This security module operates at the server level to actively deny access to specific parts of a website, based on configured rules. It is for website administrators and developers who need to protect sensitive areas, such as admin panels, staging sites, or internal directories, from unauthorized visitors and automated bots.

• IP Address Blocking: Deny access to specific IP addresses or entire ranges, providing a first line of defense against malicious traffic.
• User Agent Filtering: Block or allow requests based on the visitor's browser or bot identifier, effectively stopping common scrapers and unwanted crawlers.
• Directory Protection: Apply access rules to entire folders, securing groups of files without configuring permissions for each one individually.
• HTTP Referrer Control: Restrict access based on where the visitor came from, preventing hotlinking of assets or unauthorized embedding.
• Integration with OpenResty: Built on the OpenResty platform, it leverages Lua scripting for highly customizable and performant rule sets directly within the web server.