Detect modified, missing, or tampered WordPress core files by comparing them against the official checksums published by WordPress.org.

For after your cleanup of a hacked site: a read-only list of what still looks wrong, and of what the plugin did not look at.

Checks every file of your site against its official copy and tells you, in plain words, what was changed, added or removed.

Read-only security scanner: checks core and plugins against the official checksums and finds hidden code, risky settings and new admins.

Audit WordPress plugins and themes for web shells, Tiny File Manager injections, modified files, and official repository checksum mismatches.

Checks WordPress core files against official checksums, scans themes and plugins for malware, and repairs or quarantines suspicious files.