Security plugins
Security Guard, a WordPress malware scanner that runs on your own site. It finds ClickFix and EtherHiding scripts, web shells and new administrators, and strips known injected scripts from your pages.
Guides and comparisons for Security sites
- Guide Fake Cloudflare CAPTCHA on your WordPress site: how to find the “Verify you are human” script and remove it A "Verify you are human" box that tells visitors to press Win+R and paste a command is not Cloudflare. It is ClickFix, served by a script…
- Guide How to check if your WordPress site is hacked: 8 checks, including the ones most lists skip Symptoms tell you something is wrong. These eight checks tell you where: core checksums, PHP in uploads, must-use plugins, administrators the Users screen hides, changed files,…
- Comparison WordPress malware scanners compared: Wordfence, Sucuri, MalCare, Solid Security, Jetpack Protect and Security Guard WordPress malware scanners do different jobs. Some scan in the vendor's cloud, some on your server, some clean for you and some come with a firewall.…
Why can't you see the malware your visitors see?
Injected-script malware doesn't need an odd file in the root folder. A few lines in a post, an option or a must-use plugin are enough, and the loader can save its fake "Verify you are human" box for logged-out visitors. You log in, look at the site and see nothing wrong.
Security Guard checks those places on your own server: code, uploads, the database, administrator accounts and core files. A baseline then shows what changed since the site was clean, and a script filter takes known loaders out of the page.
It is not a firewall and it does not clean up for you. Our WordPress malware scanner comparison shows which tools do.
Yearly licences from one site to unlimited
Every licence includes all features, a year of updates and support, and a 14-day money-back guarantee.