Find malware your firewall misses.
Detect hidden malware, backdoors and suspicious code-before they become a bigger problem.
Free forever on one site·No credit card·Works with any host
Security Score
Average Rating
Site Overview
Free PlanHacked Website?
Not a good day for you - we'll try to make you smile while we're working on it.
Ask an Expert →Pro Config
Need an expert to set up Guardian Gaze for you?
Ask an Expert →FAQ
All the answers to your questions.
Ask an Expert →Features
We already have some solutions for you.
Ask an Expert →Trusted by teams protecting real WordPress sites
Manage security from WordPress. Scan from outside it.
See findings, severity and recommended actions directly inside WordPress while Guardian Gaze handles the heavy security analysis outside your site.
Find more
Scan files and database content for malware, backdoors and suspicious changes.
Understand faster
See exactly what was found, where it is and how serious it is.
Act confidently
Prioritize critical findings and take the right next step.
Malware doesn’t always look like malware.
Traditional scanners are good at finding threats they already recognize. Guardian Gaze combines multiple detection methods to uncover suspicious code, modified files and database payloads that signature-only scanning can miss.
Four ways to find what shouldn’t be there
Signature Detection
Identify known malware quickly using trusted threat definitions.
Heuristic Analysis
Detect suspicious code patterns and behaviors even when there isn't an exact malware signature.
File Integrity
Compare WordPress core, plugins and themes against trusted versions and baselines.
Database Scanning
Find malicious payloads, redirects, hidden iframes and suspicious code stored inside your database.
All core detection layers are available in the free plugin.
A compromised site shouldn’t control its own scanner
Security tools running entirely inside WordPress can be affected by the same compromised environment they’re trying to inspect. Guardian Gaze moves the heavy analysis outside your site, reducing that dependency while keeping findings available inside your WordPress dashboard.
BENEFITS
No heavy scans competing with visitors
Analysis happens off-site so your site stays fast and responsive.
Less dependence on compromised WordPress processes
Scanning runs outside your site, reducing risk and blind spots.
Works across shared and managed hosting
External architecture designed to work in any hosting environment.
Your first security report in three steps
Install the plugin
Add Guardian Gaze from WordPress.org. No account required for the free scanner.
Run a scan
Check your files and database for malware, suspicious changes and security issues.
Review & Fix
See findings ranked by severity and take action on what matters most.
Setup takes about two minutes
A real security scanner. Not a limited trial
Install Guardian Gaze without an account or credit card and keep scanning your WordPress site for as long as you want.
CHOOSE YOUR LEVEL OF PROTECTION
Start free. Scale protection as your needs grow
FREE
Detect
$0
Forever, one site
Know when something is wrong.
- Core malware, integrity
- Database scanning
Best for:Single-site users who want core scanning
Get FreeBASIC
Prevent
$4.99
Per site, per month
Add protection around your WordPress site.
Everything in Free plus:
- Security hardening
- 2FA & reCAPTCHA
- Real-time file monitoring
- Audit log
- Email alerts
Best for:Small business sites needing stronger protection
Choose BasicPRO
Detect. Prevent. Remove.
$99
Per site, per year
For websites where compromise costs real money.
Everything in Basic plus:
- AI-assisted detection
- Plain-English explanations
- Live threat intelligence
- One-click malware removal
- Hourly scanning
Best for:Business-critical WordPress sites
Choose ProBUSINESS
Protect + Report
$249
Per site, per year
Everything in Pro, with security reporting for your business.
Everything in Pro, plus:
- Security reporting
Best for:Businesses that need regular security reports
Choose BusinessGo beyond pattern matching
Guardian Gaze Pro adds AI-assisted analysis that evaluates suspicious code by intent-helping identify threats that may not match a known malware signature
- AI-assisted detection
- Plain English explanations
- Actionable remediation guidance
Critical — Suspicious PHP Backdoor
What we found
Encoded PHP executing input from an external request.
Why it matters
An attacker may be able to execute commands remotely.
Recommended action
Quarantine the file and inspect the affected plugin.
Don’t just detect malware. Remove it
Guardian Gaze Pro lets you remove supported malware findings with one click, with quarantine and restore available when you need to reverse an action.
Whether you manage one site or many
Website Owners
Know if your website has been compromised before customers or search engines tell you.
Start Free →Agencies
Monitor multiple client sites from one dashboard and give clients security reports they can understand.
Explore Agency →WHY GUARDIAN GAZE
Security that doesn’t stop at known signatures
| Capability | Guardian Gaze |
|---|---|
| Malware scanning | Included |
| Database scanning | Included |
| File integrity | Included |
| External/off-site analysis | Included |
| AI-assisted detection | Pro |
| Plain-English findings | Pro |
| One-click removal | Pro |
Guardian Gaze Vs Wordfence|Guardian Gaze Vs Sucuri|Guardian Gaze Vs MalCare
Testimonial
“ It found a backdoor disguised as a core file that two other scanners had marked clean. The report told me the exact file and what to do with it. ”
Common questions
Find out what’s hiding in your WordPress site
Run a complete Guardian Gaze security scan and see exactly what needs your attention.
Protect more than your WordPress site?
Guardian Gaze Enterprise gives security teams an outside-in view of organizational and third-party cyber risk.