Expanded WordPress website protection
ThreatSign Website Security is the paid protection option for websites using Quttera ThreatSign – Web Malware Scanner for WordPress. It extends the plugin’s security workflow beyond on-demand investigation with services designed for ongoing protection and response.
The plan is intended for WordPress site owners who want more than manual scanning. Its capabilities include expert malware cleanup, automatic malware removal, continuous and scheduled scans, a Web Application Firewall, DDoS protection and mitigation, blacklist removal across more than 40 security authorities, and 24/7 monitoring and protection.
Malware detection and response
The underlying scanner uses Quttera’s AI-driven heuristic engine and cloud-based scanning to examine a website while reducing server resource load. Heuristic analysis can identify potentially malicious functionality through rules, weighted systems, emulators, flow analysis, and statistical methods, including threats that may not match traditional signatures.
- Detection of malicious PHP, including backdoors, shells, and injections
- Identification of obfuscated or polymorphic JavaScript
- Detection of malicious iframes, redirects, hidden links, spam, and SEO malware
- Checkout skimmer detection for checkout pages
- WordPress core integrity inspection and identification of unauthorized files in core directories
- External link and outbound reference analysis
- Blacklist checks against more than 40 global security authorities
- Investigation reports with severity levels
With the paid plan, automated malware removal and expert cleanup add response options when suspicious activity is found. Continuous and scheduled scans help make checking part of a regular security routine rather than a one-time administrative task.
Protection against login and automated attacks
ThreatSign also builds on the plugin’s layered defenses for brute-force and bot activity. Brute-force controls can use IP-based locking, configurable thresholds, soft and hard locks, progressive delays, IP allow and deny lists with CIDR notation, combo-lock detection, and email alerts for locked accounts. Policies can account for shared hosting or dedicated server environments, with an emergency bypass mechanism available for critical situations.
Bot protection uses multi-stage risk evaluation, heuristic analysis, token-bucket rate limiting, and recognition of legitimate bots such as Googlebot and Bingbot. Protection can cover the REST API, XML-RPC, and WooCommerce checkout and cart endpoints, with configurable Observe, Balanced, and Aggressive modes.
Administrative change monitoring
Real-time monitoring can alert you to unauthorized administrator additions, removals, and role changes. A database audit trail with snapshots provides useful context when reviewing account activity.
Installation and setup
Begin with Quttera ThreatSign in the WordPress admin area and use its on-demand scan and investigation tools to review the site. To obtain the broader service set, upgrade to a ThreatSign Website Security plan. Configure protection and review reports from the WordPress security workflow, paying attention to severity levels and account alerts.
