Title: Malware Scanner by Antivirus.ai – Shieldlume Security
Author: Plugins.shop
Published: <strong>October 4, 2026</strong>
Last modified: November 3, 2026

---

Search plugins

![](https://ps.w.org/shieldlume-security/assets/banner-772x250.png?rev=3782530)

![](https://ps.w.org/shieldlume-security/assets/icon.svg?rev=3782530)

# Malware Scanner by Antivirus.ai – Shieldlume Security

 By [Plugins.shop](https://profiles.wordpress.org/pluginsshop/)

[Download](https://downloads.wordpress.org/plugin/shieldlume-security.1.1.5.zip)

 * [Details](https://wordpress.org/plugins/shieldlume-security/#description)
 * [Reviews](https://wordpress.org/plugins/shieldlume-security/#reviews)
 *  [Installation](https://wordpress.org/plugins/shieldlume-security/#installation)
 * [Development](https://wordpress.org/plugins/shieldlume-security/#developers)

 [Support](https://wordpress.org/support/plugin/shieldlume-security/)

## Description

Shieldlume Security by Antivirus.ai is a WordPress security plugin for local malware
scanning, file integrity checks, login security and selected request filtering. 
Part of the Plugins.shop collection.

#### Free malware scanning and file integrity

 * Local file/database-content checks, confidence, severity and coverage gaps.
 * Optional official file-integrity references; a difference alone is not malware.
 * Manual/daily cron scans, saved progress, guidance, exports and optional alerts.
 * Optional authenticator/passkey second factor and local request filtering.
 * Clear findings, grouped Settings, mobile View options and a local plugin collection.

Free local tools need no account or paid key. External sources need separate configuration/
permission. ClamAV needs a host engine, protected socket and current definitions.
Structural/ClamAV checks are bounded to 2 MiB per eligible file; integrity reads
to 16 MiB. Incomplete results remain visible. No clean-site or comprehensive-detection
guarantee is made.

#### The separate Pro add-on

Pro adds schedules, investigations, reports and reviewed eligible file restoration,
using the same scanner. Its first online licence activation unlocks local tools;
expiry/outages retain that unlock, explicit Disconnect removes it. Connected services/
AI need separate consent and eligible access. AI cannot approve repairs. Free never
downloads Pro code.

[Guide](https://antivirus.ai/docs/) | [Free and Pro details](https://antivirus.ai/pricing/)
| [Methods and limits](https://antivirus.ai/scanner-methods/) | [Privacy](https://antivirus.ai/privacy/)

### External services and privacy

Activation starts no scan/provider request. Connections below need separate permission/
configuration; there is no usage/conversion telemetry. [Full technical, retention and withdrawal details](https://antivirus.ai/docs/privacy-and-services.txt)
are also bundled in docs/privacy-and-services.md, docs/protection.md and privacy.
txt.

 * **Welcome choices and email:** initially unchecked. Compatibility sharing sends
   the displayed domain, WordPress/PHP versions and language; independent email 
   signup sends the editable address and reported edition to https://antivirus.ai/
   newsletter-api/v1/plugin-welcome/ . Consented reports refresh at most weekly,
   plus edition changes. Email needs confirmation; no source, findings or customer
   records are sent. Stop sharing in Protection settings; unsubscribe confirmed 
   email separately. The operator is A.M.E.X. Internet Marketing ltd, Cyprus, using
   a United States GoDaddy VPS, Cloudflare and its mail relay. Terms: https://antivirus.
   ai/terms/ . Privacy/withdrawal: https://antivirus.ai/privacy#welcome and https://
   antivirus.ai/newsletter/privacy .
 * **WordPress.org references:** permitted scan/reference jobs send requested component
   names/versions, core locale, server IP and timing. Official checksum/package 
   data is compared locally. Privacy: https://wordpress.org/about/privacy/ .
 * **Wordfence Intelligence:** a separately permitted/configured feed request uses
   your API credential and server network connection; no site source files are uploaded.
   Saving a token does not enable requests. Terms: https://www.wordfence.com/wordfence-
   intelligence-terms-and-conditions/ . Privacy: https://www.wordfence.com/privacy-
   policy/ .
 * **Signed indicators:** an optional host-configured publisher receives protocol/
   version metadata and server IP when permitted updates run, not inventory, source
   or samples. Its destination/privacy policy is displayed before enabling. No public
   publisher or maintained corpus is included.
 * **ClamAV:** separately enabled eligible file bytes go only to a protected daemon
   on this host, not a cloud scanner. The host manages FreshClam requests and daemon
   logs. Guidance: https://docs.clamav.net/manual/Usage/SignatureManagement.html.
 * **Emerging Threats:** separately permitted downloads normally request https://
   rules.emergingthreats.net/blockrules/compromised-ips.txt every 12 hours. The 
   provider sees server IP/timing, not visitor IPs or file contents; matching is
   local. Licence: https://community.emergingthreats.net/t/licensing-is-the-compromised-
   ips-list-also-open/676 . Privacy: https://www.proofpoint.com/us/legal/privacy-
   policy .
 * **Pwned Passwords:** separately permitted supported password checks send five
   SHA-1 hash-prefix characters, server IP and timing to https://api.pwnedpasswords.
   com , never the password, full hash, username or email. Matching is local. Information:
   https://haveibeenpwned.com/Passwords . Privacy: https://haveibeenpwned.com/Privacy.
 * **Exposure checks:** separately permitted bounded HTTPS requests go to this site’s
   public WordPress address. Its host/CDN sees selected paths, server IP and timing;
   up to 512 response bytes are compared transiently, not uploaded to antivirus.
   ai.
 * **Notifications:** optional alerts and explicit tests use your configured WordPress
   mail provider, notification content and recipient. A successful mail handoff 
   does not prove inbox delivery; interrupted or uncertain sends need review. Exports
   and recovery evidence can be sensitive.

The separately installed Pro service has its own pairing, licence and consent controls.
Optional AI sends minimized detector metadata to the configured service/provider,
not source files; it does not independently verify infection. Managed-service privacy/
terms: https://orderfloor.com/antivirus-service/privacy and https://orderfloor.com/
antivirus-service/terms . Provider privacy: https://openai.com/policies/privacy-
policy/ . Free does not contact that Pro service. Hosted uptime, Google homepage
reputation and managed country rules are unavailable in this release.

Account/security records and optional history stay local unless an independently
chosen connection shares its documented data. Hiding previews does not withdraw 
existing sharing. Stopping a connection may leave a visible pending withdrawal when
unreachable; messages already sent and rotated backups cannot be recalled. This 
is self-service software without managed cleanup or response-time guarantees. Support:
https://antivirus.ai/contact/ .

### Source code and third-party notices

Readable PHP/JavaScript/CSS and local fonts/logos are bundled; no remote promotional
assets load. Authentication/QR upstream sources, builds and MIT licences: vendor/
auth/NOTICE.md. Space Grotesk OFL: assets/fonts/OFL.txt. Full retained notes: docs/
privacy-and-services.md.

## Screenshots

[⌊Free 1.1.5 dashboard with fictional retained practice records, coverage guidance
and labelled Site context.⌉⌊Free 1.1.5 dashboard with fictional retained practice
records, coverage guidance and labelled Site context.⌉[

Free 1.1.5 dashboard with fictional retained practice records, coverage guidance
and labelled Site context.

[⌊Free 1.1.5 Findings with fictional practice data and local guidance; an interface
example, not a detection benchmark.⌉⌊Free 1.1.5 Findings with fictional practice
data and local guidance; an interface example, not a detection benchmark.⌉[

Free 1.1.5 Findings with fictional practice data and local guidance; an interface
example, not a detection benchmark.

[⌊Free 1.1.5 Protection showing deliberate local request controls and their limits.⌉⌊
Free 1.1.5 Protection showing deliberate local request controls and their limits
.⌉[

Free 1.1.5 Protection showing deliberate local request controls and their limits.

[⌊Free 1.1.5 mobile navigation and Pro previews switch, saved per administrator 
on this site.⌉⌊Free 1.1.5 mobile navigation and Pro previews switch, saved per administrator
on this site.⌉[

Free 1.1.5 mobile navigation and Pro previews switch, saved per administrator on
this site.

[⌊Free 1.1.5 More Plugins collection with bundled logos and chosen external links.⌉⌊
Free 1.1.5 More Plugins collection with bundled logos and chosen external links.⌉[

Free 1.1.5 More Plugins collection with bundled logos and chosen external links.

## Installation

 1. Keep an independent backup; use a disposable/backed-up staging site first.
 2. Activate Free on single-site WordPress 6.8+ with PHP 8.3+. Multisite is refused.
 3. Review Setup guide, then start a scan. Continue batches or run WordPress cron.
 4. Review findings/coverage; use authorized WordPress tools, trusted backups or software
    reinstallation, then rescan. Free does not replace component files.
 5. For Pro, update Free 1.1.5 first, then matching Pro without uninstalling; keep 
    both active and activate its licence separately.

## FAQ

### Do I need an account or AI to scan?

No. Free local scans, full findings and guidance need neither. References/feeds 
need separate permission/configuration. No maintained external malware-signature
feed is bundled. AI belongs to the separate Pro add-on.

### Where are settings and the preview switch?

Settings groups Protection settings, Setup guide and Data & uninstall. The Pro previews
switch saves a per-administrator/site choice: hiding removes preview links/suggestions;
showing also restores individually dismissed suggestions. It stays available when
hidden. Free tools/consent are unchanged. Mobile View options groups Theme, motion
and full screen; native forms work without JavaScript.

### Does More Plugins install or track anything?

No. Catalog/logos are local; chosen links open Plugins.shop. Each product has its
own terms/availability. The page installs nothing and creates no marketing enrolment.

### Does uninstall erase evidence or stop sharing?

Keep data is the default; reinstalling can resume retained sharing. Stop sharing/
unsubscribe separately. Settings > Data & uninstall provides guarded, confirmed 
local removal. Backups, exports, provider data and host configuration need separate
handling. See docs/data-uninstall.md and docs/privacy-and-services.md.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“Malware Scanner by Antivirus.ai – Shieldlume Security” is open source software.
The following people have contributed to this plugin.

Contributors

 *   [ Plugins.shop ](https://profiles.wordpress.org/pluginsshop/)

[Translate “Malware Scanner by Antivirus.ai – Shieldlume Security” into your language.](https://translate.wordpress.org/projects/wp-plugins/shieldlume-security)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/shieldlume-security/),
check out the [SVN repository](https://plugins.svn.wordpress.org/shieldlume-security/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/shieldlume-security/)
by [RSS](https://plugins.trac.wordpress.org/log/shieldlume-security/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.1.5

 * Separate plugin branding from labelled Site context; compact mobile controls 
   into accessible View options.
 * Add a saved per-administrator/site Pro previews switch, compact preview rows 
   and a separate More Plugins entry.
 * Preserve security settings, evidence, licence state and independent service choices;
   clarify documentation and Free/Pro boundaries.

Complete earlier release history is preserved in the bundled changelog.txt.

## Meta

 *  Version **1.1.5**
 *  Last updated **23 hours ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.8 or higher **
 *  Tested up to **7.1.4**
 *  PHP version ** 8.3 or higher **
 * Tags
 * [File Integrity](https://wordpress.org/plugins/tags/file-integrity/)[firewall](https://wordpress.org/plugins/tags/firewall/)
   [malware scanner](https://wordpress.org/plugins/tags/malware-scanner/)[security](https://wordpress.org/plugins/tags/security/)
   [two factor authentication](https://wordpress.org/plugins/tags/two-factor-authentication/)
 *  [Advanced View](https://wordpress.org/plugins/shieldlume-security/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/shieldlume-security/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/shieldlume-security/reviews/)

## Contributors

 *   [ Plugins.shop ](https://profiles.wordpress.org/pluginsshop/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/shieldlume-security/)