PHPackages                             convergine/craft-bastion - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. convergine/craft-bastion

ActiveCraft-plugin

convergine/craft-bastion
========================

Craft Bastion plugin

1.0.0(3d ago)00proprietaryPHP

Since Mar 19Pushed 3d agoCompare

[ Source](https://github.com/convergine/craft-bastion)[ Packagist](https://packagist.org/packages/convergine/craft-bastion)[ RSS](/packages/convergine-craft-bastion/feed)WikiDiscussions main Synced today

READMEChangelog (1)Dependencies (2)Versions (2)Used By (0)

Bastion for Craft CMS 5
=======================

[](#bastion-for-craft-cms-5)

[![Screenshot](./docs/images/bastion_banner.png)](./docs/images/bastion_banner.png)

Bastion is an all-in-one security plugin for Craft CMS 5. It provides a security dashboard with automated scanning, IP-based access control, Content Security Policy management, bot defence, dependency auditing, and update reminders — all from within your control panel.

Features
--------

[](#features)

- **Security Dashboard &amp; Scanner**: Run comprehensive security scans covering 20+ checks — critical CMS/plugin updates, HTTPS enforcement, dev mode status, file/folder permissions, PHP version support, security headers, admin username validation, search engine indexing status, and more. Results are stored and displayed with pass/warning/fail indicators.
- **SSL Certificate Monitoring**: Fetch SSL/TLS security assessments via SSL Labs API, including certificate grade, protocol support, cipher strength, and expiration dates. Receive automated email reminders at 7 days and 24 hours before certificate expiration.
- **Domain Expiration Monitoring**: Track domain registration expiration dates using RDAP lookups. Automated email reminders at 30 days and 7 days before expiration. Supports IDN domains and automatically detects local/development environments.
- **Disk Space Monitoring**: Monitor server disk usage in real time with configurable threshold alerts. Receive email notifications when disk usage exceeds your defined percentage limit.
- **IP Restrictions**: Restrict access to both the front-end and the control panel independently by IP address. Supports single IPs, CIDR ranges, and IP ranges (IPv4 and IPv6). Choose between redirecting blocked visitors or rendering a custom Twig template.
- **Content Security Policy (CSP)**: Build and manage 24 CSP directives directly from the control panel. Deploy via HTTP header, meta tag, or report-only mode. Includes nonce generation for inline scripts/styles and SEOmatic compatibility. One-click default policy setup available.
- **Security Headers**: Configure additional HTTP security headers (Referrer-Policy, Strict-Transport-Security, X-Content-Type-Options, X-Frame-Options, X-XSS-Protection, CORS) from a single settings page.
- **Bot Defence**: Automatically block unwanted bots at the server level via .htaccess rules. Supports Apache, LiteSpeed, and OpenLiteSpeed with Cloudflare detection. Automatic .htaccess backup management.
- **Dependency Audit**: Scan your Composer dependencies against the Packagist security advisories API. View vulnerable packages with severity levels (critical, high, medium, low) and detailed advisory information.
- **Updates Reminder**: Receive scheduled email notifications when Craft CMS or plugin updates are available. Configurable frequency (daily, weekly, bi-weekly, monthly), send day, and recipient list with a self-healing background job.

Requirements
------------

[](#requirements)

- Craft CMS 5.0.0 or later
- PHP 8.2 or later

Installation
------------

[](#installation)

You can install this plugin from the Plugin Store or with Composer.

#### From the Plugin Store

[](#from-the-plugin-store)

Go to the Plugin Store in your project's Control Panel and search for "Bastion". Then click on the "Install" button in its modal window.

#### With Composer

[](#with-composer)

Open your terminal and run the following commands:

```
# go to the project directory
cd /path/to/my-project.test

# tell Composer to load the plugin
composer require convergine/craft-bastion

# tell Craft to install the plugin
./craft plugin/install craft-bastion
```

Support
-------

[](#support)

For any issues or questions, you can reach us by email  or by opening an issue on [GitHub](https://github.com/convergine/craft-bastion/issues).

###  Health Score

36

—

LowBetter than 83% of packages

Maintenance99

Actively maintained with recent releases

Popularity0

Limited adoption so far

Community8

Small or concentrated contributor base

Maturity33

Early-stage or recently created project

 Bus Factor1

Top contributor holds 60% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Unknown

Total

1

Last Release

3d ago

### Community

Maintainers

![](https://www.gravatar.com/avatar/d26ea9efef0ec989914f3bf1600ce6c31eb9eef49eda0c947b575c66a1bdbaee?d=identicon)[convergine](/maintainers/convergine)

---

Top Contributors

[![convergine](https://avatars.githubusercontent.com/u/7737586?v=4)](https://github.com/convergine "convergine (3 commits)")[![konstantin-convergine](https://avatars.githubusercontent.com/u/158498311?v=4)](https://github.com/konstantin-convergine "konstantin-convergine (2 commits)")

---

Tags

craftcms

### Embed Badge

![Health badge](/badges/convergine-craft-bastion/health.svg)

```
[![Health](https://phpackages.com/badges/convergine-craft-bastion/health.svg)](https://phpackages.com/packages/convergine-craft-bastion)
```

###  Alternatives

[verbb/super-table

Super-charge your content builders and create nested Matrix fields.

3161.6M19](/packages/verbb-super-table)[spicyweb/craft-neo

A Matrix-like field type with block hierarchy

395791.9k8](/packages/spicyweb-craft-neo)[craftcms/feed-me

Import content from XML, RSS, CSV or JSON feeds into entries, categories, Craft Commerce products, and more.

292919.2k16](/packages/craftcms-feed-me)[nystudio107/craft-seomatic

SEOmatic facilitates modern SEO best practices &amp; implementation for Craft CMS 5. It is a turnkey SEO system that is comprehensive, powerful, and flexible.

1741.4M36](/packages/nystudio107-craft-seomatic)[craftcms/aws-s3

Amazon S3 integration for Craft CMS

631.5M21](/packages/craftcms-aws-s3)[verbb/navigation

Create navigation menus for your site.

90676.7k14](/packages/verbb-navigation)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
