Antivirus for Every Site

Every WordPress site now has Antivirus, which finds harmful files and common security gaps, explains them in plain language and fixes them in one click.

See problems early. Fix them safely. Close the usual ways in.

🚀 What's new

1. Shield: Scan, Review and Fix

Shield shows how many things need you and when the site was last scanned:

Scan now runs a fresh scan at any time
Action required lists each problem and why it matters
Apply fix, or Apply all fixes in one go
Snooze an item until the next scan, for 7 days or for 30 days
Resolved keeps the last 30 days of fixes

2. Every Check We Ran

Ten checks with a clear Passed or Action required result, including:

Core and plugin files compared against their official versions
Unused plugins and switched-off protections
HTTPS, WordPress version and supported server software
Hidden error messages and search engine visibility

3. Safe Fixes with Backups

Every fix asks for confirmation first, shows when the last backup was taken, and offers Back up first.

4. Hardening

Ten one-click protections, each explained in one line, with Turn all on:

Block application passwords and user enumeration
Hide the WordPress version and mask login errors
Disable the file editor and XML-RPC
Add security headers and rate-limit login attempts
Harden .htaccess

5. Threats Across All Sites

A Threats column on the WordPress sites list
Hover a count to see what was found, then Check threats
Scan all sites in one click

👷 How to use this feature

Go to Sites → WordPress
Open a site
Open Antivirus → Shield
Review Action required and click Apply fix or Apply all fixes
Open Antivirus → Hardening and turn on the protections you want

💡 Why it matters

Spot and fix site problems before visitors notice them
Reduce the risk of break-ins with simple protections
Fix with confidence, with a backup one click away
Manage security for every client site from one list

📝 Notes

Applying a fix changes the live site. Take a backup first if you want to be able to go back
Leave Disable XML-RPC off if you use the WordPress phone app
Antivirus finds common problems and closes common gaps. It does not replace updates and regular backups