WordPress security, audit, protection

Run WordPress security like a SOC.

WP Malware Guard combines malware scanning, request detection, audit logging, active defense, hardening, reports, and Dodo-powered commercial licensing in one WordPress plugin.

Buy Pro Download v0.4.20
One license can be used on one site only. Agency includes 100 single-site licenses.
A4 PDFFormatted reports with logo, footer, timestamp, and incident details.
MITRE + OWASPSecurity events include framework mapping when detections match.
Bulk controlsPagination, exports, quarantine, and bulk actions for busy sites.
Dodo readyFree download stays separate from the Pro ZIP and license activation flow.
WP Malware Guard security dashboard showing event counts, security mode, scan status, and recent events.

Security features for real response.

The plugin is built around response workflows: detect attacks, log context, block abusive traffic, harden the site, scan files, export evidence, and explain what happened.

SOC Dashboard

Live event visibility, not just a static scan result.

Track security activity with summaries, severity mix, category charts, live event view, and session correlation by IP, user agent, and user.

  • Logins, plugin/theme changes, file edits, and suspicious requests.
  • IP, method, URI, user agent, severity, category, and risk score.
  • MITRE and OWASP mapping for incident review.
WP Malware Guard SOC dashboard with severity mix, categories, live event view, and session correlator.
Active Defense

Detect abuse and respond from inside WordPress.

The active defense layer watches for scanning, login sprays, exploit probes, and suspicious HTTP payloads, then rate-limits or blocks based on risk.

  • SQL injection, XSS, RCE, LFI, scanner, and enumeration patterns.
  • Manual IP/CIDR blocklist with temporary or permanent blocks.
  • Cloudflare support for pushing single-IP blocks to the edge.
WP Malware Guard dashboard with active mode, firewall settings, and recent monitored events.

Security controls beyond malware scanning.

WP Malware Guard is designed as a defense and audit layer, not only a file scanner.

File Integrity

Find suspicious PHP and checksum drift.

Scan for obfuscation, web shells, sensitive files, risky permissions, and WordPress core checksum mismatches.

Quarantine

Respond without FTP.

Quarantine, restore, delete, and export selected findings directly from wp-admin.

Hardening

Reduce the attack surface.

Custom login URL, XML-RPC controls, REST restrictions, CAPTCHA, directory indexing, headers, author enumeration, and file permission review.

Simulator

Validate detection safely.

Run safe simulations for brute-force, SQL injection, XSS, and malicious upload indicators to test alerts and team readiness.

Backups

Create evidence and restore bundles.

Generate evidence backups plus full-site backup and restore controls for files and database workflows.

Compliance

Export logs for audits.

Use CSV/JSON exports, retention cleanup, filters, pagination, and bulk actions for high-volume sites.

Alerts

Route important incidents.

Central alert settings support email routing and SIEM webhook delivery with severity controls.

Host Friendly

No heavy UI framework.

The plugin keeps the admin lightweight and uses WordPress-native storage patterns without extra database tables.

Reports and evidence

A4 PDF reports built for real handoff.

Generate readable HTML and A4 PDF reports that include site identity, timestamp, security mode, settings, recent events, timeline sessions, hardening status, and last scan summary.

Get Pro Download Free
WP Malware Guard reports and evidence backup screen with PDF report and evidence backup controls.

Simple pricing by license count.

Start free with core protection and response tools. Upgrade when you need SOC operations, SIEM routing, simulator drills, complete restore workflows, and multi-site licensing.

Every normal license activates one WordPress site. Agency includes 100 site licenses.
Plan Price License Included Action
FreeStarter protection for one site. $0 forever 1 siteFree package.
  • Overview dashboard and events
  • Scanner, file tools, and quarantine
  • Firewall, hardening, and CAPTCHA
  • HTML and A4 PDF reports
 Download
Single Site ProBest for one business site. $9 /mo 1 siteOne license, one website.
  • Everything in Free
  • SOC dashboard and live view
  • Alerts and SIEM routing
  • Simulator plus full backup/restore
 Buy Monthly
10 Site ProFor operators managing client sites. $19 /mo 10 sitesOne activation per site.
  • Everything in Single Site Pro
  • 10 one-site activations
  • Client-site SOC workflows
  • Consistent reports and restore controls
 Buy Monthly
AgencyFor agencies and security service providers. $49 /mo 100 sites100 single-site licenses.
  • Everything in Pro
  • 100 license capacity
  • Client reporting workflows
  • Agency incident handoff
 Buy Monthly

Compare the plan levels.

Free includes the core security toolkit. Pro and Agency add SOC operations, SIEM routing, simulator drills, complete restore workflows, and commercial license capacity.

Feature Free Pro Agency
Security overview dashboardYesYesYes
SIEM dashboard and timelineProYesYes
Event log, filters, pagination, CSV/JSON exportYesYesYes
LCAT attack timeline and session correlationYesYesYes
Suspicious HTTP detection and risk scoringYesYesYes
Firewall, rate limit, IP blocklist, Cloudflare pushYesYesYes
File integrity, recommendations, and quarantineYesYesYes
Form CAPTCHA protectionYesYesYes
HTML and A4 PDF report exportYesYesYes
Evidence backup exportYesYesYes
Email alerts and SIEM webhook routingProYesYes
Threat simulator drillsProYesYes
Complete backup and restoreProYesYes
License capacity1 free site1 or 10 sites100 sites

Frequently asked questions.

Short answers for installation, licensing, reports, and security operations.

Can one license be used on multiple sites?

No. One normal license is for one WordPress site only. Agency includes 100 single-site licenses.

Does the free package include a download?

Yes. The Free package is available from the download button on this page.

What makes Pro different?

Pro adds SOC dashboards, live view, SIEM routing, email alerts, threat simulator drills, complete backup/restore, and commercial one-site licensing. Agency adds 100 single-site activations.

Does the Free plugin become Pro after entering a key?

No. The Free package does not show a license input. Paid customers install the Pro ZIP from the purchase delivery, then activate the Dodo license key inside the Pro package.

Does it create PDF reports?

Yes. WP Malware Guard can generate A4 PDF reports with site identity, timestamp, footer, event details, settings, hardening status, and scan summary.

Does it need FTP for quarantine?

No. Suspicious files can be quarantined, restored, or deleted from the WordPress admin response controls.

Is Dodo Payments licensing supported?

Yes. The plugin has commercial license activation, validation, deactivation, tier mapping, and Pro feature gating ready for Dodo-powered sales.

Ready to protect your site?

Install WP Malware Guard today.

Start with the free package, then move to Pro when you need full SOC-grade event logging, active defense, reports, backups, and licensing workflows.

Buy Pro Download Free