PerfShield

About PerfShield

PerfShield is a security toolset for Perfex CRM, built to give a robust CRM the protective layer it leaves to you. Perfex caters to businesses of every size, but even the most reliable system can be exposed to cyber-attacks - and PerfShield closes that gap by adding essential security features that protect your data from unauthorized access. Built to the latest security standards, it hardens your installation against brute-force attacks and gives you a single place to manage how your Perfex CRM defends itself.

Stop brute-force attacks on the login screen

The core of PerfShield is its brute-force protection. A determined attacker will hammer your sign-in page until something gives, so PerfShield lets you decide exactly how much it tolerates before locking things down - and how much harder it bites when someone keeps trying. Every threshold is yours to tune from the settings panel, so the protection fits your installation rather than forcing a one-size-fits-all policy.

The brute-force controls cover:

• Max login retries - the number of failed attempts allowed before a lockout is triggered.
• Lockout period - how long a locked account stays locked.
• Max lockouts and extended lockout - after an account has been locked repeatedly, the block escalates to a longer, extended ban.
• Password reset retries - a cap on how many password-reset attempts are permitted.
• Max email sendings - a limit on outgoing security emails so the system is not abused as a relay.

Blacklist hostile IPs, ranges, and users

Rather than wait for repeated attempts, you can shut known-bad actors out from the start. PerfShield lets you maintain IP, IP-range, and user blacklists to restrict access to your installation, denying entry before anyone gets the chance to guess a password. Working proactively this way means suspicious activity is caught in real time, not discovered after the fact, keeping you ahead of threats against your CRM.

Control who manages the security settings

PerfShield ships with staff permissions, so access to the module itself is controlled. You decide which staff members are allowed to view and change the security configuration, keeping the protective settings out of the wrong hands rather than open to everyone. It is also built to keep you in control of your own CRM: administrator accounts are protected from being locked out, and the bulk customer-import workflow is handled cleanly so day-to-day operations are never caught off guard by the security layer.

Simple to set up, easy to manage

PerfShield is designed to be incredibly easy to use and can be customized to meet your specific security needs. It installs and activates in a couple of minutes, and from there every threshold and blacklist is managed from one settings panel inside Perfex - giving you complete peace of mind and the protection that makes it a must-have for businesses serious about securing their CRM.

Requirements

PerfShield runs on Perfex CRM core version 3.0 or later. It needs PHP’s allow_url_fopen directive set to ON - a setting most hosting providers already enable by default, but one worth confirming with your host if yours does not.