Quttera ThreatSign provides on-demand scans and investigation reports in the WordPress admin area. ThreatSign Website Security is the paid option for sites that need ongoing scanning and response services, including expert malware cleanup, automatic removal, a Web Application Firewall (WAF), DDoS protection and mitigation, blacklist removal across more than 40 security authorities, and 24/7 monitoring and protection.

On-demand scans and ongoing protection

The scanner uses cloud-based scanning to reduce server resource load and an AI-driven heuristic engine to examine potentially malicious functionality. Its analysis applies rules, weighted systems, emulators, flow analysis, and statistical methods, helping identify threats that may not match traditional signatures. Investigation reports organize findings by severity level.

• Malicious PHP, including backdoors, shells, and injections
• Obfuscated or polymorphic JavaScript
• Malicious iframes, redirects, hidden links, spam, and SEO malware
• Checkout skimmers on checkout pages
• WordPress core integrity issues and unauthorized documents in core directories
• External links and outbound references
• Blacklist checks across more than 40 security authorities

On-demand scans let an administrator investigate the site when needed. A ThreatSign Website Security plan includes continuous and scheduled scans, along with automated malware removal and expert cleanup when suspicious activity needs a response.

Login and bot controls for various traffic

Brute-force protection tracks failed login attempts and can apply IP-based locking, configurable thresholds, soft and hard locks, and progressive delays. Policies account for shared hosting or dedicated server environments. Administrators can manage IP allow and deny lists with CIDR notation, detect IP and username combo-locks, receive email alerts for locked accounts, and use an emergency bypass mechanism for critical situations.

Bot protection evaluates request risk in stages, uses heuristic analysis and token-bucket rate limiting, and recognizes legitimate bots such as Googlebot and Bingbot. It can protect the REST API, XML-RPC, and WooCommerce checkout and cart endpoints. Choose Observe, Balanced, or Aggressive mode to set how the controls respond.

Administrator changes and audit history

Real-time monitoring detects and alerts on administrator additions, removals, and role changes. Database snapshots make an audit trail for reviewing account activity.

Using the scanner and plan

Start in the WordPress admin area with Quttera ThreatSign's on-demand scan and investigation tools. To add ongoing services such as scheduled scanning, malware removal, WAF, and monitoring, upgrade to a ThreatSign Website Security plan. Configure protection and review investigation reports and account alerts through the WordPress security process.