Shadowbane is a security plugin designed for website administrators who need to protect their sites from common online threats. It focuses on preventing attacks before they can cause damage, offering a set of tools to harden a site's defenses.

Web Application Firewall (WAF): The core component filters incoming HTTP requests, blocking malicious traffic like SQL injection attempts and cross-site scripting (XSS) based on a set of security rules.

Real-time Threat Blocklist: The plugin consults updated lists of known malicious IP addresses and automatically prevents them from accessing the site, reducing the risk from bots and attackers.

Login Security & Brute Force Protection: It monitors login attempts and can lock out IP addresses that exhibit patterns typical of brute force attacks, helping to secure admin and user accounts.

Security Hardening Recommendations: The tool scans for common security weaknesses in a site's configuration and provides actionable suggestions to fix them, such as disabling file editing or hiding version numbers.

Activity Logging: It keeps a record of security-related events, including blocked attacks and login attempts, which is useful for auditing and understanding the threats your site faces.