Intelligent Access Protection Plugin

by 8mylez

Rating: no rating ( write a review )

Downloads: <10

Integrated Web Application Firewall. protection against brute-force attacks, automatic IP blocking, user agent control and a complete security log – no external services re

Annually €24.92* /month €348.00 * €299.00* /year 14.08% discount In comparison to the regular monthly price

Monthly €29.00* /month Cancelable monthly

Compatible with:

6.6.0.0 - 6.7.14.0

Includes:

Free trial month

The subscription starts with a free trial month during which it can be canceled at any time.

All updates

During the subscription all released updates are included for free

Support from the Extension Partner

In case you have any questions or problems with your extension you can always ask the Extension Partner for help during the subscription.

Description

Highlights

Automatic protection against malicious login attempts
Reliably detects suspicious behavior in the background
Protection against brute-force and bot attacks
Customizable without any technical expertise
Fully compatible with standard Shopware features

Features

Enable or disable the firewall
Automatic blocking in the event of an unusually high number of access attempts
Blocking duration following an attack can be freely adjusted
Protection against repeated failed login attempts
Number of permitted failed attempts before a block can be set

Time window for login attempts can be freely configured
Login block duration can be set individually
Exclude your own IP addresses – so you’re never locked out of your own shop
Block specific bots and automated access
Wildcard support for user agent rules
Search engines such as Google and Bing are always allowed by default
Security events are logged and can be viewed in the backend
Log login attempts (including successful ones, if desired)
Retention period for log entries freely configurable
Blocked IP addresses can be manually unblocked at any time

Show more Show less

About the Extension

EMZ Security & Firewall – Your Shop, Your Security

Every day, automated bots, hackers and malicious programs attack online shops – to crack passwords, steal data or overload servers. The EMZ Security plugin protects your Shopware shop: without external services, without additional monthly costs and without any technical expertise.

Automatic Protection Around the Clock

The integrated firewall monitors every access to your shop in the background. Anyone making an unusually high number of requests is automatically blocked – before any damage can occur. After a configurable block period, access is automatically restored. Your real customers won't notice a thing.

Protection Against Login Attacks

Attackers who systematically try different passwords are automatically blocked after just a few failed attempts. The time window, number of allowed attempts and block duration can all be individually configured – tailored to your shop and your customers.

You Stay in Control

Your own IP addresses can be whitelisted with a single click – so you and your team are never accidentally locked out. Specific bots and automated tools can be selectively blocked, while search engines like Google and Bing remain allowed by default at all times.

Always in the Picture

A complete log of all security events shows you what is happening in your shop at any time. Blocked access attempts, suspicious activities and login attempts are recorded clearly and automatically cleaned up after a configurable period.

Documentation

To the full documentation

⭐️ Enjoying the plugin?

We'd love it if you left us a review in the store!

Support

We're always happy to help you with the setup of this app or answer any questions you may have.

✉ Email:support@8mylez.com
✆ Phone: +49 (0) 5251 284 710

www.8mylez.com

Details

Available: English, German
Latest update: 9 September 2026
Publication date: 27 August 2026
Version: 1.0.0
Category: Customer account

Resources

Reviews (0)

Write a review

If you downloaded this extension you can write a review in the Shopware Account.

Write a review

No reviews found.

About the Extension Partner

8mylez

See all extensions

Partner Status

Shopware
Platinum Partner
Shopware
Extension Partner

Details

Ø-Rating: 4.6

Average rating of 4.6 out of 5 stars
Partner since: 2015
Extensions: 49
Certifications: 20

Support

Based in: Germany
Speaks: German, English
Response time: Quickly

Shopware 6 certified

To the detailed documentation

Installation

Open the Shopware backend and navigate to Settings → System → Plugins
Upload, install and activate the plugin
Clear the cache and log in again

Open Configuration

Navigate to Extensions → My Extensions → EMZ Security & Firewall → Configure

IP Whitelist

Enter IP addresses here that should be exempt from all firewall checks – e.g. your own IP address or your agency's. Whitelisted IPs will never be blocked, regardless of how many requests they make.

Whitelist IPs

Enter one IP address per line, e.g. 127.0.0.1 or 192.168.1.1

Add Your Own IP

Click the button to automatically add your current IP address to the whitelist – handy to make sure you never lock yourself out of your own shop.

Main Firewall

Enable Main Firewall

Global on/off switch for the entire firewall. When disabled, no requests are checked or blocked.

Maximum Requests per Minute (per IP)

Defines how many page requests a single IP address may make per minute before being blocked. Default: 500. This limit is never an issue for normal shop visitors – it only triggers during automated attacks or bot activity.

Default Block Duration (Minutes)

How long an IP address remains blocked after exceeding the limit. Default: 60 minutes. The block is lifted automatically once the time has elapsed.

User Agent Control

User agents are the "business card" a browser or program uses to identify itself to your shop. Here you can specifically block or allow certain programs or bots.

Blocked User Agents

Enter the user agents you want to block – one per line. Wildcards (*) are supported:

*bot* – blocks all bots
curl/* – blocks curl requests

Whitelisted User Agents

User agents entered here bypass all firewall checks. Default entries:

Googlebot/* – Google search engine
Bingbot/* – Microsoft Bing
Shopware/* – Shopware internal requests

Important: Always keep search engines on the whitelist – otherwise your shop will no longer be indexed by Google.

Login Firewall

Enable Login Firewall

Protects your shop against attackers who systematically try different passwords (brute-force attack).

Maximum Failed Login Attempts

Number of incorrect password entries allowed before an IP address is blocked. Default: 5. A normal user who has forgotten their password can handle this easily – an attacker is stopped quickly.

Time Window for Login Attempts (Minutes)

Failed attempts are only counted within this time period. Default: 15 minutes. If a user makes 5 failed attempts within 15 minutes, the IP is blocked.

Login Block Duration (Minutes)

How long an IP remains blocked after too many failed login attempts. Default: 30 minutes.

Logging & Cleanup

Log Firewall Events

When enabled, all blocked requests and suspicious activities are saved and can be viewed in the backend. Recommendation: keep this enabled.

Log All Login Attempts

When enabled, successful logins are also recorded. Disabled by default, as this can affect performance with a very high number of visitors.

Event Retention (Days)

How long security events are stored in the system. Default: 30 days. Older entries are deleted automatically.

Login Attempt Retention (Days)

How long login attempts are stored in the system. Default: 90 days.

Manage Blocked IPs

Blocked IP addresses can be viewed in the backend at any time. If you need to unblock an IP manually – e.g. because a team member was accidentally blocked – this can be done via the command line.

After completing all settings, click "Save" and clear the cache.

1.0.0 6.7.0.0 - 6.7.14.0 30 July 2026

Main firewall: IP blocking, rate limiting (sliding window, per sales channel and IP / IPv6 /64 network) and user agent filtering with wildcard patterns
Login firewall: blocks IPs after too many failed storefront login attempts (frontend.account.login, store-api.account.login)
IP whitelist with CIDR support (IPv4 and IPv6), user agent whitelist
Translated visitor-facing block pages (de-DE, en-GB); JSON errors with stable code EMZ_SECURITY__REQUEST_BLOCKED for API clients
Security event log and login attempt log with configurable retention
Daily scheduled task and CLI commands (emz:security:cleanup, emz:security:unblock, emz:security:blocked-list) for cleanup and block management
Admin: IP whitelist field with "use my IP address" button in the plugin configuration
Fail-open behaviour: internal firewall errors are logged and never break the storefront
Data protection: stores IP address, login identifier and user agent to detect abuse (no passwords); configurable retention, dropped on uninstall (see README)

0.5.0 6.6.0.0 - 6.6.10.24 15 September 2026

Shopware 6.6 release line (6.6.0 and later): versions 0.x are for Shopware 6.6, the Shopware 6.7 line continues on branch main as versions 1.x
Administration configuration uses the sw-* components available in every 6.6 release (no meteor mt-* dependency)