First release.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3671606,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3671606,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3671606,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3671606,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["0.2.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3671606,"resolution":"1","location":"assets","locale":"","width":1280,"height":1075},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3671606,"resolution":"2","location":"assets","locale":"","width":1280,"height":1000}},"screenshots":{"1":"The DecaGuard screen: findings in plain English, worst first, each with a\none-click \"This was me\".","2":"Settings: choose where warnings go and how often your shop is checked."}},"plugin_section":[],"plugin_tags":[282,168808,237413,600,286],"plugin_category":[45,54],"plugin_contributors":[278193],"plugin_business_model":[],"class_list":["post-356193","plugin","type-plugin","status-publish","hentry","plugin_tags-ecommerce","plugin_tags-file-integrity","plugin_tags-malware-detection","plugin_tags-security","plugin_tags-woocommerce","plugin_category-ecommerce","plugin_category-security-and-spam-protection","plugin_contributors-deca1992","plugin_committers-deca1992"],"banners":{"banner":"https:\/\/ps.w.org\/decaguard-compromise-detection-for-woocommerce\/assets\/banner-772x250.png?rev=3671606","banner_2x":"https:\/\/ps.w.org\/decaguard-compromise-detection-for-woocommerce\/assets\/banner-1544x500.png?rev=3671606","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/decaguard-compromise-detection-for-woocommerce\/assets\/icon-128x128.png?rev=3671606","icon_2x":"https:\/\/ps.w.org\/decaguard-compromise-detection-for-woocommerce\/assets\/icon-256x256.png?rev=3671606","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/decaguard-compromise-detection-for-woocommerce\/assets\/screenshot-1.png?rev=3671606","caption":"The DecaGuard screen: findings in plain English, worst first, each with a\none-click \"This was me\"."},{"src":"https:\/\/ps.w.org\/decaguard-compromise-detection-for-woocommerce\/assets\/screenshot-2.png?rev=3671606","caption":"Settings: choose where warnings go and how often your shop is checked."}],"raw_content":"\n
Most shop owners find out they have been hacked when their payment provider tells\nthem, or when a customer complains about a fraudulent charge. By then the damage\nis done.<\/p>\n\n
DecaGuard learns what your shop normally looks like, then watches for anything\nthat changes without your say-so: files appearing where files should not appear,\nnew administrator accounts, hidden add-ons, settings that quietly gained code in\nthem, and outside companies that started running code on your pages.<\/p>\n\n
When it finds something, it explains what happened in ordinary language \u2014 what\nthe risk is to your money and your customers, and what to do next. If the change\nwas you, one click marks it as expected and you never hear about it again.<\/p>\n\n
DecaGuard never blocks, deletes, quarantines, modifies, or repairs anything on\nyour shop. It is not a firewall, it does not sit between your customers and your\npages, and it never touches your checkout, your payment gateway callbacks, or the\nWooCommerce API.<\/p>\n\n
This is deliberate. Real compromises leave several ways back in. Automated\ncleanup either misses one \u2014 leaving you confidently reinfected \u2014 or deletes\nsomething your shop needs and takes it offline. Both are worse than a clear\nwarning and a decision you make yourself.<\/p>\n\n
A security tool that cries wolf gets switched off, and then it protects nobody.\nDecaGuard spends its first two days simply learning your shop and raising\nnothing at all. It knows that add-on updates change files constantly, that\npayment gateways send odd-looking data, and that bulk imports look like attacks.\nFindings are graded, and anything you confirm as expected stays quiet for good.<\/p>\n\n
DecaGuard makes a small number of outbound requests, all of them listed here:<\/p>\n\n
Files your pages already load from other companies<\/strong> \u2014 if one of your pages\nloads a file from, say, a payment provider or a chat widget, the plugin\ndownloads that same file and compares it with what it saw last time. This is\nwhat lets it tell you when a company you rely on quietly changes the code it\nruns on your shop, which is how several large 2026 attacks worked.<\/p>\n\n The request is anonymous: it identifies the plugin and nothing else. Your\naddress, your shop's name, your customers and your orders are not part of it,\nand no data is sent anywhere \u2014 the plugin only downloads. Only addresses that\nalready appear in your own pages are ever requested.<\/p>\n\n If you would rather it did not, switch off Outside code<\/strong> under\nDecaGuard \u2192 Settings. Every other check carries on working.\nNo customer data, order data, or personal information ever leaves your site.<\/p><\/li>\n<\/ol>\n\n\n That is all. DecaGuard begins learning your shop straight away.<\/p>\n\n For the first two days it watches quietly and raises nothing, so it can learn what\nis normal on your shop before it starts telling you about changes. After that,\nanything it finds appears on the DecaGuard<\/strong> screen.<\/p>\n\n\n No. DecaGuard adds nothing at all to the pages your customers see. All the work\nhappens in the background, in small pieces, and pauses itself so it never hogs\nyour hosting.<\/p><\/dd>\n It cannot. DecaGuard only looks \u2014 it never changes, deletes, or blocks anything.\nIt also never goes near your checkout or your payment gateway.<\/p><\/dd>\n Then click \"This was me\". It records that, and you will not be asked about that\none again.<\/p><\/dd>\n Because it was learning. Every shop is different, and a tool that starts shouting\nbefore it knows what is normal on yours is a tool that gets switched off. After\ntwo days it has a picture of your shop and will tell you when that picture\nchanges.<\/p><\/dd>\n No, but you may hear about the same thing twice, once from each. DecaGuard\nnotices when another security plugin is active and mentions it on the dashboard.<\/p><\/dd>\n No, deliberately. Attacks usually leave several ways back in, and automatic\ncleanup either misses one or deletes something your shop needs. DecaGuard tells\nyou what it found and what to do about it, and leaves the decision to you and your\ndeveloper.<\/p><\/dd>\n Yes. The checks all work on any WordPress site. The cart and product page checks\nsimply do not run when WooCommerce is not installed.<\/p><\/dd>\n\n<\/dl>\n\n\n\n
\n
Will this slow my shop down?<\/h3><\/dt>\n
Will it break my shop?<\/h3><\/dt>\n
It says a new add-on appeared, but that was me.<\/h3><\/dt>\n
Why did it not tell me anything for the first two days?<\/h3><\/dt>\n
I already run another security plugin. Is that a problem?<\/h3><\/dt>\n
Does it clean up an infection?<\/h3><\/dt>\n
Does it work without WooCommerce?<\/h3><\/dt>\n
0.2.0<\/h4>\n\n
\n
0.1.0<\/h4>\n\n
\n