I really like the concept of how the plugin is build, with things in mind like compatibility, performance and everything else described here: https://www.icontrolwp.com/2014/05/wordpress-security-wordpress-simple-firewall-plugin-part-1-why/

Sounds like good planing and quality code, which I miss too often in todays fast pace (development/business) world.

We also use it at a company blog and I once saw the bruteforce protection in action slowing down the attack effectively. Once configured it also didn’t get into my way by producing new errors or demanding maintanence, it just works in the background and does it’s job without interfering, as good software should. Not touching the .htaccess file but still handling security well is another concept I like and it helped running it on a Microsoft IIS server which doesn’t use .htaccess (don’t ask why someone has to run WP on IIS …).

Support also seems good and responsive, but not much needed yet.

What I dont’t like is so much begging for 5 star ratings. This, way too big, green info block in WP admin area is hopefully the last thing I will see regarding this. Yes, it took me here and it’s worth 5 stars from my perspective. I didn’t rate yet since I generally don’t do this much and also wanted to test it for a while. But still I consider this somehow bad advertising, not really fitting in to the concept described above. I understand that a new player in a mature market needs to get known somehow, also good ones. But this may be too much. And top notch software will get known and get a good reputation even without advertising (that much), it just may take it’s time.

So I’m not sure yet if this is just a marketing strategy (with good software) promoting their commercial IcontrolWP service. In German we say it has a bit of an aftertaste… so don’t stress it too much guys.

Anyway thanks for this good and solid software for free (so far?)!
Oliver