为您的网站量身定制的规则
Inspect malicious input, review traffic exceptions, and apply bot policies using available network evidence, not a user-agent alone.
相信网络，而不是名字 →A firewall blocks the attack.BitFire blocks the damage.
BitFire Pro stops exploited plugins from changing your files, database, or administrator accounts - even when the vulnerability is brand new.
Typical setup: 5 minutes · No credit card required · View Pro runtime controls
Protection at every layer
Application
Filesystem
Database
See what is protected before you enforce it.
BitFire Pro checks protected file, database, and administrator operations inside WordPress, helping stop plugin and theme vulnerabilities before they become site damage.
探索 BitFire Pro 运行时控件 →
- 覆盖率分数 summarize assessed configuration controls.
- Pro保护开关 show which controls are enabled.
Filter requests. Enforce outcomes.
Start with the edge. Add runtime controls where compromise actually happens.
Protect 与 Pro 的操作
Check authorization for protected PHP writes, database operations, and administrator changes. Coverage depends on enabled controls.
查看运行时控制 →查找可疑代码
Behavioral scanning flags potentially malicious code. AI-assisted analysis helps you review what to allow, repair, or remove. A flag is not proof of infection, and AI analysis can be mistaken. Review evidence and back up files before changes.
了解为什么它被标记 →滑动或滚动图像；展开以查看全尺寸详细信息。
- 过滤请求 to narrow the activity you review.
- 阅读决定 alongside the request and rule.
- 检查来源 alongside client and network information.
Real vulnerabilities, protected.
BitFire helps stop real WordPress attack paths before they become file changes, database damage, or administrator takeover.
Recent security vulnerabilities: 0-day protected
| 组件 | CVE and install base | CNA CVSS 3.1 | 评估 BitFire 控制 |
|---|---|---|---|
| CleanTalk Anti-Spam | CVE-2026-1490 technical analysisInstall base: 200000 | 9.8 · 严重 |
Secure with BitFire PRO RASP + BitFire Bot Protection
BitFire stops CVE-2026-1490 twice: FREE Bot Protection blocks the scripted exploit delivery and BitFire PRO RASP blocks the unauthorized plugin install. |
| WP User Manager | CVE-2025-13320 technical analysisInstall base: 10000 | 6.8 · 中 |
Protected by BitFire Bot Protection
BitFire FREE Bot Protection stops the authenticated profile-form exploit behind WP User Manager CVE-2025-13320 before it can delete server files. |
| CleanTalk Anti-Spam | CVE-2024-10542 technical analysisInstall base: 200000 | 9.8 · 严重 |
Secure with BitFire PRO RASP
BitFire PRO RASP blocks CVE-2024-10542, an unauthenticated plugin-installation flaw in CleanTalk Anti-Spam, at runtime. Update to 6.44 and investigate. |
-
CVE-2026-1490 · Technical analysis
CleanTalk Anti-Spam
Secure with BitFire PRO RASP + BitFire Bot Protection
BitFire stops CVE-2026-1490 twice: FREE Bot Protection blocks the scripted exploit delivery and BitFire PRO RASP blocks the unauthorized plugin install.
阅读分析 : CleanTalk Anti-Spam -
CVE-2025-13320 · Technical analysis
WP User Manager
Protected by BitFire Bot Protection
BitFire FREE Bot Protection stops the authenticated profile-form exploit behind WP User Manager CVE-2025-13320 before it can delete server files.
阅读分析 : WP User Manager -
CVE-2024-10542 · Technical analysis
CleanTalk Anti-Spam
Secure with BitFire PRO RASP
BitFire PRO RASP blocks CVE-2024-10542, an unauthenticated plugin-installation flaw in CleanTalk Anti-Spam, at runtime. Update to 6.44 and investigate.
阅读分析 : CleanTalk Anti-Spam
Showing 3 of 52 protection
records. Index rebuilt 十月 9, 2026. Official CVE
records provide vulnerability details for each BitFire
protection assessment. No reproduced exploit test is claimed
here.
查看所有保护记录
特隆德·安德烈
BitFire customer
“there is only one thing to say: It works! And this is the only firewall [to] realy do the job. In the pro version you [will] get all you need.”摘自客户的评论。
Mark Sullivan
BitFire customer
“The team at BitFire walked us through the entire install process, removed all the malware, and fully protected all our sites. I’ll never run a site without it again.”
Start free. Upgrade when runtime enforcement matters.
Free covers the baseline. Pro is recommended for commercial sites that need protected file, database, and administrator operations checked inside WordPress.
自由的
Essential firewall, bot, and malware scan tools for sites that need a simple protection baseline.
- 防火墙和机器人阻止/验证
- 手动恶意软件扫描
- 域名生命周期内 12 个 AI 积分
- Self-managed setup with a fast path to protection
Pro
Recommended for commercial and business-critical sites that need runtime enforcement, scheduled scanning, and deeper security visibility.
- 防火墙和机器人防护，以及 Always-On Protection
- 运行时文件、数据库和管理员保护
- 计划的恶意软件扫描和 Threat Hunter
- 1,000 个 AI 恶意软件分析积分；默认自行管理
Questions before installing.
BitFire filters requests, Pro adds runtime checks, and no layer replaces patching, access control, backups, or recovery planning.
BitFire的防火墙和运行时控制如何协同工作？
The firewall evaluates incoming requests. BitFire Pro also
checks authorization when WordPress attempts protected file,
database, or administrator operations. These are complementary
controls; capabilities vary across security products and
configurations.
Does BitFire only work with WordPress?
The current product is for WordPress and its PHP runtime. For a
standalone PHP application, contact the team to confirm
availability and compatibility before planning a deployment.
Can BitFire help with an already hacked website?
The scanner can help you investigate suspicious files. For
cleanup or incident-response assistance, contact a security
engineer to confirm the work and service scope. Installing a
firewall does not by itself remove an existing compromise.
How does BitFire handle legitimate bots?
BitFire can allow a bot from anywhere, authenticate it by source
network, or block it completely. Network validation makes it
harder for an attacker to bypass controls using a spoofed
user-agent string.
我们应该如何衡量保护开销？
Overhead depends on hosting, PHP and plugin activity, enabled controls, traffic, and cache state.
Recommended measurement procedure, not a published test result: use an isolated staging copy, record versions and enabled controls, run the same representative requests, and compare baseline, firewall/bot controls, and Pro runtime controls separately.
开始保护您的网站。
Install the free baseline now, or send your site context for a focused technical walkthrough.
Protect my site freeRunning a commercial site? You can start free, but we recommend Pro for runtime controls.