nolimit-security-dist/README.md

# Nolimit Security

![Nolimit Security — the Overview screen](assets/hero.png)

A firewall, login protection, country filtering, honeytraps, malware and
vulnerability scanning, and an optional AI analyst for WordPress and
WooCommerce — with **nothing leaving the site**. No cloud account, no
telemetry, no paid tier.

## Install

1. Download `nolimit-security.zip` from the [latest release](https://gitea.nolimit.dk/kw/nolimit-security-dist/releases/latest).
2. **Plugins → Add New → Upload Plugin**, then activate.
3. Put your own address on the allow-list before you switch anything to
   *refuse* — [the setup guide](docs/SETUP.md) says where, and why first.

Later versions arrive in **Dashboard → Updates** like any other plugin.

## Documentation

- [Overview](docs/README.md) — what it does, and what it deliberately does not
- [Setting it up, and knowing it works](docs/SETUP.md) — the few settings that
  need a decision, how to check each protection is live, and the three ways
  back in if you lock yourself out
- [Hooks and integration](docs/CONTRACT.md) — for developers: what the plugin
  offers to other plugins and what it asks of them

## More of it

| | |
|---|---|
| ![Firewall rules](assets/screenshots/firewall.png) | **Firewall.** Refuses requests before WordPress loads, with a watching mode for switching it on in front of a shop that is already taking money. |
| ![Activity log](assets/screenshots/activity.png) | **Activity.** Every decision it made, with the rule that made it, so "why was this customer blocked?" has an answer. |
| ![Login protection](assets/screenshots/login.png) | **Login.** Lockouts that stop a guesser without stopping a customer who forgot a password, and two-factor with recovery codes. |
| ![Scanner](assets/screenshots/scanner.png) | **Scanner.** Core checksums, malware signatures and a vulnerability check, run in the background. |
| ![AI analyst](assets/screenshots/ai-analyst.png) | **AI analyst.** Off until you give it a key, and graded from "answers when asked" to "acts on what you have ticked". |

Requires WordPress 5.8+ and PHP 7.4+. WooCommerce is not required.