Title: Banana Defender Author: flexxdev Published: 9 سبتمبر، 2026 Last modified: 11 سبتمبر، 2026 --- البحث عن الإضافات ![](https://ps.w.org/banana-defender/assets/banner-772x250.png?rev=3688360) ![](https://ps.w.org/banana-defender/assets/icon-256x256.png?rev=3688360) # Banana Defender بواسطة [flexxdev](https://profiles.wordpress.org/flexxdev/) [تنزيل](https://downloads.wordpress.org/plugin/banana-defender.2026.9.111.zip) * [تفاصيل](https://ar.wordpress.org/plugins/banana-defender/#description) * [المراجعات](https://ar.wordpress.org/plugins/banana-defender/#reviews) * [التنصيب](https://ar.wordpress.org/plugins/banana-defender/#installation) * [التطوير](https://ar.wordpress.org/plugins/banana-defender/#developers) [الدعم](https://wordpress.org/support/plugin/banana-defender/) ## الوصف Banana Defender protects your WordPress site with enterprise-grade security features— fully GDPR-compliant, lightweight, and without any cloud dependency. #### Why Banana Defender? Most WordPress security plugins are built for the US market and rely on external cloud services. Banana Defender is different: * **Made in Germany** — Developed by flexxDEV with GDPR/DSGVO compliance as a core design principle * **No Cloud Dependency** — All security checks run locally on your server * **Virtual Patching for Free** — Includes automatic vulnerability patching at no cost * **Lightweight** — Minimal performance impact, no bloated feature set #### Free Features * **Banana Shield** — Automatic virtual patching (WAF) that protects against known vulnerabilities * **Attack Surface Reduction** — 7 hardening rules to minimize your WordPress attack surface * **Malware Scanner** — Detect suspicious files and code patterns * **Login Protection** — Brute-force blocking with configurable lockout thresholds * **Two-Factor Authentication** — TOTP-based 2FA for administrators * **Math CAPTCHA** — Bot protection for your login form * **Custom Login URL** — Hide your wp-login.php from automated attacks * **Security Headers** — Automatically set recommended HTTP security headers * **File Integrity Monitoring** — Detect unauthorized changes to WordPress core files * **IP Blacklist & Whitelist** — Manual IP access control * **Security Score Dashboard** — At-a-glance overview of your site’s security posture * **Setup Wizard** — Get started in under 2 minutes #### Pro Features (Single License) * **E-Mail Security Alerts** — Instant notifications for attacks, malware findings, and file changes * **Scheduled Automatic Scans** — Daily or weekly malware and integrity scans on autopilot * **Audit Log** — Complete security event log with 365-day retention * **2FA for All User Roles** — Extend two-factor authentication to editors, authors, and all roles * **Hourly Vulnerability DB** — Vulnerability database updated every hour instead of only on plugin updates * **Real-time WAF Rules** — WAF rule updates from the server in real-time * **Auto-Repair & Cleanup** — Automatic malware removal and file restoration * **Plugin & Theme Integrity Check** — Verify plugins and themes against their originals * **Rate Limiting** — Anti-DoS protection with configurable request limits * **Priority Support** — Direct email support from the developer #### Agency Features (Multi-Site License) Everything in Pro, plus: * **Geo-Blocking** — Block traffic from countries with no legitimate visitors * **Advanced Bot Detection** — Distinguish real visitors from automated attacks * **Passkeys / WebAuthn** — Passwordless biometric authentication * **Session Management** — Monitor and control active user sessions * **CSP Builder** — Visual Content Security Policy configuration * **Custom Firewall Rules** — Create your own WAF rules * **Live Traffic Viewer** — Real-time traffic monitoring and analysis * **PDF Security Reports** — Exportable security reports for clients * **Syslog / Fail2Ban Integration** — Connect to external security infrastructure * **Salt & Key Rotation** — Automated WordPress security key rotation * **Advanced Activity Log** — Extended logging with CSV export and filtering * **White-Label** — Custom branding for agencies * **WP-CLI & Import/Export** — Command-line management and configuration portability #### Privacy & GDPR Banana Defender is designed with privacy in mind. No data leaves your server unless you explicitly opt in to usage analytics via Freemius. All security features work entirely offline. Made in Germany by [flexxDEV](https://flexx-dev.com). #### Legal * [Terms of Service / AGB / EULA](https://flexx-dev.com/terms-agb/) * [Privacy Policy / Datenschutzerklärung](https://flexx-dev.com/privacy-policy/) * [Impressum](https://flexx-dev.com/impressum/) ### External Services This plugin optionally connects to the following external services: #### Freemius When activated, Banana Defender uses the [Freemius](https://freemius.com/) SDK for license management and optional usage analytics. **No data is transmitted without explicit user consent** — an opt-in screen is shown after plugin activation. Data sent after opt-in: site URL, WordPress version, PHP version, plugin version, user email and name. * [Freemius Terms of Service](https://freemius.com/terms/) * [Freemius Privacy Policy](https://freemius.com/privacy/) #### Vulnerability Database Banana Defender downloads vulnerability data from the flexxDEV update server to power the virtual patching engine. This connection transmits only the plugin version and WordPress version. No personal or site-identifying data is sent. * Server: flexx-hosting.de * [flexxDEV Privacy Policy](https://flexx-dev.com/privacy-policy/) #### WordPress.org API The File Integrity Monitoring feature retrieves checksums from api.wordpress.org to verify WordPress core files. This transmits your WordPress version and locale. No personal data is sent. * [WordPress.org Privacy Policy](https://wordpress.org/about/privacy/) ### Haftungsausschluss / Disclaimer #### Deutsch HAFTUNGSAUSSCHLUSS — BITTE SORGFAELTIG LESEN Dieses Plugin wird “wie besehen” (“as is”) zur Verfuegung gestellt. Die Nutzung erfolgt ausschliesslich auf eigene Gefahr und Verantwortung des Website-Betreibers. 1. KEINE GARANTIE FUER ABSOLUTE SICHERHEIT Kein Sicherheits-Plugin kann einen vollstaendigen oder absoluten Schutz vor Cyberangriffen, Datenverlust, Malware-Infektionen, unbefugtem Zugriff oder sonstigen Sicherheitsvorfaellen garantieren. Banana Defender ist eine ergaenzende Sicherheitsmassnahme und kein Ersatz fuer ein umfassendes Sicherheitskonzept, regelmaessige Backups, sichere Passwoerter, aktualisierte Software und professionelle Sicherheitsberatung. 2. HAFTUNGSBESCHRAENKUNG Im Rahmen der gesetzlich zulaessigen Grenzen uebernimmt der Herausgeber (flexxDEV / Bastian Ranft) keine Haftung fuer: * Schaeden durch Sicherheitsvorfaelle trotz aktiviertem Plugin, einschliesslich Datenverlust, Datendiebstahl, Website-Defacement, Malware-Infektionen oder Betriebsunterbrechungen; * Schaeden durch falsch-positive oder falsch-negative Ergebnisse der Malware- oder Datei-Integritaetspruefung; * Schaeden durch fehlerhafte, unvollstaendige oder unterlassene Konfiguration durch den Website-Betreiber; * Inkompatibilitaeten mit anderen Plugins, Themes, Hosting-Umgebungen oder Server- Konfigurationen; * Schaeden durch Ausfall, Verzoegerung oder Nichtzustellung von Sicherheitsbenachrichtigungen; * Mittelbare oder unmittelbare Folgeschaeden jeglicher Art, einschliesslich entgangener Gewinne, Umsatzverluste oder Reputationsschaeden. 1. VERANTWORTUNG DES NUTZERS Der Website-Betreiber ist allein verantwortlich fuer: * Die ordnungsgemaesse Konfiguration und Wartung des Plugins; * Die regelmaessige Erstellung und Ueberpruefung von Backups; * Die zeitnahe Aktualisierung aller Software-Komponenten (WordPress, Plugins, Themes, PHP); * Die angemessene Reaktion auf Sicherheitswarnungen und Scan-Ergebnisse; * Die Einhaltung geltender Datenschutzgesetze (DSGVO, BDSG) im Zusammenhang mit den vom Plugin verarbeiteten Daten; * Die Einholung professioneller Sicherheitsberatung bei erhoehtem Schutzbedarf. 1. KEINE RECHTSBERATUNG Informationen und Empfehlungen innerhalb des Plugins stellen keine Rechts-, Sicherheits- oder IT-Beratung dar. Bei rechtlichen Fragen oder konkreten Sicherheitsvorfaellen wenden Sie sich an qualifizierte Fachleute. 2. GEWAEHRLEISTUNGSAUSSCHLUSS Soweit gesetzlich zulaessig, wird jede ausdrueckliche oder stillschweigende Gewaehrleistung ausgeschlossen, einschliesslich, aber nicht beschraenkt auf die Gewaehrleistung der Marktgaengigkeit, Eignung fuer einen bestimmten Zweck und Nichtverletzung von Rechten Dritter. 3. GESETZLICH ZWINGENDE HAFTUNG Dieser Haftungsausschluss beruehrt nicht die gesetzlich zwingende Haftung, insbesondere nicht die Haftung fuer Vorsatz, grobe Fahrlaessigkeit, Verletzung wesentlicher Vertragspflichten (Kardinalpflichten) sowie die Haftung nach dem Produkthaftungsgesetz und fuer Schaeden aus der Verletzung des Lebens, des Koerpers oder der Gesundheit. #### English DISCLAIMER — PLEASE READ CAREFULLY This plugin is provided “as is” without warranty of any kind. Use is entirely at the website operator’s own risk and responsibility. 1. NO GUARANTEE OF ABSOLUTE SECURITY No security plugin can guarantee complete or absolute protection against cyber attacks, data loss, malware infections, unauthorized access, or other security incidents. Banana Defender is a supplementary security measure and not a substitute for a comprehensive security concept, regular backups, strong passwords, updated software, and professional security consulting. 2. LIMITATION OF LIABILITY To the fullest extent permitted by applicable law, the publisher (flexxDEV / Bastian Ranft) shall not be liable for: * Damages resulting from security incidents despite the plugin being active, including data loss, data theft, website defacement, malware infections, or business interruption; * Damages resulting from false positive or false negative results of malware or file integrity scans; * Damages resulting from incorrect, incomplete, or omitted configuration by the website operator; * Incompatibilities with other plugins, themes, hosting environments, or server configurations; * Damages resulting from failure, delay, or non-delivery of security notifications; * Any direct, indirect, incidental, special, consequential, or exemplary damages, including but not limited to loss of profits, revenue, or reputation. 1. USER RESPONSIBILITY The website operator is solely responsible for: * Proper configuration and maintenance of the plugin; * Regular creation and verification of backups; * Timely updates of all software components (WordPress, plugins, themes, PHP); * Appropriate response to security warnings and scan results; * Compliance with applicable data protection laws (GDPR) in connection with data processed by the plugin; * Obtaining professional security advice where enhanced protection is required. 1. NO PROFESSIONAL ADVICE Information and recommendations within the plugin do not constitute legal, security, or IT consulting advice. For legal questions or specific security incidents, consult qualified professionals. 2. WARRANTY DISCLAIMER To the maximum extent permitted by applicable law, all express or implied warranties are disclaimed, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement. 3. MANDATORY STATUTORY LIABILITY This disclaimer does not affect mandatory statutory liability, in particular liability for intent, gross negligence, breach of essential contractual obligations, liability under product liability law, and liability for damages arising from injury to life, body, or health. ## التنصيب 1. Upload the `banana-defender` folder to `/wp-content/plugins/` 2. Activate the plugin through the ‘Plugins’ menu in WordPress 3. Navigate to **Banana Defender** in the admin sidebar 4. Follow the Setup Wizard to configure your security settings ## الأسئلة المتكررّة ### Does Banana Defender slow down my website? No. Banana Defender is designed to be lightweight. All security checks run efficiently and have minimal impact on page load times. ### Is Banana Defender GDPR-compliant? Yes. Banana Defender was built with GDPR/DSGVO compliance as a core principle. No data is sent to external servers without explicit opt-in. All security features work entirely on your server. ### What is Virtual Patching? Virtual Patching (also known as WAF rules) automatically protects your site against known plugin and theme vulnerabilities — even before the developer releases an update. Banana Defender offers this feature for free. ### Do I need the Pro or Agency version? The free version covers all essential security features including Virtual Patching. Pro adds e-mail alerts, scheduled scans, audit logging, auto-repair, and hourly vulnerability updates — ideal for anyone who wants automated protection. Agency adds advanced tools like geo-blocking, bot detection, and white-label — ideal for professionals managing multiple client sites. ### Can I use Banana Defender alongside other security plugins? We recommend using only one security plugin at a time to avoid conflicts. Banana Defender covers all essential security features, so no additional security plugin should be necessary. ### Where can I get support? Free users can use the [WordPress.org support forum](https://wordpress.org/support/plugin/banana-defender/). Pro and Agency customers receive priority email support directly from the developer. ## المراجعات لا توجد مراجعات لهذه الإضافة. ## المساهمون والمطوّرون “Banana Defender” هو برنامج مفتوح المصدر. وقد ساهم هؤلاء الأشخاص بالأسفل في هذه الإضافة. المساهمون * [ flexxdev ](https://profiles.wordpress.org/flexxdev/) [ترجمة ”Banana Defender“ إلى لغتك.](https://translate.wordpress.org/projects/wp-plugins/banana-defender) ### مُهتم بالتطوير؟ [تصفّح الشفرة](https://plugins.trac.wordpress.org/browser/banana-defender/)، تحقق من [مستودع SVN](https://plugins.svn.wordpress.org/banana-defender/)، أو الاشتراك في [سجل التطوير](https://plugins.trac.wordpress.org/log/banana-defender/) بواسطة [RSS](https://plugins.trac.wordpress.org/log/banana-defender/?limit=100&mode=stop_on_copy&format=rss). ## سجل التغييرات #### 2026.9.106 * Admin UI: All tabs now use consistent master-detail sidebar layout * License & Support tab with Account, Plans & Pricing, Support navigation * Scanner & Reports tab with Scanner, Log, Notifications navigation * Freemius sidebar items (Konto, Kontakt, Preise) removed from WordPress admin menu * Plans & Pricing links to flexx-dev.com website instead of Freemius pricing page * VP log table: fixed URL column display on narrow screens * Tab “Sicherheitsübersicht” renamed to “Übersicht” #### 2026.9.100 * Setup wizard no longer opens automatically on page load #### 2026.9.99 * Fix: Freemius pricing page on hosts with ModSecurity (GETPOST conversion) * Default currency set to EUR #### 2026.9.97 * Pro upgrade banner with sliding feature highlights above tab navigation #### 2026.9.96 * OPcache invalidation for reliable deployment #### 2026.9.95 * Freemius SDK integration for Pro licensing and updates * Pro features (Notifications, Audit Log, 2FA all roles) now use Freemius __premium_only code stripping * Added Pro badges, upgrade CTAs, and lock icons for premium features in admin UI * All premium class references wrapped in class_exists() guards for free build safety * Removed self-hosted updater (replaced by WordPress.org + Freemius update system) * Renamed Ultimate branding to Pro throughout #### 2026.9.93 * Added Legal section with links to Terms/AGB/EULA, Privacy Policy, and Impressum * Added WordPress.org API disclosure for File Integrity Monitoring checksums * Updated tier naming from “Ultimate” to “Pro / Agency” #### 2026.8.88 * Restructured feature tiers: Free, Pro (Single License), Agency (Multi-Site License) * Moved Audit Log, E-Mail Notifications, and full-role 2FA to Pro tier * Free version 2FA now limited to administrators only #### 2026.8.87 * Removed email template style tags (review compliance) #### 2026.8.86 * Prefix renamed from bd_ to banade_ for WordPress.org compliance * Removed self-hosted update checker * Inline scripts and styles converted to wp_enqueue * File paths updated to use WP_PLUGIN_DIR * Fixed privacy policy URL * Shortened readme short description to under 150 characters * Removed exclusivity claims from readme * Unified log retention to 90 days for all users #### 2026.8.82 * Virtual Patching engine with automatic vulnerability protection * File Integrity Monitoring for WordPress core files * Attack Surface Reduction with 7 configurable rules * Freemius SDK integration for premium licensing #### 2026.8.69 * Header: Original horizontal Banana Defender logo * Wizard section: Icon and button aligned to top #### 2026.8.68 * Wizard colors changed from green to purple (matching BD logo) * Banana Defender logo integrated in header, wizard section and footer #### 2026.8.67 * Fix: Email field in Wizard Step 5 no longer overflows on mobile #### 2026.8.66 * Wizard texts completely rewritten for less experienced admins * Enable all button moved to section headers * Comprehensive mobile responsivity for the entire plugin #### 2026.8.3 * Fix: DB migration now runs on plugin update (not just first activation) #### 2026.8.2 * Login Protection — Brute-Force protection with IP lockout #### 2026.8.1 * Initial release — Plugin skeleton with admin UI ## ميتا Meta * Version **2026.9.111** * Last updated **قبل 5 ساعات** * Active installations **أقل من 10** * WordPress version ** 5.6 أو أعلى ** * Tested up to **7.1** * PHP version ** 7.4 أو أعلى ** * Language * [English (US)](https://wordpress.org/plugins/banana-defender/) * Tags * [firewall](https://ar.wordpress.org/plugins/tags/firewall/)[login](https://ar.wordpress.org/plugins/tags/login/) [malware](https://ar.wordpress.org/plugins/tags/malware/)[protection](https://ar.wordpress.org/plugins/tags/protection/) [security](https://ar.wordpress.org/plugins/tags/security/) * [عرض متقدم](https://ar.wordpress.org/plugins/banana-defender/advanced/) ## التقييم لم يتم تقديم أي مراجعات بعد. [Your review](https://wordpress.org/support/plugin/banana-defender/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/banana-defender/reviews/) ## المساهمون * [ flexxdev ](https://profiles.wordpress.org/flexxdev/) ## الدعم لديك شيء لتقوله؟ بحاجة الى مساعدة؟ [عرض منتدى الدعم](https://wordpress.org/support/plugin/banana-defender/)