Gogasys Malware Scanner

Gogasys Malware Scanner is a comprehensive security solution for WordPress, built from the ground up to be lightweight, secure, and fully compliant with WordPress coding standards.

Key Features:

• Web Application Firewall (WAF): Real-time inspection of GET, POST, and FILES requests to block SQL injection, XSS, and more.
• Malware Scanner: Detects malicious file patterns and monitors WordPress core file integrity using official checksums.
• IP & Country Blocking: Easily block specific IP addresses or entire countries using GeoIP detection.
• Security Headers: One-click configuration for XSS Protection, CSP, HSTS, and more.
• Scheduled Scans: Automated scanning powered by WP-Cron. Note: This feature is OFF by default and requires explicit user consent to enable.
• Incident Logging: Detailed logs of all blocked threats and suspicious activities.
• Admin Notifications: Get notified via email immediately when threats are detected.

External services

Gogasys Malware Scanner connects to the following third-party services to provide core security features:

1. api.wordpress.org: Used by the Malware Scanner to fetch official WordPress core file checksums. This allows the plugin to verify the integrity of your WordPress installation and detect unauthorized file modifications.

   • Data Sent: WordPress version and site locale.
   • Service Provider: WordPress.org (Privacy Policy: https://wordpress.org/about/privacy/)

2. ip-api.com: Used for GeoIP-based country blocking. When the Country Blocking (GeoIP) feature is explicitly enabled by the site administrator, visitor IP addresses are sent to ip-api.com to determine the country of origin. This feature is disabled by default. No IP data is sent unless the administrator opts in. IP addresses are not stored by this plugin.

   • Data Sent: Visitor IP address (only when the GeoIP feature is enabled by the admin).
   • Service Provider: Artia International S.R.L. (Terms and Privacy: https://ip-api.com/docs/legal)