Watchdog Security Lite — Powered by Lumiverse Nexus

Watchdog Security Lite is the free WordPress security edition powered by Lumiverse Nexus. It combines practical local protection with a fast, visual security dashboard designed to answer three simple questions:

• What is happening on my website?
• What is Watchdog protecting?
• What may still need my attention?

Watchdog Lite is built with performance in mind. Heavy work is kept away from normal visitor requests wherever possible, and the dashboard avoids turning every unusual request into an attack claim. Highlights

• Exploit Shield Lite - blocks a conservative set of high-confidence exploit payloads using local and already-cached rules in the normal WordPress request path.
• Traffic Shield Lite - conservative protection against suspicious request pressure, probes and selected XML-RPC abuse.
• Login Guard - protects WordPress login from repeated failed attempts and obvious abuse.
• Malware Scanner - local file scanning with change-aware coverage and MU-plugin support.
• Database Threat Scan - bounded, incremental inspection of high-risk WordPress database content for high-confidence malicious code, redirects and persistence indicators.
• Vulnerability Watch Lite - checks installed WordPress components against Nexus vulnerability intelligence.
• Official File Integrity - compares WordPress core and supported WordPress.org components with trusted sources.
• Safe Core Repair - manually restores verified WordPress core files with a protected restore point.
• Security & Exposure Check - reviews local protection and highlights practical attack-surface items that may deserve attention.
• Attack Stories - groups related protection events into readable activity sequences instead of repetitive log noise.
• Watchdog Live Pulse - a real-data visual view of recent traffic, bots and protection activity.
• Site Change Watch Lite - records important administrator, plugin, theme and risky file changes.
• Optional administrator TOTP 2FA - authenticator-app protection with one-time recovery codes.
• WooCommerce Bot Cart Guard Lite - helps stop obvious automation from creating unwanted cart or wishlist state.
• Weekly Security Digest - optional weekly email with useful protection and security-health signals.
• Nexus Threat Network Lite - optional shared security intelligence and contributor participation.

Exploit Shield Lite Exploit Shield Lite blocks a compact, conservative set of high-confidence request payloads such as SQL injection, script injection, path traversal, dangerous PHP stream wrappers and executable upload attempts. It runs inside the normal WordPress plugin lifecycle. It does not configure auto_prepend_file, and it does not make a remote decision call while serving a visitor request. Nexus PRO remains the earlier pre-WordPress protection tier through its Early WAF architecture. Database Threat Scan When enabled, scheduled malware scans also inspect bounded high-risk database content. Watchdog checks selected options plus rotating batches of posts and post metadata for high-confidence malicious code, hidden redirects, obfuscated JavaScript and persistence indicators. Large content tables are scanned incrementally rather than swept in one expensive pass. Security you can understand Watchdog Lite does more than display raw logs. Security & Exposure Check reviews practical configuration and attack-surface signals, while Attack Stories groups related Traffic Shield and Login Guard events into a readable sequence. The goal is to help site owners understand what Watchdog actually observed and what it actually restricted. Watchdog does not invent attack events for visual effect. WooCommerce-aware protection WooCommerce stores receive cart, wishlist, checkout, AJAX, crawler and catalog traffic that should not all be treated the same way. Watchdog Lite includes store-aware request protection and WooCommerce Bot Cart Guard Lite, which can neutralize supported cart and wishlist mutations from crawler-claimed or obvious automation while leaving public pages available. Watchdog Lite and Nexus PRO Watchdog Lite provides a strong free security foundation inside WordPress. The dashboard also includes a Protection Horizon that shows where Lite protection ends and what Lumiverse Nexus PRO adds for sites that need more:

• earlier request containment before WordPress fully processes eligible hostile pressure;
• deception-based hostile activity observation;
• adaptive defense that can learn from repeated hostile behavior;
• richer investigation and recovery workflows;
• distributed Nexus intelligence across connected sites;
• Nexus Fleet for agency and multi-site operational visibility.

Learn more at Lumiverse Nexus PRO. Nexus Threat Network Lite Nexus Threat Network Lite is disabled by default. When an administrator enables Threat Intelligence Lite, the site can receive compact shared security intelligence and contribute selected high-confidence security signals. The participating site URL/domain is included with the authenticated contributor record so the Nexus Network operator can identify the connected installation. Selected verified security signals may include an attacking public IP address and limited security metadata needed for network intelligence. Threat Network participation does not send passwords, cookies, form contents, customer/order data or page content. Learn more at Nexus Threat Network.

1. Go to WordPress Dashboard -> Plugins -> Add New.
2. Search for "Watchdog Security Lite".
3. Install and activate the plugin.
4. Open Watchdog Lite from the WordPress admin menu.
5. Review the dashboard and choose the protection settings appropriate for your site.

Threat Intelligence Lite, Weekly Security Digest and administrator TOTP 2FA remain optional.

4.3.2

• Refreshed exact first-party trust for Lumiverse Nexus PRO 6.6.3 so current PRO files are not mistaken for malware or unexpected first-party code when both plugin folders are present.
• Kept exact-hash verification: modified or unexpected executable Nexus files remain reportable.

4.3.1

• Prevented Database Threat Scan from reporting Watchdog/Nexus signature catalogues, scan jobs and security evidence as malware while continuing to inspect normal WordPress database content.
• Refreshed first-party trust coverage for current Nexus PRO files and moved Lite scanner/protection state out of autoloaded options to reduce self-scanning and false integrity findings.

4.3.0

• Added Exploit Shield Lite with conservative, local high-confidence request protection for common exploit payload classes in the normal WordPress request path.
• Added a flagship Exploit Shield dashboard with real blocked-request metrics, attack classes, a seven-day pressure view and a sanitized recent-interventions feed.
• Integrated Exploit Shield interventions directly into Watchdog Live Pulse, including the live radar, event highlights and combined blocked-today counter.
• Added Database Threat Scan with bounded, incremental inspection of high-risk WordPress database content for malicious code, redirects and persistence indicators.
• Integrated both protections into Recommended Local Protection, dashboard status and Security & Exposure Check.
• Kept WooCommerce protection prominent while preserving optional 2FA and optional Threat Network participation.

4.2.1

• Refined first-run guidance so Watchdog proves local value before optional services or upgrades are emphasized.
• Made WooCommerce protection a more prominent dashboard experience with clear store-aware monitoring and commerce-pressure visibility.
• Improved Security & Exposure Check presentation for WooCommerce stores and clarified quiet/empty monitoring states.
• Includes reliability hardening for settings persistence and background option updates.

4.2.0

• Added Security & Exposure Check with a clearer view of practical WordPress attack-surface signals.
• Added Attack Stories to turn related protection activity into readable security sequences.
• Added the cinematic Protection Horizon to show current Lite protection and the additional layers available in Nexus PRO.
• Refined Threat Network contributor identification and dashboard presentation.

4.1.1

• Improved Nexus Threat Network contributor identification for connected Lite installations.

4.1.0

• Added the optional Weekly Security Digest and clearer protection, scan-coverage and WooCommerce pressure summaries.

4.0.16

• Improved Integrity Center presentation and managed-host compatibility.