WordPress File Integrity and Vulnerability Scan

A file that’s supposed to be there. A file that isn’t. Both matter.

File Integrity and Vulnerability Scanning: Know the Moment Something Changes

A compromised site rarely announces itself. A modified core file, an unexpected file quietly dropped somewhere it shouldn’t be, a plugin with a known vulnerability nobody’s noticed yet, these sit unseen until real damage is done. This checks against WordPress.org’s own official checksums and a real, matched-to-your-version vulnerability database, every day, automatically.

Key Features

Core File Integrity Checking

Installed core files checked daily against WordPress.org's own official checksums, flagging anything modified, missing, or unexpectedly present that shouldn't be.

Auto-Restore & Quarantine

Modified files restore automatically from WordPress.org's official archive, checksum-verified both before and after. Unexpected files are quarantined outside the web-accessible tree, never deleted, so nothing's lost if it turns out to be a false alarm.

Known-Modifications Allowlist

List the core files you've deliberately customised yourself, so they're skipped by scanning and auto-restore instead of getting flagged every single day.

Incident Timeline

When a suspicious file is found, see exactly what else happened around that moment, logins, new accounts, plugin or theme changes, all in the 24 hours surrounding the exact modification time.

Plugin Self-Integrity Checking

This plugin checks its own files against its own last-known-good state. An attacker's first move against a security plugin is usually to disable or alter it, so it watches itself the same way it watches everything else.

Vulnerability Scanning

Every installed plugin and theme checked against a real vulnerability database, matched precisely to your actual installed version, not a generic warning that could apply to anyone running any version.

Know the moment something changes, before it becomes a breach

Get free access Get free access Get free access

File Integrity & Vulnerability Scanning

Every claim checked against a real site