About
About
Who builds Coxwall, and how.
How the product is built
-
Open source
Coxwall Free is GPL software. You can read every line that runs on your server.
-
Before WordPress
The firewall uses no WordPress functions, so it keeps working even when a plugin or theme is broken.
-
Signed data
Pro feeds are Ed25519-signed; sites reject anything not signed by our key.
-
Tested widely
Apache and nginx, MariaDB and SQLite, multisite, read-only wp-content and restricted PHP functions.
-
Fails safe
If our server is unreachable or a license lapses, Free protection keeps running and nothing is deleted.
-
No tracking in Free
The Free plugin sends us nothing. Pro sends only what licensing and vulnerability checks need.
Security architecture
Built so a bad request never reaches WordPress
The firewall loads as a must-use plugin — or, with Extended protection, before wp-config.php — and decides before WordPress, themes or other plugins run.
-
Runs before WordPress
No WordPress functions are needed, so attacks stop before themes, plugins or the database are touched.
-
Signed cloud data
Signatures, rule packs, vulnerabilities, threat intel and GeoIP are Ed25519-signed. Unsigned feeds are refused.
-
Domain-bound licenses
Activation tokens are bound to your site and refreshed daily. Pro download links expire after 10 minutes.
-
Fails safe
Server unreachable? 14-day grace period. License ended? Free protection and the last rules keep running.
- Incoming request
-
Coxwall firewall — before WordPress
- AllowlistFree
- BlocklistFree
- CountryPro
- Rate limitsPro
- BotsPro
- 29 firewall rules + Pro packFree
- Custom rulesPro
- WordPress, themes & plugins
- Pro: signed feeds verified, then applied to the firewall and scanner
Protect your site with Coxwall today
Install the free plugin in a minute. Upgrade to Pro whenever you want — it installs itself.
- 14-day refund
- Instant license delivery
- Secure checkout
- GPL licensed