Self hosted standalone PHP script that continuously analyzes web traffic, evaluates threat behavior, coordinates edge protection, and shares verified threat intelligence across trusted nodes.
root@webwall:~$ ./engine --start[SYS] Initializing Cluster SQLite... OK[SYS] PHP 8.5 Fast-Path Execution Active[NET] Connecting to Hive Network nodes... OK[WARN] Gatekeeper - Suspicious path from 192.168.x.x[EVAL] Gozer - evaluated score: 100/100 (Fatal)[BLOCK] IP added to Burned List... OK[SYNC] Vigo - Push IP to Cloudflare Edge... SUCCESS[NET] Keymaster - IP behavior updated & sync with the network.... SUCCESS> Waiting for next event..._ "WebWall exists because security should be simple, predictable, and honest.
Because behavior matters more than signatures.
Because autonomy beats complexity.
Because a firewall should think before it blocks.
And because the web deserves tools built with engineering, not marketing."
Explore the powerful Features introduced in the latest "Spengler Edition" v2.2 release.
Separate SQLite databases (Pulse, Core, Vigo, Slimer) to maximize performance, minimize write locks, and handle massive traffic spikes.
Shares and receives real-time threat intelligence with other connected nodes, instantly blocking bad actors across the network.
Asynchronous sync with Cloudflare Lists or D1 SQL & Workers; DDoS detection and automatic activation of "Attack Mode" via APIs.
Dynamic IP scoring with decay windows and incident mapping. Excludes verified Google/Bing bots automatically via reverse DNS.
Anonymized IP display, pre-compiled Data Policy page, and configurable visitor retention periods to ensure full EU compliance.
Choose between Countdown, Math Quiz, or hCaptcha validation for flagged traffic, coupled with high-performance Buffer logic.
No external dependencies. Pure Vanilla PHP. Setup, upload, and run in minutes.