Real-time malware scanning, login protection, and one-click hardening — no server access required. Install directly from wp-admin and your site is immediately protected.
From shared hosting to managed WordPress — no SSH, no server config, no expertise required.
Hash-based change detection finds modified files the moment they change. Core file integrity verified against official WordPress checksums.
XML-RPC flood protection, login brute-force lockout, and spam post detection — all running in real-time via WordPress hooks.
Apply 6 security rules instantly: block PHP uploads, disable file editor, hide WP version, protect wp-config, disable directory browsing.
Quarantine suspicious files with a click. Modified core files are restored automatically from official WordPress SVN.
Watch your scan run in real-time. Each file is streamed live to the dashboard as it is checked — see threats as they are found.
Get notified immediately when high or critical threats are detected. Detailed HTML emails with threat context and recommended actions.
Pay monthly or yearly with PayPal — yearly gets 2 months free. Cancel any time.
MailGuard counts the hosting accounts on your server automatically and suggests the right plan.
Works on any WordPress site — shared hosting, managed WordPress, VPS.
Download the plugin zip from your eSecureScan dashboard and upload it in wp-admin → Plugins → Add New → Upload Plugin.
Click Activate. The plugin registers your site, creates the scan database, and schedules your first hourly scan automatically.
Go to eSecureScan in your wp-admin menu and click Scan Now. Watch the live terminal as each file is checked in real-time.
Head to the Remediation page and click Apply All to instantly apply all 6 security hardening rules to your site.