Note: Kavach is a security bundle add-on for Perfex CRM. It is not a standalone script and requires Perfex CRM to function.
Overview
Kavach – Security Bundle for Perfex CRM is a comprehensive collection of security and access-control tools designed to help administrators protect their Perfex CRM installation, control account access, monitor user activity, and manage authentication-related security policies from a single solution.
Kavach brings together login protection, session management, account restrictions, geo-based access control, password security, login history, and detailed activity logging into one lightweight and easy-to-manage security bundle.
Whether you need to prevent repeated failed login attempts, restrict access by location or device, enforce password policies, control when users can log in, or investigate account activity, Kavach gives you the tools to manage these security requirements directly from your Perfex CRM admin area.
Demo
Note: For security reasons, IP addresses are not displayed or saved in the demo version.
Admin Login:
https://perfex.codeonstring.com/eu/admin
Email: [email protected]
Password: 123456789
Staff Login:
https://perfex.codeonstring.com/eu/admin
Email: [email protected]
Password: 123456789
Customer Login:
https://perfex.codeonstring.com/eu/login
Email: [email protected]
Password: 123456789
GeoIP Note: Country detection is generally reliable, however, state, city, and postal code data may sometimes vary due to ISP routing and location-detection limitations. For more reliable restrictions, consider adding multiple cities or postal codes where appropriate.
Features
Login Attempt Protection
- Limit the number of failed login attempts with a configurable threshold.
- Progressive lockout with configurable base lock time and multiplier.
- Set a maximum lockout level for repeated failed attempts.
- Require administrator intervention to unblock accounts when maximum lockout is reached.
- Automatically reset failed login attempts after 24 hours.
- Receive in-app notifications when accounts are locked due to failed login attempts.
Login Session Management
- View currently active user sessions from the admin panel.
- View user, IP address, device, browser, and login time information.
- Force logout active sessions remotely.
- Apply temporary login bans when required.
- Optional single-login enforcement to allow only one active session per user.
- Automatically expire stale sessions after inactivity.
Login History & Monitoring
- Track login and logout activity across your Perfex CRM installation.
- Record session duration, IP address, device, and browser information.
- Filter login records by date range, user, IP, device, and browser.
- Quickly review login activity for security investigations and auditing.
- Clear old login records when required.
Account Access Controls
- Define allowed login hours for users.
- Allow or block access on specific days of the week.
- Restrict access based on device type or operating system.
- Apply restrictions globally, individually, or in bulk.
- Manage access policies for both staff and customers.
GeoIP & Access Restriction
- Restrict access by IP address.
- Restrict access by country, state, city, or postal code.
- Restrict access based on user email.
- Switch between Blacklist and Whitelist modes.
- Manage multiple restriction entries directly from the admin panel.
- Use the built-in country list for easier configuration.
- Includes VPN detection for additional access-control checks.
Password Security & Rotation
- Enforce password rotation with a configurable expiry period.
- Set stronger password requirements to prevent weak credentials.
- Send in-app reminders before passwords expire.
- Automatically restrict accounts when passwords expire until they are reset.
- Configure password policies independently for staff and customers.
- Receive in-app notifications when accounts are affected by password expiry or reset policies.
Extended Activity Log
- Track important user actions performed across Perfex CRM.
- Record the module, reference ID, action, IP address, device, and browser.
- Filter activity by user, date range, or module.
- Review detailed activity records for auditing and investigations.
- Quickly clear old activity records when required.
Why Kavach?
- Comprehensive Security – Multiple security and access-control features combined into one solution.
- Centralized Management – Configure and manage security controls directly from your Perfex CRM admin area.
- Staff & Customer Support – Apply relevant security policies to both staff and customer accounts.
- Detailed Visibility – Monitor login activity, active sessions, and important user actions.
- Flexible Access Control – Control access based on time, day, device, location, IP, email, and other supported criteria.
- Lightweight & Modular – Designed to integrate into Perfex CRM without modifying its core files.
What’s Included
Kavach combines 4 security products into one comprehensive bundle, covering a total of 7 security modules.
4 Products • 7 Security Modules • 1 Complete Bundle
Note: Kavach includes the latest versions of all products listed above.
Requirements
- Perfex CRM version 3.1.0 or higher
Easy Installation
Kavach is designed for a simple installation and configuration process. No coding knowledge is required, and all available security settings can be managed directly from the Perfex CRM admin panel.
No Perfex CRM core files are modified. Kavach is designed as a modular add-on to help keep your installation update-safe.
Documentation
For detailed installation, configuration, and usage instructions, please refer to the online documentation:
https://perfex.codeonstring.com/eu/kavach-documentation
Support
Comprehensive documentation is included with Kavach. If you need further assistance, feel free to contact us at
[email protected].
Change Log
Version 1.0.0
- Initial Release