Heru Website Security
Keep attacks out of your website
Heru Website Security is a web application firewall that runs inside your PHP site. It stops attacks before your application sees them, and keeps protecting on its own.
Application firewall
Blocks SQL injection, cross-site scripting, path traversal, vulnerability scanners and other known attack patterns in every request.
IP and country blocking
Blocks addresses and ranges by hand or automatically after repeated attacks, and whole countries when you need to.
Signatures
Detection rules maintained by Heru and delivered through Heru Cloud, checked against a digital signature before use.
Attack log
Every blocked request is recorded with its reason, so you know what happened and why.
Free or real-time updates
Connecting a site to Heru Cloud is free: the site receives every update of the signatures, the country database and the crawler ranges 30 days after its publication. With a subscription, the sites you cover receive each update as soon as it is published.
The protection never depends on Heru Cloud: when the service cannot be reached, or when a subscription ends, Heru keeps protecting your site with the data it already has.
Getting started
- Install Heru on your site.
- In the Heru dashboard, on the Protection page, connect the site to Heru Cloud with your e-mail address.
- For real-time updates, click “Upgrade to real-time updates” and choose how many sites to cover.