequently Asked Questions

How does WireWall differ from Cloudflare? +
WireWall is self-hosted and runs directly on your server, giving you complete control over your security rules. Unlike Cloudflare, there's no third-party DNS routing, no external dependencies, and no monthly fees. You own your data and your security configuration.
Does it work with MaxMind GeoIP databases? +
Yes! WireWall has native support for MaxMind GeoLite2 databases (Country and ASN). If MaxMind databases aren't installed, WireWall automatically falls back to free HTTP APIs like ip-api.com. You get the best of both worlds: blazing-fast local lookups or reliable cloud fallback.
Will it slow down my website? +
No. WireWall uses aggressive caching and runs before page execution, adding virtually zero latency. GeoIP lookups are cached for 30 days, VPN checks for 7 days, and the module uses early hooks to block threats before any heavy processing occurs.
Can I whitelist my own IP address? +
Absolutely. WireWall has a powerful IP whitelist that bypasses ALL blocking rules. It supports exact IPs (1.2.3.4), wildcards (192.168.*.*), and CIDR notation (10.0.0.0/8). Your whitelisted IPs will never be blocked, regardless of country, VPN status, or any other rules.
What happens to legitimate users from blocked countries? +
They see a professional block page explaining access is restricted from their location. You can customize the message, redirect to another URL, or return a silent 404. The admin area is always accessible regardless of firewall rules, so you'll never lock yourself out.
Is it really free forever? +
Yes. WireWall is 100% open source and free to use commercially. No hidden fees, no premium tiers, no upsells. It's built for the ProcessWire community by developers who believe in accessible security for everyone.

Ready to secure your site?

Join hundreds of ProcessWire sites protected by WireWall. Free forever, open source, and enterprise-ready.

Get Started Now → View on GitHub