콘텐츠로 바로가기
WordPress.org

한국어

  • 테마
  • 플러그인
  • 소식
    • 문서
    • 포럼
  • About
    • WordPress 6.9
    • 워드프레스 6.8
    • 워드프레스와 40% 웹을 위한 여정
    • 워드프레스 번역 핸드북
  • 워드프레스 한국팀
  • 워드프레스 받기
워드프레스 받기
WordPress.org

Plugin Directory

Malcure Security Suite

  • 플러그인 제출하기
  • 내 즐겨찾기
  • 로그인
  • 플러그인 제출하기
  • 내 즐겨찾기
  • 로그인

이 플러그인은 최근 3개의 주요 워드프레스 출시와 시험 되지 않았습니다. 워드프레스의 좀 더 최근 버전으로 이용할 때 더 이상 관리되지 않고 지원되지 않고 호환성 문제가 있을 수 있습니다.

Malcure Security Suite

작성자: Malware Intercept
다운로드
  • 세부사항
  • 평가
  • 설치
  • 개발
지원

설명

Malcure Security

★★★★★

Protect your WordPress site from hacks and downtime.

Malcure Security Suite is a fast, lightweight, cloud-connected security platform for WordPress. It performs deep server-side scans (files + database) to catch malware and unauthorized changes, allows you to monitor login activity, enables a site-wide forced re-login after incidents, and sends email alerts of incidents upon scan. Built for commercial workloads—WooCommerce stores, memberships, LMS, bookings, directories, and multi-vendor marketplaces—it plays nicely with caching/CDNs and won’t get in the way of checkout, lessons, or bookings.

What Malcure Security Suite Focuses On

  • Detect: Deep server-side malware scans (files + database), integrity/diff checks, and vulnerabilities.
  • Control: Session analytics (user/IP/device), Emergency Logout (everyone except you), rotate auth keys & salts to invalidate tokens, and force site-wide re-login post-incident. Compatible with 2FA/SSO.
  • Report: Clear, actionable summaries with exact file paths and reasons, email alerts with next steps, and audit-friendly logs for teams and compliance (coming-soon).
  • Logging: Event logs with identifiable and traceable details.

How It Works (SaaS)

  1. Secure Handshake: Your site authenticates with Malcure and pulls fresh threat intelligence (signatures, heuristics, rules and analysis).
  2. Local-first scanning: Scans your files and database in the background.
  3. Severity-ranked results: Findings are grouped by Critical/High/Medium/Low with exact specs, the reason they were flagged, and one-click actions plus email alerts and audit-ready logs.
  4. Graceful: If the cloud is temporarily unreachable, Malcure Security Suite continues with last-known rules and logs locally until it reconnects.

Features

  • Deep server-side malware scans (files + database) using tuned signatures + heuristics.
  • Background scanning so long runs finish reliably on large sites.
  • Low overhead by design; preserves Core Web Vitals and optimized to minimize impact on site speed
  • Session management: see who’s logged in, from where.
  • Emergency Logout: one-click sign-out (everyone except you); rotate auth keys & salts to invalidate sessions.
  • Robust Event Monitor.
  • Optimal Dark Mode.

Highlights

  • Signature + heuristic detection for obfuscated/injected PHP/JS (backdoor/web-shell traits).
  • Database scan of options, postmeta, posts, and comments for malicious payloads.
  • Email notifications for critical events and scan results
  • Security status panel (permissions, environment)
  • Compatible with WooCommerce, LearnDash/TutorLMS, MemberPress/PMP, major booking/event plugins, WPML/Polylang, Elementor/Divi/Block Editor, and caching/CDNs (LiteSpeed Cache, WP Rocket, NGINX FastCGI, Cloudflare).

Premium (Pro)

  • Scheduled scans (daily/weekly/monthly) with summary emails.
  • WP-CLI automation for headless/CI workflows and cron.
  • Priority support with accelerated SLAs.

스크린샷

Dashboard overview: Start a deep server-side scan in one click, review site status, control logins (Emergency Logout), and force re-login by rotating keys & salts—plus quick access to color scheme, connection, and license details.
Dashboard overview: Start a deep server-side scan in one click, review site status, control logins (Emergency Logout), and force re-login by rotating keys & salts—plus quick access to color scheme, connection, and license details.
Scan in progress: DeepScan™ runs in the background with real-time progress—non-blocking, reliable, and safe to navigate away while it completes.
Scan in progress: DeepScan™ runs in the background with real-time progress—non-blocking, reliable, and safe to navigate away while it completes.
Actionable results: Prioritized detections with clear severity labels and exact file paths so you can triage and remediate fast.
Actionable results: Prioritized detections with clear severity labels and exact file paths so you can triage and remediate fast.
Light & dark UI: The same streamlined dashboard in light mode—readable, consistent, and accessible across themes.
Light & dark UI: The same streamlined dashboard in light mode—readable, consistent, and accessible across themes.
First-run setup: Establish a secure cloud connection to Malcure services in seconds with minimal fields; privacy notice and color-scheme controls included.
First-run setup: Establish a secure cloud connection to Malcure services in seconds with minimal fields; privacy notice and color-scheme controls included.

설치

Upload the plugin to your blog. Activate it. Create a support thread in case of any issues.

FAQ

Will it work without connecting to Malcure services?

Malcure Security Suite is a cloud-connected solution. A working connection to Malcure services is required for core features like scanning, signatures/heuristics, and dashboards.

Will it slow down my website?

Malcure Security Suite is optimized for low overhead. Long scans run in the background so normal traffic isn’t blocked.

How does Malcure Security Suite find malware?

It runs deep server-side scans of WordPress files and the database using tuned signatures and heuristics, plus integrity hints to spot unauthorized changes. Vulnerability checks are included.

What happens when malware is detected?

You’ll see a clear report with paths, signatures/hashes, and guidance. Malcure Security Suite focuses on detection, control, and reporting—so you can act quickly and safely.

Does Malcure Security Suite include a firewall or automatic malware cleaning?

No. Firewall and one-click malware removal are to be implemented in upcoming versions. Malcure Security Suite plays well alongside reputable firewall or cleanup tools if you use them.

Can I control logins if something looks suspicious?

Yes. Use Emergency Logout to sign out everyone except you, and rotate keys & salts to force re-login across the site.

Is it compatible with WooCommerce and Multisite?

Yes. Malcure Security Suite is built and tested for WooCommerce stores and WordPress Multisite.

Can I schedule automatic scans?

Yes, in Pro. Schedule daily, weekly, or monthly scans at a chosen time.

Does it support WP-CLI?

Yes, in Pro. Run and manage scans from WP CLI.

How often are malware signatures updated?

Regularly. The cloud keeps signatures and heuristics current so detections stay effective.

Can I use Malcure Security Suite with other security plugins?

Yes. Malcure Security Suite is designed to coexist with reputable security/firewall plugins.

I already have backups. Why do I need Malcure Security Suite?

Backups are essential, but they don’t detect active compromises and can end up restoring vulnerabilities and backdoors. Malcure Security Suite reduces “dwell time” by surfacing issues early so you can restore or remediate with confidence without losing data.

Will Malcure Security Suite work if my site is down or blocked from the internet?

Scanning requires the site to be reachable and allowed to connect out. If outbound requests are blocked or the site is offline, scanning and dashboards won’t run until connectivity is restored.

What data leaves my site?

Only what’s needed to deliver scanning and reporting. See Privacy & Data for details.

Is there a free vs Pro difference?

Free includes deep malware scans (files + DB), vulnerability checks, email alerts, session analytics, Emergency Logout, and keys/salts rotation. Pro adds scheduled scans, WP-CLI automation, and priority support.

How do I get support?

Free community support is available on the Malcure forums:
https://malcure.com/forums/
Priority support is included with Pro.

Who is Malcure Security Suite for?

Site owners who want clear, actionable detection; agencies managing many sites; and hosts/maintainers standardizing incident controls across fleets.

후기

The ONLY plugin that scans files in real-time.

Zeeshan A. 2025년 4월 26일
I am a web developer and have tried many security plugins with millions of downloads, but none compare to MalCure. This plugin thoroughly scans all files and accurately detects malware-infected files in WordPress installations. I have used Wordfence and several other top-rated plugins, but none were able to detect the hidden infected files. Surprisingly, MalCure works exceptionally well and identifies all malware-infected files effectively.

works in the background

michelleroberts237 2025년 2월 28일
I always come back to this. I initiate a scan and it finds everything.
모든 2 평가 읽기

기여자 & 개발자

“Malcure Security Suite”(은)는 오픈 소스 소프트웨어입니다. 다음의 사람들이 이 플러그인에 기여하였습니다.

기여자
  • Malware Intercept
  • Malcure Web Security
  • cybermalcure

자국어로 “Malcure Security Suite”(을)를 번역하세요.

개발에 관심이 있으십니까?

코드 탐색하기는, SVN 저장소를 확인하시거나, 개발 기록을 RSS로 구독하세요.

변경이력

3.1

  • UX: Added new checksum endpoint.

3.0

  • Feature: Event Log.
  • Bugfix: Toggling cron did not retain previous schedule.
  • UI: Revamped Setup screen.

2.9

  • Bugfix: Fixed a bug where UI would show undefined on the operations progress screen.
  • Bugfix: Fixed a bug where UI would show inaccurate time elapsed for completed scans.
  • Bugfix: Added database exclusions where known database records would get flagged.

2.8

  • Bugfix: Fixed a bug where false unreadable file message would come up under certain conditions.

2.7

  • Feature: Schedule automatic scans daily, weekly and monthly at a day and time of your choosing. *Premium Feature.
  • Bugfix: Fixed various nonce validations.
  • Bugfix: Implemented stricted nonce checks.
  • Bugfix: Fixed an error when registration would time out under certain conditions.

2.6

  • Feature: Vulnerability scan.
  • Feature: Detect unreadable files and directories.
  • Bugfix: Scan recovery would not work under certain conditions.
  • Bugfix: Optimized checksum updates.

2.5

  • Feature: Added summary of scan.
  • Feature: Better email summary of issues detected during scan.

2.4

  • Bugfix: Fixed cron scheduling.
  • Bugfix: Updated email notifications.
  • Bugfix: Fixed scan recovery attempts.
  • Bugfix: Fixed typo in CLI deactivation.

2.3

  • Bugfix: Fixed broken scan recovery.

2.2

  • Feature: Cron scheduling for periodic scans in Premium Edition.
  • Feature: Continue broken scans.
  • Feature: Sleep occasionally for low CPU usage and stability.
  • Feature: New commands in WP CLI mode.
  • Others: Code refactoring.
  • Others: Documentation.

2.1

  • Bugfix: Ensure low CPU usage during scan.
  • Others: removed donation links.

2.0

  • Feature: WP CLI integration in pro version.
  • Bugfix: Cancelling scan took a long time.
  • Others: Updated UI.

1.9

  • Feature: Better UI Updates.
  • Feature: Easier load handling for server.
  • Feature: Uninstall script.
  • Bugfix: Email notifications not being sent.
  • Bugfix: Some database records skipped during scan.
  • Bugfix: Scan couldn’t be cancelled undersome instances.

1.8

  • Bugfix: Database scan progress not reported.
  • Bugfix: Calls to localhost could break.

1.7

  • Bugfix: Updated UI for first-run.
  • Minor: Updated compatibility.

1.6

  • Feature: Major UI Update.
  • Bugfix: Fixed skin change.
  • Bugfix: Support for large scans.

1.5

  • Updated Readme
  • Updated Compatibility

1.4

  • Feature: UI Update.
  • Several stability improvements.

1.3

  • Feature: UI Update.
  • Bugfix: database scan sometimes kills the entire scan.
  • Bugfix: database scan sometimes exits midway.
  • Bugfix: Limited database scan by size.
  • Several other minor bugfixes.

1.2

  • Bugfix: Scan would break on certain hosts.

1.1

  • Major revamp.
  • Server-side scanner built from scratch.

0.6

  • Tested for compatibility with WordPress 6.0.1

0.5

  • Implemented basic scanner

0.4

  • Streamlined features.

0.3

  • Feature: System Status.

0.2

  • Feature: Shuffle WordPress salts.
  • Feature: WordPress Integrity Check.

0.1

  • Submitted for review.

기초

  • 버전 3.1
  • 최근 업데이트: 12개월 전
  • 활성화된 설치 200+
  • 워드프레스 버전 3.7.4 또는 그 이상
  • 다음까지 시험됨: 6.8.8
  • PHP 버전 5.6 또는 그 이상
  • 언어
    English (US)
  • 태그:
    firewallloginmalwarescannersecurity
  • 고급 보기

평점

별 5점 만점에 5점.
  • 2/5-별점 후기 별 5개 2
  • 0/4-별점 후기 별 4개 0
  • 0/3-별점 후기 별 3개 0
  • 0/2-별점 후기 별 2개 0
  • 0/1-별점 후기 별 1개 0

Your review

모든 리뷰 보기

기여자

  • Malware Intercept
  • Malcure Web Security
  • cybermalcure

지원

할 말 있으신가요? 도움이 필요하신가요?

지원 포럼 보기

  • 소개
  • 뉴스
  • 호스팅
  • 개인정보
  • 쇼케이스
  • 테마
  • 플러그인
  • 패턴
  • 배우기
  • 지원
  • 개발자 도구
  • WordPress.tv ↗
  • 참여하기
  • 이벤트
  • 기부하기 ↗
  • Swag ↗
  • WordPress.com ↗
  • Matt ↗
  • bbPress ↗
  • BuddyPress ↗
WordPress.org
WordPress.org

한국어

  • X(이전 트위터) 계정 방문하기
  • 블루스카이 계정 방문하기
  • 마스토돈 계정 방문하기
  • 스레드 계정 방문하기
  • 페이스북 페이지 방문하기
  • 인스타그램 계정 방문하기
  • LinkedIn 계정 방문하기
  • 틱톡 계정 방문하기
  • 유튜브 채널 방문하기
  • 텀블러 계정 방문하기
코드는 詩다
The WordPress® trademark is the intellectual property of the WordPress Foundation.