Source-aware views
Move between Files, Database and Plugins without mixing fundamentally different evidence.
Protect
LocalGuard Scanner
A privacy-first WordPress scanner that keeps scan data on your server and explains what deserves investigation.
The problem it solves
A suspicious file or an unfamiliar administrator account deserves attention, but an automated result is not proof of malware. Site owners need evidence they can review without giving a scanner permission to delete content automatically.
LocalGuard inventories files and supported database areas, checks WordPress core against bundled SHA-256 manifests and combines signed offline rules with contextual heuristics. Scan data remains on the WordPress server.
It may fit if…
- You want manual or scheduled WordPress checks without sending inspected content to an external service.
- Your server needs short, resumable batches instead of one long scan.
- You want findings to include a reason, evidence and safe next checks.
- You understand that partial coverage and heuristic alerts require human review.
New in version 1.2.5
Investigate each source with the right context.
Findings now separate file, database and plugin evidence, then turn technical references into a safer review path.
Human-readable locations
Database references identify the content, option, table and site instead of resembling server folders.
Read-only SQL
Relevant database findings can include a query for inspecting the affected row without modifying it.
Guided response
Each expanded result separates evidence, safe checks, possible correction and cleanup verification.
What it can do today
A privacy-first, report-only malware scanner for WordPress.
Local inspection
No files or database content leave the server during a scan, and the plugin sends no telemetry.
Resumable progress
Manual and daily WP-Cron scans run in short slices, remember progress and respect time and memory budgets.
Coverage and history
Source tabs, scan coverage and finding history keep files, database records and plugin evidence understandable.
Context-aware trust
Signed offline rules and core catalogs distinguish evidence that needs action from harmless patterns such as inert upload placeholders.
How it works
Install
Upload and activate the plugin ZIP, then review its local diagnostics.
Scan
Start a manual scan or configure a daily one; the work continues in resumable batches.
Review
Check the stated evidence, coverage and safe next steps before changing any site data.
In development
Requirements and current limits
- Status
- Development release
- Version
- 1.2.6
- Runtime
- PHP 7.4+; PHP 8.3+ recommended
- Interface
- English with bundled Spanish translation
Download LocalGuard Scanner
Review the requirements and limitations above before installing this development release.
Download localguard-scanner-1.2.6.zip