Free beta ZIP is ready now. Pro unlocks SOC dashboard, active defense, quarantine, backup, SIEM routing, A4 PDF reporting, and Dodo-managed commercial licensing.

Download Free ZIP View Sample PDF
0.4.0 Current installable build on swadhinkhan.com.
A4 PDF reports with logo, timestamp, footer, and evidence detail.
500 Largest per-page admin pagination size for row-heavy screens.
100 Agency package license count for client websites.
1 site Each regular license activates on one WordPress website only.

## More than an audit log. It responds.

WP Malware Guard is built around the full incident workflow: notice the attack, group it into sessions, block repeat behavior, inspect files, quarantine safely, and export proof.

SOC layer

### Event logging with context

Tracks logins, plugin and theme changes, file edits, suspicious HTTP activity, IP, method, URI, user agent, severity, category, MITRE, and OWASP mapping.

Defense

### Active blocking

Detects login sprays, scanners, XML-RPC abuse, SQL injection, XSS, RCE, and LFI patterns, then rate-limits or blocks based on risk.

Files

### Malware scanning

Finds obfuscated PHP, sensitive files, executable uploads, weak permissions, and WordPress core checksum drift.

Response

### Quarantine controls

Quarantine, restore, or delete suspicious files from WordPress admin without FTP access.

Evidence

### Reports and backups

Generate readable HTML, A4 PDF reports, CSV/JSON exports, and compact evidence backup bundles for incident handoff.

Hardening

### Admin protection tools

Change login URL, manage directory indexing, security headers, XML-RPC, REST restrictions, author enumeration, permissions, and Cloudflare IP blocks.

## The admin screen is the product proof.

Real screenshots from the installed plugin show the SOC dashboard, hardening controls, and reporting workflow now live in v0.4.0.

SOC dashboard with Basic, Active, and Under Attack modes, SIEM status, severity mix, live events, and session correlation.
Hardening controls cover custom login URL, directory indexing, browser security headers, author archive blocking, and file permissions.
Reports and evidence backups produce client-ready handoff material, including A4 PDF output.

## A practical security workflow for WordPress operators.

Designed for owners and agencies who need to move from detection to proof without leaving WordPress admin.

1.0

### Detect

Inspect suspicious requests, login attempts, plugin changes, file edits, and scanner findings with severity and risk scoring.

2.0

### Correlate

Group events into sessions by IP, user agent, and user so repeated attacks are easier to understand.

3.0

### Respond

Apply local blocks, Cloudflare edge rules, rate limits, quarantine, restore, and permission checks from admin.

4.0

### Report

Export PDF, HTML, CSV, JSON, and evidence backups with timestamps, settings, scan summaries, and recent events.

## Free is useful. Pro is the lightweight SOC.

The Pro plan includes the full feature set requested for active defense, compliance, backups, hardening, and client reporting.

Feature area | Free | Pro
--- | --- | ---
SOC-grade event logging | Basic activity visibility. | Included with rich request context, severity, category, MITRE, and OWASP mapping.
SIEM dashboard and timeline | Limited overview. | Included with summaries, live refresh, and session correlation.
Active defense system | Manual blocks. | Included rate limits, risk-based blocking, scanner detection, and attack modes.
Alert center and notifications | Local admin notices. | Included email and SIEM destination routing with severity filters.
File integrity and quarantine | Basic scan path. | Included suspicious PHP detection, core checksums, file permissions, quarantine, restore, and delete controls.
Hardening and admin tools | Basic hardening. | Included custom login URL, directory indexing, XML-RPC, REST, headers, Cloudflare blocklist, and permission fixes.
Threat simulator | Not included. | Included brute force, SQLi, XSS, and malicious upload simulations.
Complete backup and restore | Manual export only. | Included full-site backups plus file, plugin, theme, or whole-site restore controls.
Reporting and compliance | HTML report preview. | Included A4 PDF reports, evidence backups, CSV/JSON export, retention policies, filters, pagination, and bulk actions.

## Pricing that keeps licensing simple.

One regular license is valid for one website only. Agency includes 100 website licenses for client work. Monthly and yearly prices can change later before public checkout opens.

Lifetime column stays visible for one-time buyers.

Package | Selected billing | Lifetime | Website license | Includes | Action
--- | --- | --- | --- | --- | ---
Free Install the current beta build. | $0 free | $0 | 1 website beta install No paid key required. | Malware scan basics Audit log basics Basic hardening Report preview | Download ZIP
Starter For one small WordPress site. | $9 per month | $149 | 1 website license One key activates one site. | Everything in Free Cleaner audit views Email alerts Updates during term | Coming soon
Pro For active businesses and shops. | $19 per month | $299 | 1 website license Dodo-managed activation. | Full SOC dashboard Quarantine and response Backups and restore A4 PDF reporting | Coming soon
Agency For client WordPress work. | $49 per month | $799 | 100 website licenses Each website still uses one activation. | Everything in Pro Client report workflow Agency license pool Priority roadmap access | Coming soon

## Reporting is not an afterthought.

Generate A4 PDF reports with site identity, timestamp, footer, plugin version, WordPress version, license state, event totals, scan summary, hardening status, session correlation, and recent incident detail.

Open sample PDF

Download the free beta. Upgrade when Pro checkout opens.

Download WP Malware Guard v0.4.0 View report sample

ZIP SHA-256: `190462028fb5205e994f09a6e40c9b9de975aca99f668b898556810991b86daf`