PHPackages                             relintio-agent/agent - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Security](/categories/security)
4. /
5. relintio-agent/agent

ActiveLibrary[Security](/categories/security)

relintio-agent/agent
====================

Relintio local WAF protection agent and telemetry middleware for PHP applications

00PHP

Since Jul 29Pushed 1mo agoCompare

[ Source](https://github.com/Relintio/relintio-php-agent)[ Packagist](https://packagist.org/packages/relintio-agent/agent)[ RSS](/packages/relintio-agent-agent/feed)WikiDiscussions main Synced 1w ago

READMEChangelogDependenciesVersions (1)Used By (0)

Relintio - PHP Agent v2.8.0
===========================

[](#relintio---php-agent-v280)

> **Note on Features & Quotas**: Advanced features (like Bot Challenge and Custom Shield Pages) are tied to your subscription plan. If you exceed your monthly API quota, the agent will operate in a degraded mode (basic protection) before ultimately failing-open to prevent locking you out of your own site. All configuration rules are centrally managed via the dashboard.

Overview
--------

[](#overview)

The Relintio PHP agent is a single-file, framework-agnostic WAF that protects any PHP 7.4+ application. It intercepts requests at the earliest possible point via `auto_prepend_file` or a `require_once` in your entrypoint.

Risk-Scoring Engine
-------------------

[](#risk-scoring-engine)

Every request is evaluated by an **additive 0–100 risk-scoring engine**. Signals are scored independently and summed:

SignalPointsRationaleEmpty/missing UA+40No legitimate browser omits UAHeadless UA hint+25Puppeteer, PhantomJS, PlaywrightMissing Accept-\*+15Real browsers always send AcceptPOST without Referer+20Form spam / API abuse patternRate burst (>24/sec)+35Automated scanning / DDoS5-Tier Graduated Response
-------------------------

[](#5-tier-graduated-response)

TierScore RangeAction**ALLOW**0 – 39Request proceeds normally**SLOW**40 – 592-second `usleep()` delay**CHALLENGE**60 – 74JavaScript challenge page**DECOY**75 – 84Serve fake/scrambled content**BLOCK**85 – 100Hard block (403 + `exit`)Installation
------------

[](#installation)

### Method 1: auto\_prepend\_file (Recommended)

[](#method-1-auto_prepend_file-recommended)

```
; php.ini or .user.ini
auto_prepend_file = /path/to/agent.php
```

### Method 2: require\_once

[](#method-2-require_once)

```