Focused PHP scanning
Checks the WordPress root, wp-content root, active and parent theme, MU plugins, and PHP-like files in uploads.
Free feature
Malware scanneron your WordPress
Ever had that sinking feeling when your site starts acting weird? This runs a focused PHP malware scan through the places attackers commonly use for backdoors, shells and encoded payloads.
What it does
Malware scanner
It scans PHP files in the WordPress root and wp-content root, the active and parent theme, MU plugins, and PHP-like files found in uploads. It does not claim to inspect every file or every plugin directory.
One-click quarantine
Spotted something bad? One click and it is quarantined. You do not need to be a developer to deal with it.
Daily automatic scans
Runs every day on its own. You set it up once, then review the findings when something matches.
Useful findings
Shows the file path and the pattern that caused the match, instead of only saying that a threat exists.
Safe file handling
Quarantine moves a suspicious file out of use without deleting it permanently.
Why it is there
What happens without it
Hackers do not care how small your site is. They run bots that scan thousands of WordPress sites looking for easy targets. One outdated plugin, one weak password, and they are in. You might not even know it happened.
Stolen data
They can grab passwords, payment info, anything your visitors type in.
Spam from your domain
Your domain starts sending spam. Getting off blacklists after that takes work.
Google warning
Google slaps a dangerous site warning on you. Traffic drops overnight.
Visitor damage
Visitors get redirected to sketchy sites, or their browser starts mining crypto for someone else.
Most malware is invisible while browsing the site. This scanner covers common PHP infection locations, but it is not a database scan or a guarantee that the whole site is clean. If the site is already hacked, you still need a person - that is the cleanup page.
Used on every site we maintain. Already infected? Manual cleanup.
Use Bearmor Security on your WordPress
Install the free plugin from WordPress.org. Every feature is free, with no paid plan to unlock.