AI Joomla Security

A complete, enterprise-grade security suite for Joomla 4, 5 & 6. AI Joomla Security monitors, protects, and automatically repairs your site — from real-time threat blocking to file-integrity scanning and one-click remediation.

🛡 Security Engine (System Plugin)

• Brute-Force Protection — Auto-bans IPs that exceed failed-login attempts (configurable threshold & lockout duration). Every ban is logged with timestamp, IP, and country.
• Country Blocking — Block entire countries by ISO code, or run in allow-only mode to whitelist specific regions. A built-in Country Picker slide-out panel groups all 195+ countries by region in accordion sections with toggle switches — no manual code lookup needed.
• Manual IP Blocklist & Allowlist — Permanently block or whitelist individual IPs and full CIDR ranges.
• Security Response Headers — Automatically injects X-Frame-Options, X-Content-Type-Options: nosniff, Referrer-Policy, Strict-Transport-Security (HSTS), and Content-Security-Policy on every page response. Full per-header configuration including HSTS max-age, includeSubDomains, and preload.
• Audit Log — Tamper-evident log of all security events: IP blocks, login failures, country rejections, and header changes.
• Secret Admin URL — Hide /administrator from bots and attackers. Set a secret key; visitors must first visit ?adminkey=YOUR_KEY to unlock the login page. Everyone else sees a clean 404 or is silently redirected — revealing nothing.

🔍 File Integrity Scanner

• Baseline Generation — Snapshot your site's file state (SHA-256 hashes) as a secure reference point.
• Change Detection — Detect Modified, Added, and Deleted files against the baseline after any update or event.
• File Diff Viewer — Instantly see a line-by-line diff of any changed file directly inside Joomla's admin panel.
• Official Core Check — No baseline needed. Compares your Joomla core files directly against the official Joomla GitHub source for your exact installed version. Works on already-compromised sites.
• One-Click Restore — Replace any modified or suspicious core file with the official version fetched live from Joomla's GitHub. Composer vendor libraries are correctly identified and excluded.

🚨 Joomla 911 (AI Malware Scanner — Pro/Developer/Lifetime)

• Local Signature Scan — Scans every PHP/JS/.htaccess file on the server against a 17-rule malware signature library (webshells, backdoors, obfuscated redirects, cloaking). Nothing leaves the server unless a file is actually flagged.
• AI Second Opinion — Flagged snippets are analyzed by Claude for a verdict, confidence score, and a suggested clean rewrite — bring your own Anthropic key, or use the built-in managed key.
• One-Click Disinfection — Apply the AI's cleaned code (auto-backed up first), or safely delete pure-malware files — the whole extension is zipped as a backup first if the file lives inside one.
• Certificate of Cleanliness — Once every flagged file is resolved, issue a publicly verifiable certificate to share with visitors or clients.

🔧 Quick-Fix Tools

• Fix .htaccess — One-click reset of .htaccess to the official Joomla default for your installed version. Previous file is automatically backed up as .htaccess.aijsbak.{timestamp} before overwriting.

📊 Security Dashboard

• Live Security Engine status panel with engine on/off indicator
• Real-time active IP-ban count and recent bans table
• Country blocking and brute-force configuration status at a glance
• One-click navigation to all security tools

Included Extensions

• com_aijoomlasecurity — Security component (File Scanner, Dashboard)
• plg_system_aijssecurity — System plugin (Security Engine, IP/Country blocking, Security Headers)

Compatibility

Joomla 4, 5 & 6  |  PHP 8.0+  |  Apache, LiteSpeed, Nginx

One download, four license options — Free, Pro, Developer & Lifetime. Every install includes the full feature set above and starts with an automatic 7-day full-access trial. Register a license key (a Free key works too) any time in Components → AI Joomla Security → Options to keep using the extension and receive automatic updates.