Extend WordPress scanning with ongoing protection

ThreatSign Website Security is the paid protection option for sites using Quttera ThreatSign - Web Malware Scanner for WordPress. The add-on includes on-demand scans and investigation reports; a plan adds ongoing scanning, response services, and network protection.

Plan services

• Expert malware cleanup and automatic malware removal
• Continuous and scheduled scans
• A Web Application Firewall (WAF)
• DDoS protection and mitigation
• Blacklist removal across more than 40 security authorities
• 24/7 monitoring and protection

Scan findings and response

The scanner uses cloud-based scanning to reduce server resource load and an AI-driven heuristic engine to examine potentially malicious functionality. Its analysis uses rules, weighted systems, emulators, flow analysis, and statistical methods to identify threats that may not match traditional signatures. Investigation reports include severity levels for reviewing findings.

• Malicious PHP, including backdoors, shells, and injections
• Obfuscated or polymorphic JavaScript
• Malicious iframes, redirects, hidden links, spam, and SEO malware
• Checkout skimmers on checkout pages
• WordPress core integrity issues and unauthorized files in core directories
• External link and outbound reference analysis
• Blacklist checks against more than 40 security authorities

When suspicious activity is found, the plan’s expert cleanup and automatic removal provide response settings. Continuous and scheduled scans make site checks part of an ongoing routine.

Login and bot controls

Brute-force protection tracks login failures and can apply IP-based locking, configurable thresholds, soft and hard locks, progressive delays, and combo-lock detection. IP allow and deny lists support CIDR notation, and email alerts can report locked accounts. Policies can be suited to shared hosting or dedicated servers, with an emergency bypass for critical situations.

Bot protection combines multi-stage risk evaluation, heuristic analysis, and token-bucket rate limiting. It recognizes legitimate bots such as Googlebot and Bingbot, and can protect the REST API, XML-RPC, and WooCommerce checkout and cart endpoints. Choose an Observe, Balanced, or Aggressive operating mode.

Administrator change monitoring

Real-time alerts report administrator additions, removals, and role changes. Database snapshots provide an audit trail for reviewing account activity.

Start with a scan

Open Quttera ThreatSign in the WordPress admin area and execute an on-demand scan using its investigation tools. To add the broader protection services, upgrade to a ThreatSign Website Security plan. Configure protection and review scan reports, severity levels, and account alerts in the WordPress security process.