Nolimit Security
A firewall, login protection, country filtering, honeytraps, malware and vulnerability scanning, and an optional AI analyst for WordPress and WooCommerce — with nothing leaving the site. No cloud account, no telemetry, no paid tier.
Install
- Download
nolimit-security.zipfrom the latest release. - Plugins → Add New → Upload Plugin, then activate.
- Put your own address on the allow-list before you switch anything to refuse — the setup guide says where, and why first.
Later versions arrive in Dashboard → Updates like any other plugin.
Documentation
- Overview — what it does, and what it deliberately does not
- Setting it up, and knowing it works — the few settings that need a decision, how to check each protection is live, and the three ways back in if you lock yourself out
- Hooks and integration — for developers: what the plugin offers to other plugins and what it asks of them
More of it
 |
Firewall. Refuses requests before WordPress loads, with a watching mode for switching it on in front of a shop that is already taking money. |
 |
Activity. Every decision it made, with the rule that made it, so "why was this customer blocked?" has an answer. |
 |
Login. Lockouts that stop a guesser without stopping a customer who forgot a password, and two-factor with recovery codes. |
 |
Scanner. Core checksums, malware signatures and a vulnerability check, run in the background. |
 |
AI analyst. Off until you give it a key, and graded from "answers when asked" to "acts on what you have ticked". |
Requires WordPress 5.8+ and PHP 7.4+. WooCommerce is not required.