v0.4.0 Dodo licensing A4 PDF reports 1 license = 1 site

WP Malware Guard

WordPress malware defense center for audit logs, active blocking, suspicious file scans, quarantine, hardening, backups, and clean client-ready reports.

Free beta ZIP is ready now. Pro unlocks SOC dashboard, active defense, quarantine, backup, SIEM routing, A4 PDF reporting, and Dodo-managed commercial licensing.

0.4.0Current installable build on swadhinkhan.com.
A4PDF reports with logo, timestamp, footer, and evidence detail.
500Largest per-page admin pagination size for row-heavy screens.
100Agency package license count for client websites.
1 siteEach regular license activates on one WordPress website only.

More than an audit log. It responds.

WP Malware Guard is built around the full incident workflow: notice the attack, group it into sessions, block repeat behavior, inspect files, quarantine safely, and export proof.

SOC layer

Event logging with context

Tracks logins, plugin and theme changes, file edits, suspicious HTTP activity, IP, method, URI, user agent, severity, category, MITRE, and OWASP mapping.

Defense

Active blocking

Detects login sprays, scanners, XML-RPC abuse, SQL injection, XSS, RCE, and LFI patterns, then rate-limits or blocks based on risk.

Files

Malware scanning

Finds obfuscated PHP, sensitive files, executable uploads, weak permissions, and WordPress core checksum drift.

Response

Quarantine controls

Quarantine, restore, or delete suspicious files from WordPress admin without FTP access.

Evidence

Reports and backups

Generate readable HTML, A4 PDF reports, CSV/JSON exports, and compact evidence backup bundles for incident handoff.

Hardening

Admin protection tools

Change login URL, manage directory indexing, security headers, XML-RPC, REST restrictions, author enumeration, permissions, and Cloudflare IP blocks.

The admin screen is the product proof.

Real screenshots from the installed plugin show the SOC dashboard, hardening controls, and reporting workflow now live in v0.4.0.

WP Malware Guard SOC dashboard with security modes, event summaries, and session correlator
SOC dashboard with Basic, Active, and Under Attack modes, SIEM status, severity mix, live events, and session correlation.
WP Malware Guard hardening screen with login URL, directory indexing, headers, and file permissions
Hardening controls cover custom login URL, directory indexing, browser security headers, author archive blocking, and file permissions.
WP Malware Guard reports and evidence backup screen
Reports and evidence backups produce client-ready handoff material, including A4 PDF output.

A practical security workflow for WordPress operators.

Designed for owners and agencies who need to move from detection to proof without leaving WordPress admin.

1.0

Detect

Inspect suspicious requests, login attempts, plugin changes, file edits, and scanner findings with severity and risk scoring.

2.0

Correlate

Group events into sessions by IP, user agent, and user so repeated attacks are easier to understand.

3.0

Respond

Apply local blocks, Cloudflare edge rules, rate limits, quarantine, restore, and permission checks from admin.

4.0

Report

Export PDF, HTML, CSV, JSON, and evidence backups with timestamps, settings, scan summaries, and recent events.

Free is useful. Pro is the lightweight SOC.

The Pro plan includes the full feature set requested for active defense, compliance, backups, hardening, and client reporting.

Feature areaFreePro
SOC-grade event loggingBasic activity visibility.Included with rich request context, severity, category, MITRE, and OWASP mapping.
SIEM dashboard and timelineLimited overview.Included with summaries, live refresh, and session correlation.
Active defense systemManual blocks.Included rate limits, risk-based blocking, scanner detection, and attack modes.
Alert center and notificationsLocal admin notices.Included email and SIEM destination routing with severity filters.
File integrity and quarantineBasic scan path.Included suspicious PHP detection, core checksums, file permissions, quarantine, restore, and delete controls.
Hardening and admin toolsBasic hardening.Included custom login URL, directory indexing, XML-RPC, REST, headers, Cloudflare blocklist, and permission fixes.
Threat simulatorNot included.Included brute force, SQLi, XSS, and malicious upload simulations.
Complete backup and restoreManual export only.Included full-site backups plus file, plugin, theme, or whole-site restore controls.
Reporting and complianceHTML report preview.Included A4 PDF reports, evidence backups, CSV/JSON export, retention policies, filters, pagination, and bulk actions.

Pricing that keeps licensing simple.

One regular license is valid for one website only. Agency includes 100 website licenses for client work. Monthly and yearly prices can change later before public checkout opens.

Lifetime column stays visible for one-time buyers.
PackageSelected billingLifetimeWebsite licenseIncludesAction
FreeInstall the current beta build. $0 free $0 1 website beta installNo paid key required.
  • Malware scan basics
  • Audit log basics
  • Basic hardening
  • Report preview
Download ZIP
StarterFor one small WordPress site. $9 per month $149 1 website licenseOne key activates one site.
  • Everything in Free
  • Cleaner audit views
  • Email alerts
  • Updates during term
Coming soon
ProFor active businesses and shops. $19 per month $299 1 website licenseDodo-managed activation.
  • Full SOC dashboard
  • Quarantine and response
  • Backups and restore
  • A4 PDF reporting
Coming soon
AgencyFor client WordPress work. $49 per month $799 100 website licensesEach website still uses one activation.
  • Everything in Pro
  • Client report workflow
  • Agency license pool
  • Priority roadmap access
Coming soon

Reporting is not an afterthought.

Generate A4 PDF reports with site identity, timestamp, footer, plugin version, WordPress version, license state, event totals, scan summary, hardening status, session correlation, and recent incident detail.

Open sample PDF

Reports and evidence backup buttons in WP Malware Guard

Download the free beta. Upgrade when Pro checkout opens.

ZIP SHA-256: 190462028fb5205e994f09a6e40c9b9de975aca99f668b898556810991b86daf