bearmor

Bearmor Security
Professional WordPress security plugin with comprehensive malware protection, file integrity monitoring, and login security. Almost entirely free, with optional PRO features for advanced needs.
<h3>Core Features (100% Free)</h3>
Malware Scanner 
– Deep file scanning for backdoors, web shells, and malicious code 
– Pattern matching and heuristic detection 
– One-click quarantine for threats 
– Whitelist false positives 
– Scans plugins, themes, uploads, and core files
File Integrity Monitoring 
– Real-time tracking of all file changes 
– Detailed change logs showing what, when, and where 
– Instant quarantine for suspicious modifications 
– Mark legitimate changes as safe
Login Security 
– Brute force protection with automatic IP blocking 
– Complete login activity log 
– Geographic tracking for login attempts 
– Two-factor authentication (2FA) via email
Security Hardening 
– One-click hardening for common vulnerabilities 
– Disable XML-RPC, file editing, and directory browsing 
– Hide WordPress version and login errors 
– Enforce strong passwords 
– Simple toggle controls
Firewall 
– Web application firewall blocks SQL injection, XSS, and command injection 
– Rate limiting to prevent DDoS attacks 
– Country blocking with geo-IP detection 
– Honeypot protection for forms
Activity Logging 
– Track all administrative actions 
– Filter by user, action type, or date 
– Essential audit trail for multi-user sites
Security Dashboard 
– Clear overview of security status 
– Letter-grade security score (A-F) 
– Threat alerts and recommendations 
– Clean, focused interface
<h3>Optional PRO Features</h3>
The free version provides complete security protection. PRO adds optional enhancements:
<ul>
<li>Vulnerability Scanner – Automated CVE checks for plugins and themes</li>
<li>AI Security Analysis – Plain-English explanations of security issues</li>
<li>Uptime Monitoring – 24/7 external monitoring with instant alerts</li>
</ul>
<a href="https://bearmor.eu/bearmor-security-plugin/" rel="nofollow ugc">Learn more about PRO features</a>
<h3>Why Bearmor?</h3>
Most Powerful Free Tier 
Unlike competitors, Bearmor includes malware scanning, file monitoring, firewall, quarantine, and 2FA in the free version. Features other plugins lock behind paid plans are free here.
Performance Focused 
Efficient scanning with minimal server impact. No bloat, no unnecessary features.
Professional Interface 
Clean dashboard that shows what matters. No confusion, no clutter.
Privacy Respected 
Free users only send basic registration data (URL + email). Security scan data stays on your server unless you enable PRO AI analysis.
<h3>Quick Start</h3>
<ol>
<li>Install and activate Bearmor Security</li>
<li>Run your first malware scan from the dashboard</li>
<li>Enable recommended hardening options</li>
<li>Set up 2FA for your account</li>
</ol>
No configuration required. Works immediately.
<h3>External Services</h3>
Free Users: 
– Bearmor API (bearmor.eu) – License verification and registration 
– WordPress.org API – Core file integrity checks 
– IP-API.com – Geographic data for login tracking
PRO Users (additional): 
– Bearmor API – Uptime monitoring and vulnerability data 
– OpenAI API – AI security analysis
All connections use HTTPS encryption. No security scan data leaves your server in the free version.
<a href="https://bearmor.eu/privacy" rel="nofollow ugc">Privacy Policy</a> 
<a href="https://bearmor.eu/terms" rel="nofollow ugc">Terms of Service</a>
<h3>Support</h3>
<ul>
<li><a href="https://bearmor.eu/docs" rel="nofollow ugc">Documentation</a></li>
<li><a href="https://wordpress.org/support/plugin/bearmor-security" rel="ugc">Support Forum</a></li>
<li>Email: security@bearmor.eu (PRO users receive priority support)</li>
</ul>
<h3>Privacy & Data</h3>
Free Users: 
– Site URL (installation identifier) 
– Admin email (security notifications) 
– Plugin version (update checks)
PRO Users (additional): 
– Security scan results (AI analysis only) 
– Uptime monitoring data (ping responses)
We Never: 
– Sell data to third parties 
– Track website visitors 
– Store passwords or sensitive user data 
– Share data without explicit consent
Data is encrypted in transit, stored on EU servers, and automatically deleted after 90 days. Request data deletion anytime at security@bearmor.eu.
<a href="https://bearmor.eu/privacy" rel="nofollow ugc">Full Privacy Policy</a>

Bearmor Security

Lightweight, powerful WordPress security for small and medium businesses. Malware scanning, login protection, 2FA, hardening & more.

Md Jubayer Hossain

BroodWeb Malware Scanner helps WordPress site owners, agencies, and developers investigate suspicious files, database content, login activity, and security exposure from one admin screen.
The scanner is built for careful review. It does not blindly delete files. It shows risk scores, findings, file paths, quarantine actions, whitelist controls, and exportable reports so you can inspect suspicious results before taking action.
<h4>Key Features</h4>
<ul>
<li>Malware file scanner for WordPress core, plugins, themes, uploads, must-use plugins, and root files.</li>
<li>Official WordPress core checksum verification to suppress false positives on clean core files.</li>
<li>Detection for common malware indicators such as eval(), base64_decode(), gzinflate(), shell_exec(), obfuscated strings, suspicious filenames, disguised PHP payloads, and PHP files inside uploads.</li>
<li>Database scanner for suspicious content in options, posts, and users.</li>
<li>Quarantine, restore, delete, and whitelist tools for flagged files.</li>
<li>Scan history with stored reports.</li>
<li>Filterable scan report with filename search, risk filter, category filter, collapsible findings, and JSON/CSV export.</li>
<li>AJAX chunked scanning to reduce timeouts on larger websites.</li>
<li>Scheduled scans and email alerts.</li>
<li>Integrity monitor with file-change tracking and alert email support.</li>
<li>Login security tools, including custom login URL support.</li>
<li>Activity log for security events.</li>
<li>Vulnerability review for WordPress core, plugins, and themes.</li>
<li>Firewall-lite controls for basic request protection.</li>
<li>Go Pro information tab explaining Pro features.</li>
</ul>
<h4>Official Core Verification</h4>
WordPress core files can contain functions that look suspicious in normal malware signatures. BroodWeb Malware Scanner verifies official WordPress core files against WordPress.org checksums before content heuristics are applied. If a core file matches the official source, it is not reported as suspicious.
If a core file is changed or if an unexpected file appears inside a core directory, the scanner can report that as a higher-signal issue.
<h4>Designed For Manual Review</h4>
BroodWeb Malware Scanner is an investigation and triage tool. Always review flagged files before quarantining or deleting them, and always create a full backup before cleaning an infected site.
<h4>BroodWeb Malware Scanner Pro</h4>
The free plugin includes the core protection layer: malware scanning, database checks, quarantine, whitelist, integrity monitoring, login security, vulnerability review, firewall-lite, activity log, and reporting exports.
BroodWeb Malware Scanner Pro adds advanced cleanup and intelligence tools, including:
<ul>
<li>Hardening controls.</li>
<li>Repair tools for comparing and restoring supported official WordPress, plugin, and theme files.</li>
<li>AI-assisted malware triage with OpenAI-compatible providers.</li>
<li>Professional reporting workflows for agencies and client work.</li>
</ul>

BroodWeb Malware Scanner

Scan WordPress files and database content for suspicious code, malware indicators, file integrity changes, login abuse, vulnerabilities, and firewall  …

Bearmor Security vs BroodWeb Malware Scanner