{"id":359679,"date":"2026-09-03T09:21:18","date_gmt":"2026-09-03T09:21:18","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/siteguard-scanner\/"},"modified":"2026-09-03T09:20:43","modified_gmt":"2026-09-03T09:20:43","slug":"siteguard-scanner","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/siteguard-scanner\/","author":23534173,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.0","stable_tag":"1.0.0","tested":"7.1","requires":"5.0","requires_php":"7.4","requires_plugins":null,"header_name":"SiteGuard Scanner","header_author":"EG Secure Solutions Inc.","header_description":"Companion plugin for the EG Secure Solutions vulnerability diagnostic service. Verifies site ownership and provides the installed plugin\/theme inventory in response to signed requests.","assets_banners_color":"003036","last_updated":"2026-09-03 09:20:43","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"","header_author_uri":"https:\/\/www.eg-secure.co.jp\/","rating":0,"author_block_rating":0,"active_installs":0,"downloads":41,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.0":{"tag":"1.0.0","author":"egsecuresolutions","date":"2026-09-03 09:20:43","revision":3679433}},"upgrade_notice":{"1.0.0":"

First public release of SiteGuard Scanner.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3679433,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3679433,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3679433,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3679433,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3679433,"resolution":"1","location":"assets","locale":"","width":1200,"height":760}},"screenshots":{"1":"The settings screen (Settings > SiteGuard Scanner), where you enter the token provided by the diagnostic service."}},"plugin_section":[],"plugin_tags":[600,712,6460],"plugin_category":[54],"plugin_contributors":[274940],"plugin_business_model":[],"class_list":["post-359679","plugin","type-plugin","status-publish","hentry","plugin_tags-security","plugin_tags-verification","plugin_tags-vulnerability","plugin_category-security-and-spam-protection","plugin_contributors-egsecuresolutions","plugin_committers-egsecuresolutions"],"banners":{"banner":"https:\/\/ps.w.org\/siteguard-scanner\/assets\/banner-772x250.png?rev=3679433","banner_2x":"https:\/\/ps.w.org\/siteguard-scanner\/assets\/banner-1544x500.png?rev=3679433","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/siteguard-scanner\/assets\/icon-128x128.png?rev=3679433","icon_2x":"https:\/\/ps.w.org\/siteguard-scanner\/assets\/icon-256x256.png?rev=3679433","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/siteguard-scanner\/assets\/screenshot-1.png?rev=3679433","caption":"The settings screen (Settings > SiteGuard Scanner), where you enter the token provided by the diagnostic service."}],"raw_content":"\n

SiteGuard Scanner is a companion plugin for the vulnerability diagnostic service provided by EG Secure Solutions. Installing it on a site that is under a diagnostic contract enables the following two features.<\/p>\n\n

    \n
  1. Site ownership verification (authentication)<\/strong> \u2014 Lets the diagnostic service confirm that the target site is the one that is actually under a diagnostic contract.<\/li>\n
  2. Installation inventory<\/strong> \u2014 Provides the diagnostic service with a list of the plugins and themes installed on the target site (name, version, and activation status).<\/li>\n<\/ol>\n\n

    How it communicates<\/h4>\n\n

    The plugin only responds to signed requests<\/strong> sent by the diagnostic service. It never sends data to any external server on its own (it does not \"phone home\").<\/p>\n\n

      \n
    • Authentication uses an HMAC-SHA256 signature<\/strong> based on a shared token. Each request includes a timestamp and a nonce (a single-use random value) to prevent replay attacks.<\/li>\n
    • Requests are received through the WordPress REST API endpoints \/wp-json\/siteguard-scanner\/v1\/verify<\/code> and \/wp-json\/siteguard-scanner\/v1\/collect<\/code>.<\/li>\n
    • For environments where the REST API is disabled, a custom endpoint (\/?siteguard-scanner-request=verify<\/code> and \/?siteguard-scanner-request=collect<\/code>) is provided as a fallback.<\/li>\n<\/ul>\n\n

      Every endpoint responds only to requests carrying a valid signature. When signature verification fails, the plugin returns HTTP 401 and no information at all.<\/p>\n\n

      Data provided<\/h4>\n\n

      When responding to collect<\/code>, the plugin returns the following information to the diagnostic service:<\/p>\n\n

        \n
      • Site URL<\/li>\n
      • WordPress core version<\/li>\n
      • List of installed plugins (slug, name, version, activation status, network-activation status)<\/li>\n
      • List of installed themes (slug, name, version, activation status, network-enabled status)<\/li>\n<\/ul>\n\n

        No personal data, post content, or any other data beyond the above is collected or transmitted.<\/p>\n\n

        Multisite<\/h4>\n\n

        On a multisite network, diagnostics are performed against the main (parent) site. Because plugin and theme files are shared across the entire network, collect<\/code> returns the network-wide inventory of installed assets and correctly reports network-activated plugins via the network_active<\/code> flag.<\/p>\n\n\n

          \n
        1. In the WordPress admin, go to \"Plugins\" > \"Add New\".<\/li>\n
        2. Click \"Upload Plugin\" at the top of the screen and select the plugin ZIP to install it.<\/li>\n
        3. After installation, activate the plugin.<\/li>\n
        4. Open \"Settings\" > \"SiteGuard Scanner\" in the admin menu.<\/li>\n
        5. Enter the 64-character token provided by the diagnostic service and save.<\/li>\n<\/ol>\n\n

          On a multisite network, set the token on the main site's Settings screen.<\/p>\n\n\n

          \n

          Does this plugin send data to an external service?<\/h3><\/dt>\n

          It does not send anything on its own. It only responds to signed requests from the diagnostic service.<\/p><\/dd>\n

          I cannot save the token.<\/h3><\/dt>\n

          The token must be a 64-character lowercase hexadecimal string (0-9, a-f). Values that do not meet these conditions are rejected and not saved.<\/p><\/dd>\n

          Can I use it even with the REST API disabled?<\/h3><\/dt>\n

          Yes. In environments where the REST API is disabled, the custom endpoint (\/?siteguard-scanner-request=...<\/code>) is used automatically as a fallback.<\/p><\/dd>\n

          Does it work on multisite?<\/h3><\/dt>\n

          Yes. On multisite, diagnostics are performed against the main site, and the plugin provides the network-wide plugin and theme inventory.<\/p><\/dd>\n\n<\/dl>\n\n\n

          1.0.0<\/h4>\n\n
            \n
          • First public release on the WordPress.org plugin directory.<\/li>\n
          • Renamed the plugin to SiteGuard Scanner (slug, endpoints, and identifiers).<\/li>\n
          • Added the WordPress core version to the collect response.<\/li>\n
          • Fixed multisite so that network-activated plugins and themes are reported correctly.<\/li>\n
          • Added network_active \/ network_enabled \/ is_multisite to the collect response.<\/li>\n
          • Internationalized the admin UI and bundled a Japanese translation.<\/li>\n
          • Prepared plugin headers and readme for the WordPress.org directory.<\/li>\n<\/ul>\n\n

            0.3.0<\/h4>\n\n
              \n
            • Added a custom endpoint (\/?siteguard-scanner-request=verify|collect<\/code>) as a fallback for environments where the REST API is disabled.<\/li>\n
            • Unified the signature verification logic across the REST API and the custom endpoint.<\/li>\n<\/ul>\n\n

              0.2.0<\/h4>\n\n
                \n
              • Implemented request authentication using HMAC-SHA256 signatures.<\/li>\n<\/ul>\n\n

                0.1.0<\/h4>\n\n
                  \n
                • Initial version.<\/li>\n<\/ul>","raw_excerpt":"Companion plugin for the EG Secure Solutions vulnerability diagnostic service: signed site-ownership verification and plugin\/theme inventory.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/359679","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=359679"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/egsecuresolutions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=359679"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=359679"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=359679"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=359679"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=359679"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=359679"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}