Whitelist

The Whitelist sub-tab defines the IP addresses that will never be blocked automatically by the mitigation system, no matter how many alerts they generate — a critical protection to avoid locking out administrators, offices, and other legitimate systems.

How it works

The whitelist is managed from the panel and synchronized to the plugin: every IP you add or remove here is pushed to the WordPress site immediately, and the plugin does not allow editing the list locally. Whitelisted IPs are immune to automatic blocks; an administrator can still block them manually if needed.

Note

By default, the plugin also suppresses alerts generated by whitelisted IPs, so trusted activity does not create noise in the SIEM. This option can be turned off in the plugin’s Mitigation section — see Whitelist in the plugin.

What the list shows

Each entry displays:

• IP address — the protected IPv4 address.
• Description — who or what uses that IP.
• Origin — a SIEM badge for IPs added from the panel, or an Initial IP badge for the IP added automatically during pairing (the address that connected the plugin).
• Added — when the IP joined the list, as relative time.

Add an IP to the whitelist

1. Click Add IP to open the dialog.

2. Enter the IP address (IPv4, validated in the form) and a description — optional, but recommended to document the entry, for example “Main office” or “Monitoring server”.

3. Confirm with Add to Whitelist. The IP is stored for the site and pushed to the plugin immediately.

To remove an entry, click Remove on its row — the change also syncs to the plugin, and from that moment the IP can be blocked automatically again.

When to use the whitelist

1. Administrator IPs — your office/home IP, your development team, the site’s administrators.
2. Technical infrastructure — monitoring servers, automated backups, APIs that interact with the site.
3. Corporate locations — fixed office IPs, company VPN.
4. False-positive resolution — legitimate IPs that repeatedly trigger alerts.

Best practices

• Add your administrator IP right after enabling mitigation rules — especially before enabling the User Manipulation or File Editor rules.
• Document each IP clearly with its description.
• Review the whitelist periodically and remove stale entries.
• Avoid whitelisting dynamic IPs that change frequently, or adding IPs “just in case”.

Important warnings

Caution

The whitelist only protects against automatic blocks by the mitigation system. It does not prevent manual blocks by administrators, server or firewall-level blocks, or other WordPress security measures.

Security considerations

• Only add IPs you fully trust.
• A compromised whitelisted IP is a critical weakness: it can generate alerts without ever being blocked automatically.
• Review the alerts and mitigation history regularly to detect abuse from whitelisted IPs.

Next steps

• Rules — enable automatic blocking once your trusted IPs are protected.
• Blocked IPs — review and manage the IPs currently blocked.
• Whitelist in the plugin — how the site applies the synchronized list.