Note: This is a module for Perfex CRM. It is not a standalone application.

Live Demo

Username: demo@demo.com

Password: 1234

Bring real-time HTTP traffic visibility and practical application-level protection to your Perfex CRM. Security Center helps administrators monitor incoming requests, review suspicious activity, configure automatic limits, and manage IP, CIDR, whitelist, and country access rules from one organized admin panel.

Monitor requests, understand unusual activity, and manage access without searching through raw server logs.

Performance-focused architecture:
Static assets are skipped by default, firewall data uses short-lived caches, country information is resolved in bounded cached batches, and old logs can be removed automatically by the standard Perfex cron.

Key Features

Security Dashboard: Review total requests, suspicious requests, unique IP addresses, average response time, hourly traffic, HTTP status distribution, top IPs, and top countries for the last 24 hours.
Live Traffic Monitor: Inspect request time, IP address, country, method, URL, AJAX state, HTTP status, response time, risk level, matched rule, authenticated staff member, and customer information.
Automatic Refresh: Keep the Live Traffic table updated automatically without manually refreshing the page.
Direct Page Links: Open normal application pages from Live Traffic. Links are intentionally hidden for AJAX requests.
Advanced Traffic Filters: Filter by date range, IP, country, HTTP status, URL, staff member, risk level, and matched rule.
Suspicious Request Logs: Review requests that matched a security signature or were rejected by an active firewall rule.
Automatic Suspicious-IP Blocking: Configure how many suspicious requests are allowed within the detection window and how long an automatic block remains active.
Request Rate Limiting: Set the maximum number of requests permitted per IP within a configurable time window.
IP & CIDR Firewall: Add manual IPv4, IPv6, and CIDR blocks with reasons and optional expiration dates.
IP Whitelist: Allow trusted addresses and networks to bypass country restrictions, rate limits, and automatic blocks.
Country-Based Access Rules: Restrict selected countries after the visitor’s public IP country has been resolved and cached.
Lockout Protection: Prevent administrators from saving an IP or CIDR rule that blocks the address/network used by their current request.
HTTP Status Code Guide: Built-in explanations make codes such as 200, 303, 307, 403, 429, and 500 easier to understand.
URL Logging Exclusions: Exclude exact application paths from routine logging. Suspicious, blocked, fatal, and HTTP 5xx requests remain available for review.
Staff Logging Exclusions: Choose staff members whose authenticated activity should not appear in Live Traffic while firewall and threat checks remain active.
Automatic Data Retention: Choose how many days records are retained and let Perfex cron remove expired rows in bounded batches.
Granular Staff Permissions: Assign Dashboard, Live Traffic, Attack Logs, Firewall, Settings, and log deletion permissions separately.

Built for Daily Perfex CRM Use

Uses the standard Perfex module installation and activation flow.
Request logging can be disabled without disabling firewall protection.
Static CSS, JavaScript, image, and font requests are skipped by default.
AJAX requests are clearly identified.
Known country results are cached and reused.
Firewall settings use cache to avoid a database query on every request.
Existing traffic records can be filtered and exported using the Perfex table tools.
All configurable limits are validated server-side.

Slow Requests and Large Reports

Security Center does not block a legitimate report simply because it takes a long time to finish. When the request completes, its response time is recorded in Live Traffic. Blocking decisions are based on firewall, threat, country, whitelist, and rate-limit rules—not response duration alone.

Simple Installation

Download and extract the CodeCanyon package.
Open Setup > Modules in Perfex CRM.
Upload the included security_center.zip file.
Click Activate.

No Composer command, Node.js build, GeoIP database, or separate installation wizard is required.

Requirements

Perfex CRM 3.1 or newer
PHP 8.1 or newer
MySQL 8.x
A working Perfex cron job for scheduled cleanup and country enrichment

External Connection & Privacy

Public IP addresses without cached country data may be sent in bounded batches to the country.is country-resolution service. Security Center does not send CRM invoices, customer profiles, emails, or uploaded business documents to this service.

Important Scope

Security Center is an application-level monitoring and access-control module for Perfex CRM. It complements, but does not replace, secure hosting, software updates, backups, a network firewall, a CDN/WAF, malware scanning, or professional server administration.

Change Log

Version 1.0.0 / Initial release

Security Center – Firewall & Traffic Monitor for Perfex CRM