Block unauthenticated GET access to /wp/v2/users* (user enumeration control)

Feature Block unauthenticated GET access to /wp/v2/users* (user enumeration control) Description User enumeration control. How it works AegisWAF applies this capability inside the API Shield module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → API Shield Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Only enforce on unauthenticated REST requests (logged-in bypass)

Feature Only enforce on unauthenticated REST requests (logged-in bypass) Description Optionally bypass logged-in traffic. How it works AegisWAF applies this capability inside the API Shield module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → API Shield Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Enable REST API protection layer (REST inspection enforcement)

Feature Enable REST API protection layer (REST inspection enforcement) Description Enable REST enforcement. How it works AegisWAF applies this capability inside the API Shield module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → API Shield Enable/Disable: Use the toggle on this screen to turn it ON or OFF, then click Save. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Enable WordPress protection layer (master switch)

Feature Enable WordPress protection layer (master switch) Description Master switch for WP protection layer. How it works AegisWAF applies this capability inside the API Shield module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → API Shield Enable/Disable: Use the toggle on this screen to turn it ON or OFF, then click Save. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Bot analytics charts (24h trend, 7d trend, radar, UA, etc.)

Feature Bot analytics charts (24h trend, 7d trend, radar, UA, etc.) Description Bot analytics visualizations. How it works AegisWAF applies this capability inside the Bot Control module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → Bot Control Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

MaxMind MMDB path setting (framework for provider usage)

Feature MaxMind MMDB path setting (framework for provider usage) Description Path to MaxMind DB for lookups. How it works AegisWAF applies this capability inside the Bot Control module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → Bot Control Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Geo/ASN provider framework (hook/provider selection support)

Feature Geo/ASN provider framework (hook/provider selection support) Description Provider abstraction for geo/asn. How it works AegisWAF applies this capability inside the Bot Control module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → Bot Control Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Only block geos/ASNs you are confident are abusive for your site; log first if uncertain.

ASN blocking enforcement (PRO-only; requires provider)

Feature ASN blocking enforcement (PRO-only; requires provider) Description ASN blocks with provider. How it works AegisWAF applies this capability inside the Bot Control module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → Bot Control Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Only block geos/ASNs you are confident are abusive for your site; log first if uncertain.

Country blocking enforcement (PRO-only; requires provider)

Feature Country blocking enforcement (PRO-only; requires provider) Description Geo country blocks. How it works AegisWAF applies this capability inside the Bot Control module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → Bot Control Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Only block geos/ASNs you are confident are abusive for your site; log first if uncertain.

IP / CIDR blocklist enforcement (PRO-only)

Feature IP / CIDR blocklist enforcement (PRO-only) Description Block specific IPs/CIDRs. How it works AegisWAF applies this capability inside the Bot Control module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → Bot Control Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

FAQs – Page 42 – Aegisify, Inc. – Free WordPress Security Audit and Scans with Agentic AI

Categories: AegisWAF
Block unauthenticated GET access to /wp/v2/users* (user enumeration control)
read more
Categories: AegisWAF
Only enforce on unauthenticated REST requests (logged-in bypass)
read more
Categories: AegisWAF
Enable REST API protection layer (REST inspection enforcement)
read more
Categories: AegisWAF
Enable WordPress protection layer (master switch)
read more
Categories: AegisWAF
Bot analytics charts (24h trend, 7d trend, radar, UA, etc.)
read more
Categories: AegisWAF
MaxMind MMDB path setting (framework for provider usage)
read more
Categories: AegisWAF
Geo/ASN provider framework (hook/provider selection support)
read more
Categories: AegisWAF
ASN blocking enforcement (PRO-only; requires provider)
read more
Categories: AegisWAF
Country blocking enforcement (PRO-only; requires provider)
read more
Categories: AegisWAF
IP / CIDR blocklist enforcement (PRO-only)
read more

News & Events