SmartKiller is a lightweight PHP firewall that quietly handles the bad stuff — bots, scrapers, brute-force attempts — so you never have to think about it. Works with or without Cloudflare.
Hackers and bots aren't a myth. But protecting yourself doesn't have to be complicated. Here's how SmartKiller addresses the fears we hear most often.
Automated tools constantly scan the web looking for login forms, open files, and vulnerabilities. They're relentless — but predictable.
Brute-force attacks try thousands of passwords automatically. Most PHP sites have no defence against this at the application level.
Scrapers can exhaust your bandwidth in minutes by downloading files in a loop, running up your hosting bill without warning.
The fear of accidentally blocking Google is real. A firewall that sends the wrong HTTP response could get your pages deindexed.
SmartKiller runs a fast layered check on every visitor before your application does anything. Good visitors feel nothing. Bad ones get stopped quietly.
Google, Bing, Yandex and 27 other legitimate crawlers pass through immediately — no rate limits, no friction. Your SEO stays healthy.
Scanners like sqlmap and nikto announce themselves in their User-Agent. SmartKiller spots them and blocks the IP on the spot.
A quick database check tells SmartKiller if the IP is trusted, being watched, temporarily blocked, or permanently limited.
Three independent counters track general traffic, file downloads, and repeated page hits. Limits are accurate without being unfairly strict.
Request URLs are matched against patterns that flag common attack probes — things a real visitor would never type.
Legitimate visitors experience nothing. No CAPTCHAs, no delays, no friction. SmartKiller is completely invisible to them.
SmartKiller protects your PHP code directly — not just the network in front of it. That means it works standalone or as a second layer behind Cloudflare.
config.php fileNo jargon. No fear-mongering. Just clear, honest guides on how SmartKiller works and what it can do for your site.
A plain-English walkthrough of every check SmartKiller runs on each visitor, and why each step matters.
They protect different things. Here's how to think about which one you need — or why using both makes sense.
Most sites have no limit on how many times one IP can hammer them. Here's why that's a problem — and how to fix it.