SF
SF GeoGuard
Viking Geo Firewall
New • Viking Geo Firewall For WordPress

Block Unwanted Countries
Like A Viking Warrior

SF GeoGuard is a brutal, no-nonsense geo firewall for WordPress. It stands at the gates of your site like a black-eyed Viking, blocking traffic from unwanted countries, cutting spam and keeping your server sharp and fast.

Works with any hosting
Lightweight, no bloat
Built for real-world security
SF GeoGuard Viking Logo

Why SF GeoGuard Exists

Most security plugins try to do everything. SF GeoGuard focuses on one thing and does it brutally well: keeping the wrong countries out of your site. If you only serve US clients, you should not pay for traffic from bots in random data centers across the world.

With SF GeoGuard you define exactly who is allowed in. Everyone else meets the Viking at the gate. Less noise, less spam, less attack surface.

Cut The Noise
Block traffic from entire countries that never convert, never buy and only eat server resources.
Protect Your Stack
Fewer bots and scanners hitting your login page, XML-RPC and APIs. SF GeoGuard is not a toy – it is an extra layer of armor.
Stay Compliant
Have to restrict access due to legal, financial or ad-platform rules? Enforce it cleanly at the gate, not with messy redirects.

Features built for brutal clarity

No dashboards full of noise. No fake “AI”. SF GeoGuard gives you exactly what you need to control access by country and keep your infrastructure lean.

Country Blocking

Allow only the countries you trust

Define an allow-list of ISO country codes. US-only? EU-only? It is your gate. Everyone else gets 403 or a custom page.

IP Whitelist

Always let yourself and your team in

Drop your own IPs into the whitelist and ignore country rules when you need to audit or debug from anywhere.

Smart Caching

Cache geo lookups for speed

SF GeoGuard caches IP → country results so repeat visitors are processed instantly with no delay or overhead.

Custom Block Page

Speak clearly to blocked visitors

Show a clean, branded message instead of a generic error. Explain that access is limited by region – and on your terms.

Low Overhead

Security without bloat

No giant dashboards, no front-end scripts, no useless widgets. Clean, focused plugin code designed to stay out of your way.

Pro Roadmap

More brutal control coming

SF GeoGuard Pro will add redirects instead of 403, logs, multi-provider geo lookups, VPN detection and WooCommerce rules. Early adopters lock in lifetime discounts.

Pricing forged for real projects

Start brutal country blocking for free. Upgrade to Pro when you need deeper control, logs and advanced detection.

Free
$0
Forever
  • • Country allow-list
  • • IP whitelist
  • • Cached geo lookups
  • • Custom block message
  • • Works on any WordPress host
Download Free
Coming Soon
Pro
$39
per site / year
  • • Everything in Free
  • • Redirect instead of 403
  • • Access logs and analytics
  • • Multiple Geo providers
  • • VPN / Proxy detection
  • • Priority support
Join Pro Waitlist
Agency
$99
unlimited sites / year
  • • All Pro features
  • • Unlimited client sites
  • • Priority bug-fix queue
  • • Early access to new modules
Agency Interest

Ready to put a Viking at your gate?

Drop SF GeoGuard into your WordPress site and start blocking unwanted countries in minutes. No complicated panels, no 30-step wizard. Install, choose your allowed countries, done.

FAQ

Is SF GeoGuard a full security suite?

No. SF GeoGuard focuses on one job and does it ruthlessly well: geo-based access control. You can run it alongside your favorite security plugin to add a brutal layer of country blocking.

Will it slow down my site?

Geo lookups are cached for a configurable period, so repeat visitors are processed instantly. The codebase is lean and does not inject anything into the front-end.

Can I still access my site from abroad?

Yes. Add your current IPs to the whitelist or temporarily widen the allowed countries. GeoGuard is strict with strangers, not with the owner.

What happens if the geo API is down?

You control the fallback behavior: allow all or block if lookup fails. For most sites, allowing on failure is the pragmatic choice.