SECURITY SCANNER + WORDPRESS PLUGIN
Scanner with 10 detection layers (free, no signup). WordPress plugin with auto-mitigation (FIM + malware quarantine + IP blocks). Centralized SaaS for agencies. GDPR compliant. Made in Madrid.
How it works
01 / TLS & CERTIFICATES
Certificate validity, supported versions (TLS 1.2/1.3), weak ciphers, expiration dates.
02 / SECURITY HEADERS
HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy. Detects missing or misconfigured.
03 / EXPOSED PATHS
Public .env, public phpMyAdmin, directory indexes, backup files exposed, version-control leaks.
04 / WORDPRESS-SPECIFIC
Visible WP version, exposed user enumeration, XML-RPC status, REST users endpoint, weak login flows.
05 / MALWARE SIGNATURES
Web shells, common backdoors, obfuscated PHP/JS payloads, malicious redirects in HTML.
06 / DNS & EMAIL
SPF, DKIM, DMARC records. Domain age. Email security posture (deliverability risk).
07 / OPEN PORTS
FTP (21), SSH (22), SMTP (25), and other ports exposed publicly when they shouldn't.
08 / HOST METADATA
Server fingerprinting, exposed software versions, technology stack leakage.
09 / CONTENT INTEGRITY
Suspicious JS in HTML, hidden iframes, base64 redirects, cryptojacking patterns.
10 / BASELINE DRIFT
Comparison vs. last scan. Detects sudden changes (new files, modified versions, removed protections).
WORDPRESS PLUGIN
Not just notifications. The plugin acts on threats automatically, in milliseconds, with zero clicks from you.
PHP files appearing in /uploads/ are moved to a quarantine folder (with Deny from all) before they can execute.
10 failed logins in 10 minutes → IP blocked for 4 hours. Blocks fire before WordPress even boots, saving resources.
5 standard hardening actions (DISALLOW_FILE_EDIT, XML-RPC off, security headers, etc.) applied with one button + reversible.
Daily comparison of your plugins/themes/WP core against a curated CVE database. Get alerts on known-vulnerable versions installed.
SHA256 hashing of every file. Hourly scan. Alerts on any unexpected change in critical paths.
Optional: connect the plugin to your nudayosh.com dashboard. All your sites in one place, alerts to Slack/Discord/n8n (Agency plan).
Version 0.3.0 · WordPress 5.5+ · PHP 7.4+ · GPLv2
PLANS
Free
forever
Pro
+ VAT
Agency
+ VAT