BrandBees Malware Guardian

BrandBees Malware Guardian is a WordPress security plugin focused on local malware detection for files and database content. It helps administrators identify suspicious code patterns, prioritize risk, and clean threats with safer workflows.

Core scanning works locally on your WordPress site.

Key Features

• File scanning – Scans plugin, theme, and upload paths for suspicious PHP/JS/HTML patterns
• Database scanning – Checks posts, options, comments, and other content for injected malware/spam indicators
• Signature detection – Uses curated threat signatures and heuristic pattern matching
• Risk prioritization – Threats are classified by severity and confidence
• Cleanup workflows – Guided remediation with backup-aware patch flows
• Scan scheduling – Supports recurring scans via WP-Cron
• Alerting support – Notifications for newly detected threats
• Scan history – Keeps local records to help compare and track changes over time

Typical Workflow

1. Open BB Malware Guard in wp-admin
2. Run a scan (or wait for a scheduled run)
3. Review findings by severity/confidence
4. Apply cleanup actions where appropriate
5. Re-scan to verify clean status

Support

For support requests, please use the WordPress.org support forum for this plugin.

Website: https://brandbees.net/contact-us/

External services

This plugin can optionally use third-party threat intelligence services. Core local file/database scanning works without these services.

• PhishTank (Cisco Talos): Optional phishing feed source used for local URL reputation checks when enabled.
  Terms: https://phishtank.org/terms.php
  Privacy: https://www.phishtank.org/privacy.php

• VirusTotal: Optional URL reputation lookup used only when VirusTotal integration is enabled and configured.
  Terms: https://www.virustotal.com/gui/terms-of-service
  Privacy: https://www.virustotal.com/gui/privacy-policy

• Google Safe Browsing API: Optional threat lookup used only when Safe Browsing integration is enabled and configured.
  Terms: https://developers.google.com/safe-browsing/v4/terms
  Privacy: https://policies.google.com/privacy

WordPress.org update APIs may also be contacted by WordPress itself for update/metadata checks.

Privacy Policy

BrandBees Malware Guardian is designed for privacy-conscious operations:

• Core scanning is performed locally on your server
• Scan results are stored locally in your WordPress database
• Optional external integrations are disabled by default and used only when enabled/configured
• Backups created by cleanup workflows are stored on your server

Credits

Developed by Brand Bees: https://brandbees.net/
Contributor profile: Hassan Ejaz (@genius786)