Lyzerslab
← Back to MuRu Guard docs

Get Started

What's New

Last updated: October 16, 2026

5.1.0 — Firewall, audits and a calmer interface (Latest)

Released 15 October 2026. The new audits, firewall rules and search fixes are Pro features; interface updates, the live scan indicator and the new malware filenames apply to everyone. Update the Shield plugin to 2.1.0 together with the component so the new firewall rules take effect.

Firewall rate limiting — Pro

Temporarily blocks an IP that floods the site with requests (default 120 per minute, 10-minute block). It never touches the backend or allow-listed IPs.

HTTP method and empty User-Agent rules — Pro

Optionally refuse TRACE, TRACK, CONNECT and unknown request methods, and requests that send no User-Agent at all.

Database privilege audit — Pro

Reads your site's database grants and flags FILE, SUPER, CREATE USER, RELOAD, SHUTDOWN, PROCESS and GRANT OPTION, with the exact REVOKE statement for each. Report only; nothing is revoked automatically.

Joomla Action Log review — Pro

The security-relevant slice of Joomla's User Actions Log: extension installs, user and group changes, configuration, template and module saves. Choose a 24 hour, 7 day or 30 day window, and get a scheduled email for new installs and privilege changes.

Update source integrity watch — Pro

Flags plain-HTTP update sources and emails you when an update source is added, removed or has its address changed.

Mail authentication audit — Pro

Checks SPF, DMARC and DKIM for your mail sender domain with fix guidance. Read-only DNS lookups, cached for an hour.

Runtime header probes — Pro

The live-verification modal now checks clickjacking protection, Referrer-Policy, backend-page headers and server version disclosure. CSP is shown as advisory only.

Live “found so far” indicator while scanning — Free and Pro

The scan overlay shows a pulsing red dot and a running count as soon as a scan finds something suspicious.

Interface

  • Site Protection “Request blocking” is now “Firewall”. The sub-tab bar stays pinned while you scroll and a “You are viewing” line names the current group.
  • Analysis tab has a sticky section menu to jump to any audit card.
  • One consistent look across Settings, Smart AI Assistant and Help.
  • Cleaner Dashboard with a larger Security Score strip.
  • Redesigned AI Assistant and Help pages with conversation bubbles, a New chat button and quick-start suggestions.
  • Calmer incident containment card once every step is ticked or the incident is resolved, with a “Start a new containment” option.

Fixes

  • Search code by snippet now finds multi-line fragments, handles Windows line endings, searches .inc, .phtml and .htaccess files, and shows readable errors for invalid patterns.
  • The Download menu no longer slides under the Security Score strip.
  • Help page buttons no longer wrap onto two lines.

New malware filenames detected — Free

The scanner now flags x-kay.php.json and kepalabapakkau.php.json (and bare .php / .inc drops of the same names) from the Helix3 campaign, alongside the existing nxtest.json and nxproof.php.json indicators.


Companion Shield 2.0.0

Muru Guard Shield 2.0.0 is the companion system plugin responsible for enforcing the new protection features at request time.

The update includes:

  • Virtual-patch request matching
  • Secret administrator URL protection
  • HMAC marker-cookie handling
  • Privileged 2FA reminder and enforcement hooks

Important: Update the Shield plugin together with the Muru Guard component to ensure all new protection features work correctly.