Kavach – Security Bundle for Perfex CRM

Note: Kavach is a security bundle add-on for Perfex CRM. It is not a standalone script and requires Perfex CRM to function.OverviewKavach – Security Bundle for Perfex CRM is a comprehensive collection of security and access-control tools designed to help administrators protect their Perfex CRM installation, control account access, monitor user activity, and manage authentication-related security policies from a single solution.Kavach brings together login protection, session management, account restrictions, geo-based access control, password security, login history, and detailed activity logging into one lightweight and easy-to-manage security bundle.Whether you need to prevent repeated failed login attempts, restrict access by location or device, enforce password policies, control when users can log in, or investigate account activity, Kavach gives you the tools to manage these security requirements directly from your Perfex CRM admin area.FeaturesLogin Attempt ProtectionLimit the number of failed login attempts with a configurable threshold. Progressive lockout with configurable base lock time and multiplier. Set a maximum lockout level for repeated failed attempts. Require administrator intervention to unblock accounts when maximum lockout is reached. Automatically reset failed login attempts after 24 hours. Receive in-app notifications when accounts are locked due to failed login attempts.Login Session ManagementView currently active user sessions from the admin panel. View user, IP address, device, browser, and login time information. Force logout active sessions remotely. Apply temporary login bans when required. Optional single-login enforcement to allow only one active session per user. Automatically expire stale sessions after inactivity.Login History & MonitoringTrack login and logout activity across your Perfex CRM installation. Record session duration, IP address, device, and browser information. Filter login records by date range, user, IP, device, and browser. Quickly review login activity for security investigations and auditing. Clear old login records when required.Account Access ControlsDefine allowed login hours for users. Allow or block access on specific days of the week. Restrict access based on device type or operating system. Apply restrictions globally, individually, or in bulk. Manage access policies for both staff and customers.GeoIP & Access RestrictionRestrict access by IP address. Restrict access by country, state, city, or postal code. Restrict access based on user email. Switch between Blacklist and Whitelist modes. Manage multiple restriction entries directly from the admin panel. Use the built-in country list for easier configuration. Includes VPN detection for additional access-control checks.Password Security & RotationEnforce password rotation with a configurable expiry period. Set stronger password requirements to prevent weak credentials. Send in-app reminders before passwords expire. Automatically restrict accounts when passwords expire until they are reset. Configure password policies independently for staff and customers. Receive in-app notifications when accounts are affected by password expiry or reset policies.Extended Activity LogTrack important user actions performed across Perfex CRM. Record the module, reference ID, action, IP address, device, and browser. Filter activity by user, date range, or module. Review detailed activity records for auditing and investigations. Quickly clear old activity records when required.