About this plugin
Kowalski Smart Shield analyzes form submissions locally using a shared scoring engine.
Adapters are included for Fluent Forms, Contact Form 7, WPForms and Elementor Forms (Elementor Pro required).
Adapter availability does not guarantee compatibility with every version or configuration.
Features:
- Rule scores and detection categories.
- Monitoring and blocking modes.
- Email, domain and IP allowlists and blocklists.
- An IP submission limit and an optional form timing heuristic.
- Detection logs, retention settings and CSV export.
- A dashboard showing active adapters and system checks.
New installations start in monitoring mode. Existing settings are preserved during upgrades.
The form timer is a heuristic and is not authentication. The submission limit is not an atomic concurrency control.
This release candidate has been tested with Contact Form 7, Fluent Forms and WPForms Lite on a dedicated MariaDB test site. Elementor Pro has not been verified in that environment. The administrator interface currently uses Polish; complete internationalization is still in progress.
Privacy
The plugin does not send submissions to an external analysis service.
When logging is enabled, it stores a salted hash of the client IP and email address and an excerpt of submission content.
Email addresses and phone numbers in excerpts are masked, but names, addresses or other personal information may remain.
Hashing is pseudonymization and must not be described as complete anonymization.
Logs are kept for 30 days by default; administrators can change retention or disable logging.
Viewing and exporting logs requires the manage_options capability.
Uninstallation removes settings and the event table. Exported CSV files remain the administrator’s responsibility.