Edge Firewall
Filter malicious traffic before WordPress loads. Block exploit attempts, abusive bots, brute-force pressure, protocol anomalies, malicious scanners, and high-risk request patterns at the edge.
Local WordPress agent
Enforce policy inside WordPress with local context across login, XML-RPC, REST API, admin actions, uploads, comments, files, database signals, and recovery state.
Cloud threat intelligence
Use cloud-managed intelligence for IP reputation, bot reputation, attack campaigns, suspicious request scoring, malware intelligence, and emergency policies.
Vulnerability intelligence
Track WordPress core, plugin, theme, WooCommerce, REST route, AJAX action, upload handler, and public exposure risk so the platform understands what is vulnerable and reachable.
Virtual patching
Deploy signed managed policies to shield vulnerable routes, parameters, forms, upload handlers, plugins, themes, and attack campaigns while permanent fixes are tested or scheduled.
Managed policy
Apply versioned, signed, explainable security policy across edge and local enforcement. Policies can support rollback, emergency changes, and customer-specific exceptions.
Bot defense
Score suspicious clients using reputation, behavior, timing, challenge results, endpoint activity, credential attack patterns, and WordPress-specific signals.
Login protection
Reduce brute-force, credential stuffing, password reset abuse, registration abuse, XML-RPC login abuse, suspicious admin sessions, and high-risk administrator behavior.
Rate limiting
Apply local and edge-side rate limits to login, XML-RPC, REST API, admin AJAX, comments, forms, uploads, and endpoint abuse.
REST, AJAX, and webhook protection
Classify exposed routes, protect unauthenticated endpoints, reduce user enumeration, monitor webhook abuse, and control high-volume automated traffic.
Upload and malware defense
Inspect uploads, detect suspicious file types, identify webshell indicators, use malware signatures, quarantine risky files, and connect findings to incident timelines.
File integrity monitoring
Watch for new executable files, modified PHP files, suspicious paths, plugin changes, theme changes, permission risks, and file activity near attack events.
Database integrity monitoring
Detect suspicious changes in options, users, user metadata, cron state, active plugins, site URLs, application passwords, injected content, and persistence points.
Privileged action control
Protect dangerous actions such as disabling security, creating administrators, editing code, changing site URLs, deleting backups, or starting production restores.
Origin bypass detection
Detect traffic that reaches the origin without passing through Arximus Edge, verify signed edge headers, rotate origin secrets, and guide origin lockdown.
Incident timeline
Connect Edge Firewall events, local endpoint events, login anomalies, file changes, database changes, malware findings, backup state, and containment actions into one timeline.
Containment playbooks
Activate controlled response steps such as strict policy, forced logout, application password revocation, backup deletion freeze, forensic backup, and alert escalation.
False-positive governance
Support explainable decisions, temporary exceptions, scoped allow rules, expiration, risk scoring, and policy sync so customers can resolve false positives without weakening the whole site.