Antivirus for Every Site

Every WordPress site now has Antivirus, which finds harmful files and common security gaps, explains them in plain language and fixes them in one click.

See problems early. Fix them safely. Close the usual ways in.

🚀 What's new

1. Shield: Scan, Review and Fix

Shield shows how many things need you and when the site was last scanned:

• Scan now runs a fresh scan at any time
• Action required lists each problem and why it matters
• Apply fix, or Apply all fixes in one go
• Snooze an item until the next scan, for 7 days or for 30 days
• Resolved keeps the last 30 days of fixes

2. Every Check We Ran

Ten checks with a clear Passed or Action required result, including:

• Core and plugin files compared against their official versions
• Unused plugins and switched-off protections
• HTTPS, WordPress version and supported server software
• Hidden error messages and search engine visibility

3. Safe Fixes with Backups

Every fix asks for confirmation first, shows when the last backup was taken, and offers Back up first.

4. Hardening

Ten one-click protections, each explained in one line, with Turn all on:

• Block application passwords and user enumeration
• Hide the WordPress version and mask login errors
• Disable the file editor and XML-RPC
• Add security headers and rate-limit login attempts
• Harden .htaccess

5. Threats Across All Sites

• A Threats column on the WordPress sites list
• Hover a count to see what was found, then Check threats
• Scan all sites in one click

👷 How to use this feature

1. Go to Sites → WordPress
2. Open a site
3. Open Antivirus → Shield
4. Review Action required and click Apply fix or Apply all fixes
5. Open Antivirus → Hardening and turn on the protections you want

💡 Why it matters

• Spot and fix site problems before visitors notice them
• Reduce the risk of break-ins with simple protections
• Fix with confidence, with a backup one click away
• Manage security for every client site from one list

📝 Notes

• Applying a fix changes the live site. Take a backup first if you want to be able to go back
• Leave Disable XML-RPC off if you use the WordPress phone app
• Antivirus finds common problems and closes common gaps. It does not replace updates and regular backups