Guardify Firewall Security & Risk Analysis

wordpress.org/plugins/guardify

Guardify is a powerful WordPress firewall plugin designed to protect your website from a wide range of threats, including brute force attacks, SQL inj …

10 active installs v1.1.2 PHP + WP 5.0+ Updated Jun 4, 2025
brute-force-protectionfirewallip-blockingsecuritywordpress-security
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Guardify Firewall Safe to Use in 2026?

Generally Safe

Score 100/100

Guardify Firewall has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10mo ago
Risk Assessment

The "guardify" plugin version 1.1.2 exhibits a generally good security posture, with several positive indicators. The absence of known CVEs and vulnerabilities in its history is a significant strength, suggesting a history of secure development. Furthermore, the plugin demonstrates strong adherence to secure coding practices, with 100% of SQL queries using prepared statements and a high percentage (92%) of output properly escaped. The presence of nonce checks for all AJAX handlers and capability checks for some entry points also indicates a commitment to preventing common WordPress exploits. The limited attack surface, consisting only of AJAX handlers, and the lack of unprotected entry points are commendable.

Key Concerns

  • Flow with unsanitized path found
  • File operations present without detailed security review
  • Capability checks present on only 3 entry points
Vulnerabilities
None known

Guardify Firewall Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Guardify Firewall Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
6
68 escaped
Nonce Checks
7
Capability Checks
3
File Operations
7
External Requests
0
Bundled Libraries
0

Output Escaping

92% escaped74 total outputs
Data Flows
1 unsanitized

Data Flow Analysis

4 flows1 with unsanitized paths
log_activity (includes\class-guardify-firewall.php:210)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Guardify Firewall Attack Surface

Entry Points5
Unprotected0

AJAX Handlers 5

authwp_ajax_guardify_toggle_firewallincludes\class-guardify-admin.php:10
authwp_ajax_guardify_reset_settingsincludes\class-guardify-admin.php:11
authwp_ajax_guardify_add_ip_ruleincludes\class-guardify-admin.php:12
authwp_ajax_guardify_remove_ip_ruleincludes\class-guardify-admin.php:13
authwp_ajax_guardify_install_bytedefenseincludes\class-guardify-admin.php:15
WordPress Hooks 13
actionplugins_loadedguardify.php:42
filterauthenticateguardify.php:115
actionlogin_formguardify.php:126
actionshow_user_profileguardify.php:163
actionedit_user_profileguardify.php:164
actionadmin_menuincludes\class-guardify-admin.php:8
actionadmin_enqueue_scriptsincludes\class-guardify-admin.php:9
actioninitincludes\class-guardify-firewall.php:12
actionwp_loginincludes\class-guardify-firewall.php:13
actionwp_login_failedincludes\class-guardify-firewall.php:14
actionadmin_initincludes\class-guardify-firewall.php:16
actionadmin_initincludes\class-guardify-firewall.php:17
filterpre_comment_approvedincludes\class-guardify-firewall.php:18
Maintenance & Trust

Guardify Firewall Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedJun 4, 2025
PHP min version
Downloads480

Community Trust

Rating100/100
Number of ratings2
Active installs10
Developer Profile

Guardify Firewall Developer Profile

BitCleric

1 plugin · 10 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Guardify Firewall

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/guardify/admin/css/style.css/wp-content/plugins/guardify/admin/js/main.js/wp-content/plugins/guardify/assets/css/frontend.css/wp-content/plugins/guardify/assets/js/frontend.js
Version Parameters
guardify/admin/css/style.css?ver=guardify/admin/js/main.js?ver=guardify/assets/css/frontend.css?ver=guardify/assets/js/frontend.js?ver=

HTML / DOM Fingerprints

CSS Classes
guardify-dashboard-wrapperguardify-settings-wrapperguardify-ip-rules-wrapperguardify-logs-wrapperguardify-statistics-wrapperguardify-admin-notice
HTML Comments
Guardify Admin ClassGuardify Firewall ClassGuardify 2FA LoginGuardify Login Form 2FA+1 more
Data Attributes
data-guardify-actiondata-guardify-nonce
JS Globals
GuardifyAdminGuardifyFrontend
REST Endpoints
/wp-json/guardify/v1/toggle-firewall/wp-json/guardify/v1/reset-settings/wp-json/guardify/v1/add-ip-rule/wp-json/guardify/v1/remove-ip-rule/wp-json/guardify/v1/install-bytedefense
FAQ

Frequently Asked Questions about Guardify Firewall