NinjaScanner – Virus & Malware scan vs Safe Sites

A lightweight, fast and powerful virus scanner for WordPress. NinjaScanner is a lightweight, fast and powerful virus scanner for WordPress which includes many features to help you scan your blog for malware and virus. Features File integrity checker. File comparison viewer. Exclusion filters. File snapshot. Database snapshot. Anti-malware/Antivirus. Sandbox for quarantined files. Ignored files list. Google’s Safe Browsing Lookup API. Background scans. Scheduled scans (Premium). WP-CLI integration (Premium). Debugging log. Email report. Integration with NinjaFirewall (WP and WP+ Edition). Multi-site support. Contextual help. And many more… File Integrity Checker The File Integrity Checker will compare your WordPress core files as well as your plugin and theme files to their original package. Its File Comparison Viewer will show you the differences between any modified file and the original. You can also add your Premium themes and plugins to the File Integrity Checker. Infected or corrupted files can be easily restored with one click. File Snapshot The File Snapshot will show you which files were changed, added or deleted since the previous scan. Database Snapshot NinjaScanner will compare all published posts and pages in the database with the previous scan and will report if any of them were changed, added or deleted. Anti-Malware Signatures You can scan your blog for potential malware and virus using the built-in signatures. The scanning engine is compatible with Linux Malware Detect LMD (whose anti-malware signatures are included) and with some ClamAV signatures as well. You can even write your own anti-malware signatures. NinjaFirewall Integration If you are running our NinjaFirewall (WP or WP+ Edition) web application firewall plugin, you can use this option to integrate NinjaScanner into its menu. Fast and Lightweight Scanner NinjaScanner has strictly no impact on your database. It only uses it to store its configuration (less than 1Kb). It saves the scan data, report, logs etc on disk only, makes use of caching to save bandwidth and server resources. It also includes a Garbage Collector that will clean up its cache on a regular basis. Background Scans Another great NinjaScanner feature is that it runs in the background: start a scan, let it run and keep working on your blog as usual. You can even log out of the WordPress dashboard while a scanning process is running! You don’t have to wait patiently until the scan has finished. Additionally, a scan report can be sent to one or more email addresses. Sandbox for quarantined files When moving a file to the quarantine folder, NinjaScanner can use a testing environment (a.k.a. sandbox) to make sure that this action does not crash your blog with a fatal error. If it does, it will warn you and will not quarantine the file. It is possible (but not recommended) to disable the sandbox. Advanced Settings NinjaScanner offers many advanced settings to finely tune it, such as exclusion filters, selection of the algorithm to use, a debugging log etc. Privacy Policy Your website can run NinjaScanner and be 100% compliant with the General Data Protection Regulation (GDPR): We, the authors, do not collect, share or sell personal information. We don’t track or profile you. Our software does not collect any private data from you or your visitors. Premium Features Check out our NinjaScanner Premium Edition Scheduled Scans: Don’t leave your blog at risk. With the scheduled scan option, NinjaScanner will run automatically hourly, twice daily or daily. WP-CLI Integration: Do you own several blogs and prefer to manage them from the command line? NinjaScanner can nicely integrate with WP-CLI, using the ninjascanner command. You can use it to start or stop a scanning process, view its status, its report or log from your favourite terminal, without having to log in to the WordPress Admin Dashboard. Dedicated Help Desk with Priority Support

Safe Sites provides advanced security features to help keep your WordPress website safe from threats. With real-time monitoring, detailed security insights, and easy-to-use permission management, you can ensure your site is always protected. Key Features Two-Factor Authentication (2FA) – Secure your login with TOTP-based 2FA. Smart File Permission Control – Easily manage file permissions based on your server type (Windows/Linux). Visual File Permissions Map – See a color-coded structure of your site’s file security. Malware Scanner – Analyze your domain, URLs, and HTML security headers for vulnerabilities via VirusTotal. Security Dashboard – View a complete overview of your site’s security health. Plugin & Theme Security – Detect vulnerabilities in plugins and themes and receive alerts. Login & User Security – Monitor login attempts and manage user sessions. Site Hardening – Apply recommended security tweaks to your WordPress installation. Code Signing – Verify the integrity of your plugin files. Detailed Features General Security & Server Health: SSL Status – Check if SSL is active for secure connections. Site Health & Server Info – Displays PHP version, database version, and server details. Panic Mode – Quickly lock down your site in case of an emergency. Access & User Security: Two-Factor Authentication (2FA): TOTP Support – Use Google Authenticator, Authy, or any TOTP app. Configurable for All Roles – Require 2FA for specific user roles. Backup Codes – Generate backup codes for emergency access. Login Monitoring – Track failed login attempts and monitor user activity. Security Monitoring & Protection: File Permissions Management: Windows Servers – Show file read/write permissions. Linux Servers – Display numeric file permissions along with current and recommended settings. Fix Permissions – Select files and fix incorrect permissions directly. Visual File Permission Map – Interactive file structure with security indicators. Hardening – One-click security hardening for common WP vulnerabilities. Code Signing – Ensure plugin files haven’t been tampered with. Malware & Security Scanner: Domain & URL Analysis – Scan domain and URLs for malware using VirusTotal API. Security Header & DNS Scan – Check security headers and DNS settings. Alert System – Receive alerts for detected threats. WordPress Management & Security: Plugin & Theme Security: Vulnerability Scanner – Check for known security flaws. Inactive Plugin Alerts – Warns about inactive components that pose risks. Security Dashboard – A centralized panel for all security settings. External Services Used Safe Sites relies on the following third-party services for security analysis and malware detection. Below is a detailed breakdown of what each service does, what data is sent, and where you can review their policies: 1. VirusTotal API Purpose: Used to scan domain, URLs, and file hashes for malware detection and security threats. What data is sent & when? – When a user initiates a manual malware or URL scan, the plugin sends the target URL or domain to VirusTotal for analysis. – No user private data is sent—only the target URLs/domains or hash values of files are transmitted. Terms of Service & Privacy Policy: – VirusTotal Terms of Service – VirusTotal Privacy Policy