Event logging with context
Tracks logins, plugin and theme changes, file edits, suspicious HTTP activity, IP, method, URI, user agent, severity, category, MITRE, and OWASP mapping.
WordPress malware defense center for audit logs, active blocking, suspicious file scans, quarantine, hardening, backups, and clean client-ready reports.
Free beta ZIP is ready now. Pro unlocks SOC dashboard, active defense, quarantine, backup, SIEM routing, A4 PDF reporting, and Dodo-managed commercial licensing.
WP Malware Guard is built around the full incident workflow: notice the attack, group it into sessions, block repeat behavior, inspect files, quarantine safely, and export proof.
Tracks logins, plugin and theme changes, file edits, suspicious HTTP activity, IP, method, URI, user agent, severity, category, MITRE, and OWASP mapping.
Detects login sprays, scanners, XML-RPC abuse, SQL injection, XSS, RCE, and LFI patterns, then rate-limits or blocks based on risk.
Finds obfuscated PHP, sensitive files, executable uploads, weak permissions, and WordPress core checksum drift.
Quarantine, restore, or delete suspicious files from WordPress admin without FTP access.
Generate readable HTML, A4 PDF reports, CSV/JSON exports, and compact evidence backup bundles for incident handoff.
Change login URL, manage directory indexing, security headers, XML-RPC, REST restrictions, author enumeration, permissions, and Cloudflare IP blocks.
Real screenshots from the installed plugin show the SOC dashboard, hardening controls, and reporting workflow now live in v0.4.0.
Designed for owners and agencies who need to move from detection to proof without leaving WordPress admin.
Inspect suspicious requests, login attempts, plugin changes, file edits, and scanner findings with severity and risk scoring.
Group events into sessions by IP, user agent, and user so repeated attacks are easier to understand.
Apply local blocks, Cloudflare edge rules, rate limits, quarantine, restore, and permission checks from admin.
Export PDF, HTML, CSV, JSON, and evidence backups with timestamps, settings, scan summaries, and recent events.
The Pro plan includes the full feature set requested for active defense, compliance, backups, hardening, and client reporting.
| Feature area | Free | Pro |
|---|---|---|
| SOC-grade event logging | Basic activity visibility. | Included with rich request context, severity, category, MITRE, and OWASP mapping. |
| SIEM dashboard and timeline | Limited overview. | Included with summaries, live refresh, and session correlation. |
| Active defense system | Manual blocks. | Included rate limits, risk-based blocking, scanner detection, and attack modes. |
| Alert center and notifications | Local admin notices. | Included email and SIEM destination routing with severity filters. |
| File integrity and quarantine | Basic scan path. | Included suspicious PHP detection, core checksums, file permissions, quarantine, restore, and delete controls. |
| Hardening and admin tools | Basic hardening. | Included custom login URL, directory indexing, XML-RPC, REST, headers, Cloudflare blocklist, and permission fixes. |
| Threat simulator | Not included. | Included brute force, SQLi, XSS, and malicious upload simulations. |
| Complete backup and restore | Manual export only. | Included full-site backups plus file, plugin, theme, or whole-site restore controls. |
| Reporting and compliance | HTML report preview. | Included A4 PDF reports, evidence backups, CSV/JSON export, retention policies, filters, pagination, and bulk actions. |
One regular license is valid for one website only. Agency includes 100 website licenses for client work. Monthly and yearly prices can change later before public checkout opens.
| Package | Selected billing | Lifetime | Website license | Includes | Action |
|---|---|---|---|---|---|
| FreeInstall the current beta build. | $0 free | $0 | 1 website beta installNo paid key required. |
|
Download ZIP |
| StarterFor one small WordPress site. | $9 per month | $149 | 1 website licenseOne key activates one site. |
|
Coming soon |
| ProFor active businesses and shops. | $19 per month | $299 | 1 website licenseDodo-managed activation. |
|
Coming soon |
| AgencyFor client WordPress work. | $49 per month | $799 | 100 website licensesEach website still uses one activation. |
|
Coming soon |
Generate A4 PDF reports with site identity, timestamp, footer, plugin version, WordPress version, license state, event totals, scan summary, hardening status, session correlation, and recent incident detail.
Download the free beta. Upgrade when Pro checkout opens.
ZIP SHA-256: 190462028fb5205e994f09a6e40c9b9de975aca99f668b898556810991b86daf