# WP Malware Guard

WP Malware Guard is a commercial WordPress security plugin for malware protection, security audit logging, request monitoring, firewall response, file integrity scanning, hardening, alerting, reporting, and license activation.

## Current Release

- Version: `0.4.20`
- Plugin folder: `wp-malware-guard`
- Free ZIP: `dist/wp-malware-guard-free-0.4.20.zip`
- Pro ZIP: `dist/wp-malware-guard-pro-0.4.20.zip`

## Included Features

- SOC-grade security event log with severity, category, IP, method, URI, user agent, risk score, MITRE/OWASP context, and bulk exports.
- Request threat detector for SQL injection, XSS, RCE, LFI/path traversal, scanner probes, sensitive-file probes, user enumeration, and malicious upload indicators.
- Firewall mode with monitor-only default, optional blocking by risk score, and active-defense IP blocking.
- Basic, Active, and Under Attack security modes that tune effective firewall and rate-limit behavior.
- Manual IP/CIDR blocklist with temporary or permanent blocks, pagination, bulk deactivation, and Cloudflare push.
- Global rate limiting.
- Login brute-force protection with temporary auto-blocking.
- File scanner for web shells, obfuscated PHP, executable files in uploads, writable core files, recent executable changes, and WordPress core checksum drift.
- File quarantine, restore, delete, paginated findings, and selected-finding CSV/JSON exports.
- Hardening toggles for XML-RPC, REST API restriction, WordPress version hiding, custom login URL, directory indexing, security headers, author enumeration, file permissions, and file-editing guidance.
- CAPTCHA protection with built-in math CAPTCHA, Google reCAPTCHA v2, and Cloudflare Turnstile for WordPress and WooCommerce forms.
- Email alerts with cooldown and SIEM webhook routing.
- SOC dashboard, live view, charts, and session timeline correlation for repeated attack paths.
- Threat simulator for safe brute-force, SQL injection, XSS, and malicious upload drills.
- Cloudflare edge blocking with optional auto-push for single-IP blocks.
- HTML and A4 PDF security report export.
- Evidence backup export plus complete backup and restore controls.
- Split Free and Pro package flows. The Free ZIP shows upgrade packages only; the Pro ZIP handles Dodo license activation, validation, deactivation, status display, tier mapping, and paid feature gating.

## Commercial Licensing

Free users install the Free ZIP and can review package options without entering a license key. Paid customers install the Pro ZIP delivered after purchase, then activate the Dodo license key in wp-admin. API secrets stay server-side with your seller/license manager.

## Build

```bash
./build.sh
```

## Install

Upload `dist/wp-malware-guard-free-0.4.20.zip` for the free package, or `dist/wp-malware-guard-pro-0.4.20.zip` for the licensed Pro package, in WordPress admin under Plugins -> Add New -> Upload Plugin.

## Notes

This is an original implementation. It intentionally does not copy WPAuditor code, branding, assets, or proprietary UI.
