Lyzerslab
← Back to MuRu Guard docs

Core Features

Feature Overview

Last updated: October 16, 2026

  • Protection Mode — companion plugin inspects every site request in real time; manual IP allow/block lists with IPv4 CIDR support and temporary auto-blocking, country blocking, bad user-agent and referrer-spam blocking, brute-force login protection, and a sectioned Protection Log.
  • Active Web Application Firewall (Pro) — blocks generic SQL injection, cross-site scripting, local/remote file inclusion, and command-injection patterns in real time before they reach your extensions.
  • Filesystem Scan — scans media, images, templates, tmp, cache, component directories, and webroot; cross-references Joomla's own extension registry so faked manifests and orphaned folders cannot hide.
  • Core Integrity — detects prepended payloads executing before Joomla's bootstrap in entry points and byte-verifies supported core files against bundled SHA-256 hashes from official Joomla releases.
  • File Integrity Monitoring (Pro) — baseline-hashes every file once, then flags anything that silently changes afterwards, providing a tamper tripwire between scheduled scans.
  • Database Scan — detects Helix Ultimate mega-menu XSS payloads, template Custom JS/CSS injections, SP Page Builder asset-table injections, rogue iconfont rows, and template defacement strings, with surgical one-click cleaning that preserves legitimate settings.
  • Smart AI Assistant (Pro) — chat with an assistant that can list, search, and read project files and, only with your explicit confirmation, edit them. Every action is recorded in a permanent audit log.
  • Backup & Restore (Pro) — every AI repair and cleanup action automatically saves a SHA-256-verified snapshot first. Restore in one click per file, per database row, or for an entire multi-file request; rollback refuses to overwrite a file if it has changed since the snapshot.
  • Automations & Alerts (Pro) — scheduled webcron scans with new-findings-only email alerts, Slack, Discord, and Telegram notifications, Fleet Dashboard reporting, and a branded shareable Security Report.
  • Smart False-Positive Handling — dismiss any finding with one click. The dismissal is fingerprint-bound to the exact content you reviewed, so a genuinely new problem in the same file can still reappear.
  • .htaccess Hardening Advisor — audits PHP-execution blocking in upload folders, security headers, and other hardening gaps, with one-click apply including backup and self-test, plus a ready-to-use configuration snippet for nginx servers.