Behavioral scoring (PRO-only scoring + threshold enforcement)

Feature Behavioral scoring (PRO-only scoring + threshold enforcement) Description Behavioral scoring enforcement. How it works AegisWAF applies this capability inside the Bot Control module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → Bot Control Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Bot Control logging (allow + rate_limit events with matched pattern and scope)

Feature Bot Control logging (allow + rate_limit events with matched pattern and scope) Description Log bot decisions and matches. How it works AegisWAF applies this capability inside the Bot Control module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → Bot Control Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Per-path thresholds (wildcards supported; per-path limit/min override)

Feature Per-path thresholds (wildcards supported; per-path limit/min override) Description Override limits per path pattern. How it works AegisWAF applies this capability inside the Bot Control module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → Bot Control Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Bad User-Agent blocking (token contains match; blocks)

Feature Bad User-Agent blocking (token contains match; blocks) Description Block known bad UA tokens. How it works AegisWAF applies this capability inside the Bot Control module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → Bot Control Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Default rate limit per minute (enforced per IP + path + minute bucket)

Feature Default rate limit per minute (enforced per IP + path + minute bucket) Description Per-IP+path rate limits in a time bucket. How it works AegisWAF applies this capability inside the Bot Control module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → Bot Control Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Enable Bot Control (front requests + REST requests enforcement)

Feature Enable Bot Control (front requests + REST requests enforcement) Description Master switch for bot controls. How it works AegisWAF applies this capability inside the Bot Control module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → Bot Control Enable/Disable: Use the toggle on this screen to turn it ON or OFF, then click Save. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Visual Intelligence charts (7-day trend, category breakdown, top routes, action outcomes)

Feature Visual Intelligence charts (7-day trend, category breakdown, top routes, action outcomes) Description WAF charts for trends and outcomes. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Import/Export WAF Rules JSON (move rules between sites)

Feature Import/Export WAF Rules JSON (move rules between sites) Description Move custom rules between sites. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

WP Default “Revert” snapshot behavior after applying presets

Feature WP Default “Revert” snapshot behavior after applying presets Description Revert-to-default snapshot for presets. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Rule Sets presets: WP Login Protection / XML-RPC Hard Block / WP-JSON Throttle

Feature Rule Sets presets: WP Login Protection / XML-RPC Hard Block / WP-JSON Throttle Description Packaged presets for common WP surfaces. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

FAQs – Page 43 – Aegisify, Inc. – Free WordPress Security Audit and Scans with Agentic AI

Categories: AegisWAF
Behavioral scoring (PRO-only scoring + threshold enforcement)
read more
Categories: AegisWAF
Bot Control logging (allow + rate_limit events with matched pattern and scope)
read more
Categories: AegisWAF
Per-path thresholds (wildcards supported; per-path limit/min override)
read more
Categories: AegisWAF
Bad User-Agent blocking (token contains match; blocks)
read more
Categories: AegisWAF
Default rate limit per minute (enforced per IP + path + minute bucket)
read more
Categories: AegisWAF
Enable Bot Control (front requests + REST requests enforcement)
read more
Categories: AegisWAF
Visual Intelligence charts (7-day trend, category breakdown, top routes, action outcomes)
read more
Categories: AegisWAF
Import/Export WAF Rules JSON (move rules between sites)
read more
Categories: AegisWAF
WP Default “Revert” snapshot behavior after applying presets
read more
Categories: AegisWAF
Rule Sets presets: WP Login Protection / XML-RPC Hard Block / WP-JSON Throttle
read more

News & Events