內容簡介
Banana Defender 是一款針對 WordPress 網站提供企業級安全防護的外掛，具備完全符合 GDPR 的設計原則，輕量且無需依賴雲端服務，確保網站安全無虞。
【主要功能】
• Banana Shield — 自動虛擬修補已知漏洞
• 攻擊面縮減 — 7 條強化規則降低攻擊面
• 惡意軟體掃描 — 偵測可疑檔案和程式碼模式
• 登入保護 — 設定鎖定閾值以阻擋暴力破解
• 雙重身份驗證 — 基於 TOTP 的 2FA
• 整合檔案監控 — 偵測核心檔案的未授權變更
外掛標籤
開發者團隊
📦 歷史版本下載
原文外掛簡介
Banana Defender protects your WordPress site with enterprise-grade security features — fully GDPR-compliant, lightweight, and without any cloud dependency.
Why Banana Defender?
Most WordPress security plugins are built for the US market and rely on external cloud services. Banana Defender is different:
Made in Germany — Developed by flexxDEV with GDPR/DSGVO compliance as a core design principle
No Cloud Dependency — All security checks run locally on your server
Virtual Patching for Free — Includes automatic vulnerability patching at no cost
Lightweight — Minimal performance impact, no bloated feature set
Free Features
Banana Shield — Automatic virtual patching (WAF) that protects against known vulnerabilities
Attack Surface Reduction — 7 hardening rules to minimize your WordPress attack surface
Malware Scanner — Detect suspicious files and code patterns
Login Protection — Brute-force blocking with configurable lockout thresholds
Two-Factor Authentication — TOTP-based 2FA for administrators
Math CAPTCHA — Bot protection for your login form
Custom Login URL — Hide your wp-login.php from automated attacks
Security Headers — Automatically set recommended HTTP security headers
File Integrity Monitoring — Detect unauthorized changes to WordPress core files
IP Blacklist & Whitelist — Manual IP access control
Security Score Dashboard — At-a-glance overview of your site’s security posture
Setup Wizard — Get started in under 2 minutes
Pro Features (Single License)
E-Mail Security Alerts — Instant notifications for attacks, malware findings, and file changes
Scheduled Automatic Scans — Daily or weekly malware and integrity scans on autopilot
Audit Log — Complete security event log with 365-day retention
2FA for All User Roles — Extend two-factor authentication to editors, authors, and all roles
Hourly Vulnerability DB — Vulnerability database updated every hour instead of only on plugin updates
Real-time WAF Rules — WAF rule updates from the server in real-time
Auto-Repair & Cleanup — Automatic malware removal and file restoration
Plugin & Theme Integrity Check — Verify plugins and themes against their originals
Rate Limiting — Anti-DoS protection with configurable request limits
Priority Support — Direct email support from the developer
Agency Features (Multi-Site License)
Everything in Pro, plus:
Geo-Blocking — Block traffic from countries with no legitimate visitors
Advanced Bot Detection — Distinguish real visitors from automated attacks
Passkeys / WebAuthn — Passwordless biometric authentication
Session Management — Monitor and control active user sessions
CSP Builder — Visual Content Security Policy configuration
Custom Firewall Rules — Create your own WAF rules
Live Traffic Viewer — Real-time traffic monitoring and analysis
PDF Security Reports — Exportable security reports for clients
Syslog / Fail2Ban Integration — Connect to external security infrastructure
Salt & Key Rotation — Automated WordPress security key rotation
Advanced Activity Log — Extended logging with CSV export and filtering
White-Label — Custom branding for agencies
WP-CLI & Import/Export — Command-line management and configuration portability
Privacy & GDPR
Banana Defender is designed with privacy in mind. No data leaves your server unless you explicitly opt in to usage analytics via Freemius. All security features work entirely offline.
Made in Germany by flexxDEV.
Legal
Terms of Service / AGB / EULA
Privacy Policy / Datenschutzerklärung
Impressum
External Services
This plugin optionally connects to the following external services:
Freemius
When activated, Banana Defender uses the Freemius SDK for license management and optional usage analytics. No data is transmitted without explicit user consent — an opt-in screen is shown after plugin activation.
Data sent after opt-in: site URL, WordPress version, PHP version, plugin version, user email and name.
Freemius Terms of Service
Freemius Privacy Policy
Vulnerability Database
Banana Defender downloads vulnerability data from the flexxDEV update server to power the virtual patching engine. This connection transmits only the plugin version and WordPress version. No personal or site-identifying data is sent.
Server: flexx-hosting.de
flexxDEV Privacy Policy
WordPress.org API
The File Integrity Monitoring feature retrieves checksums from api.wordpress.org to verify WordPress core files. This transmits your WordPress version and locale. No personal data is sent.
WordPress.org Privacy Policy
Haftungsausschluss / Disclaimer
Deutsch
HAFTUNGSAUSSCHLUSS — BITTE SORGFAELTIG LESEN
Dieses Plugin wird “wie besehen” (“as is”) zur Verfuegung gestellt. Die Nutzung erfolgt ausschliesslich auf eigene Gefahr und Verantwortung des Website-Betreibers.
KEINE GARANTIE FUER ABSOLUTE SICHERHEIT
Kein Sicherheits-Plugin kann einen vollstaendigen oder absoluten Schutz vor Cyberangriffen, Datenverlust, Malware-Infektionen, unbefugtem Zugriff oder sonstigen Sicherheitsvorfaellen garantieren. Banana Defender ist eine ergaenzende Sicherheitsmassnahme und kein Ersatz fuer ein umfassendes Sicherheitskonzept, regelmaessige Backups, sichere Passwoerter, aktualisierte Software und professionelle Sicherheitsberatung.
HAFTUNGSBESCHRAENKUNG
Im Rahmen der gesetzlich zulaessigen Grenzen uebernimmt der Herausgeber (flexxDEV / Bastian Ranft) keine Haftung fuer:
Schaeden durch Sicherheitsvorfaelle trotz aktiviertem Plugin, einschliesslich Datenverlust, Datendiebstahl, Website-Defacement, Malware-Infektionen oder Betriebsunterbrechungen;
Schaeden durch falsch-positive oder falsch-negative Ergebnisse der Malware- oder Datei-Integritaetspruefung;
Schaeden durch fehlerhafte, unvollstaendige oder unterlassene Konfiguration durch den Website-Betreiber;
Inkompatibilitaeten mit anderen Plugins, Themes, Hosting-Umgebungen oder Server-Konfigurationen;
Schaeden durch Ausfall, Verzoegerung oder Nichtzustellung von Sicherheitsbenachrichtigungen;
Mittelbare oder unmittelbare Folgeschaeden jeglicher Art, einschliesslich entgangener Gewinne, Umsatzverluste oder Reputationsschaeden.
VERANTWORTUNG DES NUTZERS
Der Website-Betreiber ist allein verantwortlich fuer:
Die ordnungsgemaesse Konfiguration und Wartung des Plugins;
Die regelmaessige Erstellung und Ueberpruefung von Backups;
Die zeitnahe Aktualisierung aller Software-Komponenten (WordPress, Plugins, Themes, PHP);
Die angemessene Reaktion auf Sicherheitswarnungen und Scan-Ergebnisse;
Die Einhaltung geltender Datenschutzgesetze (DSGVO, BDSG) im Zusammenhang mit den vom Plugin verarbeiteten Daten;
Die Einholung professioneller Sicherheitsberatung bei erhoehtem Schutzbedarf.
KEINE RECHTSBERATUNG
Informationen und Empfehlungen innerhalb des Plugins stellen keine Rechts-, Sicherheits- oder IT-Beratung dar. Bei rechtlichen Fragen oder konkreten Sicherheitsvorfaellen wenden Sie sich an qualifizierte Fachleute.
GEWAEHRLEISTUNGSAUSSCHLUSS
Soweit gesetzlich zulaessig, wird jede ausdrueckliche oder stillschweigende Gewaehrleistung ausgeschlossen, einschliesslich, aber nicht beschraenkt auf die Gewaehrleistung der Marktgaengigkeit, Eignung fuer einen bestimmten Zweck und Nichtverletzung von Rechten Dritter.
GESETZLICH ZWINGENDE HAFTUNG
Dieser Haftungsausschluss beruehrt nicht die gesetzlich zwingende Haftung, insbesondere nicht die Haftung fuer Vorsatz, grobe Fahrlaessigkeit, Verletzung wesentlicher Vertragspflichten (Kardinalpflichten) sowie die Haftung nach dem Produkthaftungsgesetz und fuer Schaeden aus der Verletzung des Lebens, des Koerpers oder der Gesundheit.
English
DISCLAIMER — PLEASE READ CAREFULLY
This plugin is provided “as is” without warranty of any kind. Use is entirely at the website operator’s own risk and responsibility.
NO GUARANTEE OF ABSOLUTE SECURITY
No security plugin can guarantee complete or absolute protection against cyber attacks, data loss, malware infections, unauthorized access, or other security incidents. Banana Defender is a supplementary security measure and not a substitute for a comprehensive security concept, regular backups, strong passwords, updated software, and professional security consulting.
LIMITATION OF LIABILITY
To the fullest extent permitted by applicable law, the publisher (flexxDEV / Bastian Ranft) shall not be liable for:
Damages resulting from security incidents despite the plugin being active, including data loss, data theft, website defacement, malware infections, or business interruption;
Damages resulting from false positive or false negative results of malware or file integrity scans;
Damages resulting from incorrect, incomplete, or omitted configuration by the website operator;
Incompatibilities with other plugins, themes, hosting environments, or server configurations;
Damages resulting from failure, delay, or non-delivery of security notifications;
Any direct, indirect, incidental, special, consequential, or exemplary damages, including but not limited to loss of profits, revenue, or reputation.
USER RESPONSIBILITY
The website operator is solely responsible for:
Proper configuration and maintenance of the plugin;
Regular creation and verification of backups;
Timely updates of all software components (WordPress, plugins, themes, PHP);
Appropriate response to security warnings and scan results;
Compliance with applicable data protection laws (GDPR) in connection with data processed by the plugin;
Obtaining professional security advice where enhanced protection is required.
NO PROFESSIONAL ADVICE
Information and recommendations within the plugin do not constitute legal, security, or IT consulting advice. For legal questions or specific security incidents, consult qualified professionals.
WARRANTY DISCLAIMER
To the maximum extent permitted by applicable law, all express or implied warranties are disclaimed, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement.
MANDATORY STATUTORY LIABILITY
This disclaimer does not affect mandatory statutory liability, in particular liability for intent, gross negligence, breach of essential contractual obligations, liability under product liability law, and liability for damages arising from injury to life, body, or health.
