How can I find out which component is responsible for blocking a request?

Every firewall log entry includes the name of the Joomla component that was active when the request was blocked.

To find it, go to Components > SecurityCheck Pro > View Logs and open the relevant log entry. The Component column shows the component name (for example, com_users).

Use this information to add a targeted exception. The quickest way is to click the Add Exception button at the top of the View Logs page — it pre-fills the exception form with the component and attack type from the selected entry. Alternatively, add the component manually in Web Firewall Configuration > Exceptions under the relevant attack type (for example, add com_users to the XSS exceptions list if the block was an XSS detection). This allows legitimate requests from that component to pass through while the filter continues to protect the rest of the site.