Integrum Security Scanner

Description

Integrum Security Scanner checks your site’s files for malware and suspicious code, directly from the WordPress dashboard.

Choose exactly what to scan with a folder tree and include/exclude masks, start the scan, and watch the live progress. When it finishes, suspicious files are listed per folder with a severity label so you know where to look first.

Malware scanning is provided by Limit Login Attempts Reloaded in partnership with Imunify by CloudLinux.

What it does

  • Scans files for malware. Detects malicious and suspicious code across your WordPress installation.
  • You choose the scope. Select folders in a tree and narrow the scan with include and exclude masks (exclude always wins).
  • Live progress. A progress bar shows the scan as it runs, right on the plugin page.
  • Clear results. Suspicious files are grouped by folder and marked with a severity (critical, medium, low, info).
  • Simple connection. Register with your email to get a site key, or paste an existing key.

Brought to you by the team behind Limit Login Attempts Reloaded.

External services

This plugin uses external services to register the site and scan the files selected by the site administrator. Requests are sent only when the administrator registers the site, uses an existing site key, or starts and monitors a scan.

Limit Login Attempts Reloaded

The plugin connects to the Limit Login Attempts Reloaded API to register the site and obtain a site key. During registration, it sends the site’s domain and the registration email address. An existing site key is not sent to this API for registration; it is used to authenticate the scanning requests described below.

This service is provided by Atlantic Silicon Inc. See the Terms of Service and Privacy Policy.

Imunify Connect

The plugin connects to Imunify Connect to scan the files selected by the site administrator for malware and suspicious code. When a scan starts, it sends the selected files’ relative paths, sizes, and modification times. During the scan, it may send SHA-256 hashes and, when requested by the scanning service for further analysis, the contents of selected files. File contents may include personal, confidential, or other protected information. The site key is sent to authenticate these requests. The plugin sends data only for the selected files and only while the scan is running.

This service is provided by Imunify by CloudLinux. See the Imunify Terms of Use, CloudLinux Privacy Policy, and Imunify legal documentation.

Installation

  1. Upload the plugin folder to the /wp-content/plugins/ directory, or install it through the Plugins Add New screen in WordPress.
  2. Activate the plugin through the Plugins menu.
  3. Open Site Security in the admin menu, register to get a site key, then start your first scan.

FAQ

Do I need an account?

You register once with your email to receive a site key. You can also paste a key you already have.

Which files are scanned?

Only the folders you select, filtered by your include and exclude masks. By default the WordPress root, wp-admin, wp-includes, and wp-content are selected.

Where is the scanning done?

Scanning is powered by Imunify by CloudLinux through the Limit Login Attempts Reloaded service.

What WordPress and PHP versions are required?

WordPress 6.0 or later and PHP 8.1 or later.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“Integrum Security Scanner” is open source software. The following people have contributed to this plugin.

Contributors

Changelog

0.1.0

  • Initial release: file selection tree, include/exclude masks, live scan progress, and per-folder results with severity.