Detect publicly exposed backup files, debug logs and sensitive data on your WordPress site.

custonis

<p>Custonis detects <strong>publicly exposed files that should never be accessible on the internet</strong>.</p>
<p>Many WordPress websites unintentionally expose sensitive files such as:</p>
<ul>
<li>database backups (.sql, .zip)</li>
<li>exported user or customer data</li>
<li>configuration files (.env, wp-config backups)</li>
<li>debug logs and error logs</li>
<li>development leftovers</li>
</ul>
<p>These files are actively targeted by bots and attackers because they may expose:</p>
<ul>
<li>database credentials  </li>
<li>API keys  </li>
<li>user data  </li>
<li>internal system information</li>
</ul>
<h3>Why Custonis?</h3>
<p>Most security plugins focus on firewalls, malware or login protection.</p>
<p>Custonis focuses on a <strong>different but critical attack surface</strong>:</p>
<p>👉 <strong>Public file exposure</strong></p>
<p>It helps you identify risks that are often overlooked and complements traditional security plugins.</p>
<h3>Features</h3>
<p>✔ Detect exposed backup files (.zip, .sql, .gz)<br />
✔ Detect debug logs and error logs<br />
✔ Detect configuration backups and sensitive files<br />
✔ Detect exposed Git repositories<br />
✔ Detect directory listing vulnerabilities<br />
✔ Database health checks (large tables, autoload size, transients, revisions)<br />
✔ Severity classification (Critical / Elevated / Low)<br />
✔ Security score calculation<br />
✔ Risk level indicator<br />
✔ Exposure age tracking (when issues first appeared)<br />
✔ Detailed findings dashboard with explanations and fixes<br />
✔ Scan history chart<br />
✔ Fast and lightweight scanning<br />
✔ 100% local scanning (no external API calls)</p>
<h3>How it works</h3>
<ol>
<li>Install and activate the plugin  </li>
<li>Open the Custonis dashboard  </li>
<li>Run a security scan  </li>
<li>Review detected exposures and fix issues  </li>
</ol>
<p>Custonis performs <strong>read-only scans</strong> and does not modify your website.</p>
<h3>1.1.4</h3>
<p>= Improved =<br />
* Fixed exposure timeline (first detected now tracked correctly)<br />
* Improved consistency of finding history across scans<br />
* Enhanced score accuracy for repeated findings</p>
<h4>Added</h4>
<ul>
<li>Score breakdown (critical / elevated issues) directly in dashboard</li>
<li>More transparent risk evaluation for users</li>
</ul>
<h4>UX</h4>
<ul>
<li>Improved clarity of exposure age and status</li>
<li>Cleaner and more understandable dashboard feedback</li>
</ul>
<h3>1.1.3</h3>
<ul>
<li>Optimized false positives</li>
</ul>
<h3>1.1.2</h3>
<ul>
<li>Fixed version inconsistency in trunk</li>
</ul>
<h3>1.1.1</h3>
<ul>
<li>Fixed dashboard live stats not updating after scan</li>
<li>Improved scan result persistence</li>
</ul>
<h3>1.1</h3>
<p>= Improved =<br />
* Significantly improved scan stability and execution flow<br />
* Optimized background scanning process<br />
* More accurate live scan progress tracking<br />
* Improved performance for large websites<br />
* Enhanced scan result storage and reliability<br />
* Refined dashboard UI and scan experience</p>
<h4>Added</h4>
<ul>
<li>Improved filesystem scanning coverage</li>
<li>Enhanced database analysis</li>
<li>More precise detection of exposed files and risks</li>
<li>Better scan step handling and progress visualization</li>
</ul>
<h4>Internal</h4>
<ul>
<li>Codebase cleanup and structural improvements</li>
<li>Optimized AJAX handling and data flow</li>
</ul>
<h3>1.0.1</h3>
<p>= Fixed =<br />
* Removed all Pro / license / cron related functionality for full compliance with WordPress.org guidelines<br />
* Replaced external CDN (Chart.js) with local asset<br />
* Fixed nonce handling (sanitization and validation)<br />
* Improved escaping for all output<br />
* Improved file path handling using WordPress functions</p>
<h3>1.0.0</h3>
<p>= Initial release =<br />
* Exposure scanner<br />
* Severity detection (Critical / Elevated)<br />
* Security score calculation<br />
* Exposure age detection<br />
* Findings dashboard<br />
* Scan history chart</p>


Alternatives to Custonis – Security Exposure Scanner

Top alternatives