## Security features for real response.

The plugin is built around response workflows: detect attacks, log context, block abusive traffic, harden the site, scan files, export evidence, and explain what happened.

SOC Dashboard

### Live event visibility, not just a static scan result.

Track security activity with summaries, severity mix, category charts, live event view, and session correlation by IP, user agent, and user.

- Logins, plugin/theme changes, file edits, and suspicious requests.
- IP, method, URI, user agent, severity, category, and risk score.
- MITRE and OWASP mapping for incident review.

Active Defense

### Detect abuse and respond from inside WordPress.

The active defense layer watches for scanning, login sprays, exploit probes, and suspicious HTTP payloads, then rate-limits or blocks based on risk.

- SQL injection, XSS, RCE, LFI, scanner, and enumeration patterns.
- Manual IP/CIDR blocklist with temporary or permanent blocks.
- Cloudflare support for pushing single-IP blocks to the edge.

## Security controls beyond malware scanning.

WP Malware Guard is designed as a defense and audit layer, not only a file scanner.

File Integrity

### Find suspicious PHP and checksum drift.

Scan for obfuscation, web shells, sensitive files, risky permissions, and WordPress core checksum mismatches.

Quarantine

### Respond without FTP.

Quarantine, restore, delete, and export selected findings directly from wp-admin.

Hardening

### Reduce the attack surface.

Custom login URL, XML-RPC controls, REST restrictions, CAPTCHA, directory indexing, headers, author enumeration, and file permission review.

Simulator

### Validate detection safely.

Run safe simulations for brute-force, SQL injection, XSS, and malicious upload indicators to test alerts and team readiness.

Backups

### Create evidence and restore bundles.

Generate evidence backups plus full-site backup and restore controls for files and database workflows.

Compliance

### Export logs for audits.

Use CSV/JSON exports, retention cleanup, filters, pagination, and bulk actions for high-volume sites.

Alerts

### Route important incidents.

Central alert settings support email routing and SIEM webhook delivery with severity controls.

Host Friendly

### No heavy UI framework.

The plugin keeps the admin lightweight and uses WordPress-native storage patterns without extra database tables.

Reports and evidence

## A4 PDF reports built for real handoff.

Generate readable HTML and A4 PDF reports that include site identity, timestamp, security mode, settings, recent events, timeline sessions, hardening status, and last scan summary.

Get Pro Download Free

## Simple pricing by license count.

Start free with core protection and response tools. Upgrade when you need SOC operations, SIEM routing, simulator drills, complete restore workflows, and multi-site licensing.

Every normal license activates one WordPress site. Agency includes 100 site licenses.

Plan | Price | License | Included | Action
--- | --- | --- | --- | ---
Free Starter protection for one site. | $0 forever | 1 site Free package. | Overview dashboard and events Scanner, file tools, and quarantine Firewall, hardening, and CAPTCHA HTML and A4 PDF reports | Download
Single Site Pro Best for one business site. | $9 /mo | 1 site One license, one website. | Everything in Free SOC dashboard and live view Alerts and SIEM routing Simulator plus full backup/restore | Buy Monthly
10 Site Pro For operators managing client sites. | $19 /mo | 10 sites One activation per site. | Everything in Single Site Pro 10 one-site activations Client-site SOC workflows Consistent reports and restore controls | Buy Monthly
Agency For agencies and security service providers. | $49 /mo | 100 sites 100 single-site licenses. | Everything in Pro 100 license capacity Client reporting workflows Agency incident handoff | Buy Monthly

## Compare the plan levels.

Free includes the core security toolkit. Pro and Agency add SOC operations, SIEM routing, simulator drills, complete restore workflows, and commercial license capacity.

Feature | Free | Pro | Agency
--- | --- | --- | ---
Security overview dashboard | Yes | Yes | Yes
SIEM dashboard and timeline | Pro | Yes | Yes
Event log, filters, pagination, CSV/JSON export | Yes | Yes | Yes
LCAT attack timeline and session correlation | Yes | Yes | Yes
Suspicious HTTP detection and risk scoring | Yes | Yes | Yes
Firewall, rate limit, IP blocklist, Cloudflare push | Yes | Yes | Yes
File integrity, recommendations, and quarantine | Yes | Yes | Yes
Form CAPTCHA protection | Yes | Yes | Yes
HTML and A4 PDF report export | Yes | Yes | Yes
Evidence backup export | Yes | Yes | Yes
Email alerts and SIEM webhook routing | Pro | Yes | Yes
Threat simulator drills | Pro | Yes | Yes
Complete backup and restore | Pro | Yes | Yes
License capacity | 1 free site | 1 or 10 sites | 100 sites

## Frequently asked questions.

Short answers for installation, licensing, reports, and security operations.

Can one license be used on multiple sites?

No. One normal license is for one WordPress site only. Agency includes 100 single-site licenses.

Does the free package include a download?

Yes. The Free package is available from the download button on this page.

What makes Pro different?

Pro adds SOC dashboards, live view, SIEM routing, email alerts, threat simulator drills, complete backup/restore, and commercial one-site licensing. Agency adds 100 single-site activations.

Does the Free plugin become Pro after entering a key?

No. The Free package does not show a license input. Paid customers install the Pro ZIP from the purchase delivery, then activate the Dodo license key inside the Pro package.

Does it create PDF reports?

Yes. WP Malware Guard can generate A4 PDF reports with site identity, timestamp, footer, event details, settings, hardening status, and scan summary.

Does it need FTP for quarantine?

No. Suspicious files can be quarantined, restored, or deleted from the WordPress admin response controls.

Is Dodo Payments licensing supported?

Yes. The plugin has commercial license activation, validation, deactivation, tier mapping, and Pro feature gating ready for Dodo-powered sales.

Ready to protect your site?

## Install WP Malware Guard today.

Start with the free package, then move to Pro when you need full SOC-grade event logging, active defense, reports, backups, and licensing workflows.

Buy Pro Download Free