README

MSP Shield is the most powerful and most effective protection against malicious user in the MSP Security Suite.
It is a fully featured Intrusion Detection and Intrusion Prevention System for PHP.

MSP Shield is capable of detecting a wide number of hack attempts and protect your Magento 2 from a wide number of potential code vulnerabilities.

You will have an high level of protection against 0-day vulnerabilities, code injections, exploit testing and other known attack patterns.

NOTE: Installing this module does not exempt you from keeping your system up to date.

Member of MSP Security Suite

See: https://github.com/magespecialist/m2-MSP_Security_Suite

Installing on Magento2:

1. Install using composer

From command line:

composer require msp/shield
php bin/magento setup:upgrade

2. Enable and configure from your Magento backend config

NOTE: Enabling this module for backend can trigger false positives, we strongly suggest to keep it enabled only for frontend and to protect your backend with https://github.com/magespecialist/m2-MSP_AdminRestriction module .

How to test it

MSP Shield can detect a wide number of PHP attack patterns and attack attempts.
You can test it in any Magento 2 form by typing a malicious request.

For example you can try typing ; drop database magento in any form.

This will simulate a SQL injection attack. Magento is already protected against this kind of attack, but you can try it to verify the correct configuration of MSP Shield.

If you correctly installed and configured MSP Shield, an emergency stop screen will appear.

Hack Attempt detected (with stealth mode disabled)

Hack Attempt detected (with stealth mode enabled)

Logged entries

You can browse and search logged events for blocked or non-blocked requests in System > MSP Security Suite > Events Report.