Solved

What is the best Plugin to scan a Wordpress site to make sure it has not been hacked or has malware

Posted on 2014-10-23
1
136 Views
Last Modified: 2014-11-02
I am looking for the best Plugin to scan a Wordpress website to make sure it has not been hacked or has malware

Tina
0
Comment
Question by:TinaMBarnard
1 Comment
 
LVL 70

Accepted Solution

by:
Jason C. Levine earned 500 total points
ID: 40400830
There are plugins that will do this (Better WP Security, WordFence) but because they are plugins, you run the risk of an attacker deactivating or modifying the plugin and that renders the protection useless unless you obsessively check the plugin to make sure it is still running.  That being said, WordFence does a very good job of looking for changed files.

What I prefer to do is spend a little money and subscribe to either Sucuri or VaultPress.  Both services will (for a fee) remotely scan your site for alterations and hacks and alert you when it finds them.  VaultPress is also a live backup and restore system and can roll you back after a hack.  Sucuri will also assign an engineer to fix your site and remove any security holes they find to prevent future infections.  Both services will need to be able to login to your site, so if this is a source of discomfort for you, there you go.

The other way to handle security is to host with a dedicated-WordPress hosting service that will handle all of it for you, such as WP Engine.  With these services, you don't install any security plugins as the server itself constantly monitors the hosted sites to determine if something has been altered and they handle the restoration/recovery for you.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Did you use a default hosting installation of wordpress with the intention of it being your actual site?  Maybe you’ve installed it as a Blog to your current site and recently converted it to be the main site and do away with the old .htm pages.  An…
This article shows the steps required to install WordPress on Azure. Web Apps, Mobile Apps, API Apps, or Functions, in Azure all these run in an App Service plan. WordPress is no exception and requires an App Service Plan and Database to install
The purpose of this video is to demonstrate how to prevent comment spam on a WordPress Website. This will be demonstrated using a Windows 8 PC. Plugin Akismet will be used. Go to your WordPress login page. This will look like the following: myw…
The purpose of this video is to demonstrate how to set up basic WordPress SEO. This will be demonstrated using a Windows 8 PC. The plugin used will be WordPress SEO by Yoast. Go to your WordPress login page. This will look like the following: myw…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question