Quick Facts

WHMCS itself is a very secure platform. However, it helps to add some extra security, auditing capabilities and a web application firewall to your WHMCS install by using a security plugin that enforces a lot of good security practices. WHMCS manages your customers, income from products/services and company reputation so it is easy to see the need to have your WHMCS install secure as possible!

WHMCS Firewall Security
and Auditing

WHMCS Firewall reduces security risk by checking for vulnerabilities, and by implementing and enforcing the latest recommended WHMCS security practices and techniques. The WHMCS Firewall module performs Security Activity Auditing, File Integrity Monitoring, Remote Malware Scanning, Blacklist Monitoring, Effective Security Hardening, Post-Hack Security Actions, Security Notifications and includes a Web Application Firewall as its core features with many more security features included.

  • A powerful & feature rich WHMCS Security Addon!

What is WHMCS Firewall?

It is a web application firewall, intrusion detection system, offers secure backups (Amazon S3 and Dropbox), automated alerting, auditing and more WHMCS Security addon to protect your WHMCS billing and customer management system.

Why purchase our WHMCS Security module?

Our WHMCS Firewall module provides security, auditing and SECURE offsite backup features that are not included in WHMCS.

WHMCS provides very powerful server automation, billing and customer management but it lacks advanced security options. We have used WHMCS for many years and do not plan on switching so we just decided to solve the security part on our own and are now making our security module available to other WHMCS users.

*If you care about protecting the system that powers your billing, server automation, client support, company reputation, etc. then purchase our Security module. No hard sale here.. Either you care about security or you don’t πŸ™‚

Is WHMCS Firewall compatible with WHMCS v6?

Yes, compatible with WHMCS 5.x and 6.x (Select your correct version during checkout)

What features are included in WHMCS Firewall?

The WHMCS Firewall module adds the following security features to WHMCS.

Web Application Firewall + IDS

– Htaccess based firewall, pre-loaded rules and notifications to keep your updated on the latest threats to your WHMCS website.

Amazon S3 Backups

– Allows secure offsite backups (manual or scheduled) to your Amazon S3 file storage account. – MAJOR

Dropbox Backups

– Allows secure offsite backups (manual or scheduled) to your linked Dropbox account. – MAJOR

*As you already know, insecure FTP and Email are the only two current WHMCS backup options. S3 is the preferred route and we give you a step by step tutorial on how to setup your S3 bucket and permissions.

File Auditing

– Know when your Core WHMCS files or any files under your WHMCS installation change. – MAJOR

Settings Auditing

– Alerted when key WHMCS settings change which can be signs of a silent hack.

Admin Auditing

– Alerted when admin details change (including password hash) or a new admin is added or existing admin removed.

Products Auditing

– Alerted when products are added, edited or removed. Such as price change and ability to β€œRollBack” any incorrect edits.

Payment Gateway Auditing

– Alerted when payment gateways are added, edited (IMPORTANT) or removed. And ability to β€œRollBack” any changes.

Addons Auditing

– Alerted when addons are added, edited or removed. Such as price and ability to β€œRollBack” any incorrect changes.

Cloudflare Integration

– Link to your Cloudflare account via API to instantly sync WHMCS banning and auto-expire actions to your entire Cloudflare network. > SWEET

Autoban Honey Pot

– Hackers check certain WHMCS urls first. Such as /admin/ Knowing this you can Autoban from WHMCS and optionally sync that Autoban to Cloudflare. > Getting excited yet?? πŸ™‚

Customized Reporting

– Silence specific security alerts, customize which admins or custom emails and how often you receive security alerts.

Whitelist modules

– Concerned that one of your existing modules may be affected by the security rules added by this module? First, it will likely not (99.99%). Second, Whitelist the module using our Addon module scanner and whitelist feature. (Yes, we did think of just about everything)

24/7 Support

– You are not a Security expert, you are a business owner with things to do, servers to fix and customer support tickets to answer. We are here to help 24/7. You focus on growing your business – we will focus on keeping your WHMCS secure.

Actively Maintained

– Online threats, WHMCS, LAMP and many other factors change frequently. Rest assured we actively update our security module. “Update Available” feature also built in.

Many more features

– There are too many features of WHMCS Firewall to list. After you purchase you will have full access to the WHMCS Firewall User’s guide located at https://whmcssecurity.com/

Like I said, we Love and have used WHMCS for many years. We created this security module for internal use and it has worked great. We have now decided to release it for public sale so other WHMCS users can benefit and protect themselves with the added security provided by our WHMCS Firewall Addon.

I love discounts.. can I have a discount code?

Yes, you sure can. 10% Off (Monthly, Owned or Enterprise License) – Use code FIREWALL10 **Never Expires**

> AND a Free Trial is also available… What are you waiting for?? Go try it out!! πŸ™‚
Click here to register and download a Free trial of WHMCS Firewall.


I am kind of busy with hosting and helping my clients.. can you save me time and install this security module for me?

Yes, you can select the “Module Installation and configuration” option during checkout.

Also, all of our plans (even the Free Trial) come with support so open a ticket with any questions. We Really enjoy interacting with our customers, talking about our module and security. So we look forward to reading your tickets!

Need WHMCS Security for your clients and data? What are you waiting for? Secure your WHMCS website today!

Security Scanner

  • Enforces WHMCS security best practices.

  • Provides a list of WHMCS specific, vulnerabilities and remediation tracking.

  • Security event categories & risk levels.

  • Visual security charting and incident reports.

Notifications & Automation

  • Daily vulnerability summary email.

  • Include or Exclude specific admins from security alert notifications.

  • Advanced Auto Ban and Release.

  • Automated file & configuration change notifications.

Firewall Features

  • Enforces WHMCS security best practices.

  • Monitors and summarizes all security related events.

  • XSS, RFI, CRLF, CSRF, Base64, SQL Injection protection.

  • .htaccess security protection.


  • Dual firewall controls authentication.

  • Alert mapping.

  • 1 Click disable all security features for development or testing.

  • Many more features.

SECURE Backup and Restore Features

  • Multiple secure offsite backup options.

  • Dropbox for files and database.

  • Amazon S3 for files and database.

  • Manual and scheduled backups.

Blacklist Functionality

  • Extends core WHMCS blacklist.

  • IPs, User Agents or specific users.

  • Bypass specific modules.

  • Products, Addons and Payment Gateway Auditing.

File System Security

  • File change auditing.

  • Secure File System Backup.

  • Secure Permissions Scanner.

  • WHMCS “core files” validation.

Database Security

  • Offsite + Rollback Database Security.

  • SQL injection prevention.

  • Detailed DB Backup Logging.

  • Original + Last 3 file change locking.

User Accounts Security

  • Lockout specific users.

  • Admin user change notifications.

  • Log and track most active clients.

  • Allow orders but no access to WHMCS until approved.

Brute force login attack prevention

  • Login Security & Login Monitoring.

  • Email alerting options.

  • Password Reset capability tracking.

  • 1 click backup and restore Visual file editor.

24/7 Support & Premium Features

  • Easy Install & Setup.

  • Managed upgrade to new versions.


  • 24/7 support, no question is too big or small.

  • Fully Managed WHMCS Support available.

  • Detailed User Guide Included!