Boon Band

<p>BoonRisk gives you a <strong>clear security and readiness report</strong> for your WordPress site. See exactly what security risks exist, why they matter, and what to do about them — all explained in plain language.</p>
<p><strong>Safe & Read-Only:</strong> This plugin only reads your site configuration. It does not scan files, block traffic, or make any changes to your WordPress installation.</p>
<h4>What You Get</h4>
<ul>
<li><strong>Security Check Report</strong> — See your site’s security status: PHP version, WordPress updates, user settings, HTTPS, and 30+ configuration checks</li>
<li><strong>Clear Explanations</strong> — Every finding explains “why this matters” and “what to do about it” in plain language</li>
<li><strong>Prioritized Risks</strong> — Top risks ranked by impact so you know what to fix first</li>
<li><strong>Printable Report</strong> — Professional HTML report you can view, print, or share directly from WordPress admin</li>
</ul>
<h4>What This Plugin Does NOT Do (100% Safe)</h4>
<ul>
<li><strong>No file scanning</strong> — Does not scan your files or look for malware</li>
<li><strong>No traffic blocking</strong> — Does not act as a firewall or block visitors</li>
<li><strong>No site changes</strong> — Does not modify settings, files, or database</li>
<li><strong>No active testing</strong> — Does not simulate attacks or run security scans</li>
<li><strong>Read-only analysis</strong> — Only reads your configuration, never writes or changes anything</li>
</ul>
<h4>Who Is It For?</h4>
<ul>
<li><strong>Site owners</strong> — Understand your security risks without technical expertise</li>
<li><strong>Freelancers & agencies</strong> — Generate client-ready reports in minutes</li>
<li><strong>Developers</strong> — Quick baseline check before or after deployments</li>
<li><strong>Teams</strong> — Consistent security reporting across multiple WordPress sites</li>
</ul>
<h4>Free Security Check (No Account Required)</h4>
<p>Run a complete security and readiness check instantly — 100% local, no data sent anywhere:</p>
<ul>
<li><strong>Overall Risk Level</strong> — Clear Low/Medium/High rating with explanation of what it means</li>
<li><strong>Top Risks First</strong> — See your biggest security issues ranked by impact</li>
<li><strong>30+ Configuration Checks</strong> — WordPress updates, PHP version, HTTPS, user permissions, backups, 2FA, debug mode, and more</li>
<li><strong>Action Plan</strong> — Every issue includes “why it matters” and “how to fix it”</li>
<li><strong>Professional Report</strong> — Printable HTML report you can view in WordPress admin or share with your team</li>
</ul>
<p><strong>What you’ll learn:</strong> “Is my site at risk?” and “What should I fix first?”</p>
<p><strong>100% Private:</strong> All checks run on your server. Nothing is sent externally. No account or email required.</p>
<h4>Optional: Web Dashboard</h4>
<p>Connect the plugin to the <a href="https://boonrisk.com/" rel="nofollow ugc">BoonRisk web dashboard</a> for additional capabilities (optional, requires free account):</p>
<ul>
<li><strong><a href="https://boonrisk.com/scanner/" rel="nofollow ugc">Surface Scan</a></strong> — External scan of your site’s public-facing security headers, SSL configuration, and exposed services</li>
<li><strong>Vulnerability Intelligence</strong> — Known CVEs matched to your installed plugins and themes with severity ratings</li>
<li><strong>Continuous Monitoring</strong> — Automatic daily checks with alerts when your security posture changes</li>
<li><strong>Track Over Time</strong> — See how your site security improves (or changes) month over month</li>
<li><strong>PDF Reports</strong> — Download professional reports to share with clients or management</li>
</ul>
<p><strong>Note:</strong> The local security check is fully functional on its own. The web dashboard is completely optional.</p>
<p>Learn more at <a href="https://boonrisk.com/" rel="nofollow ugc">boonrisk.com</a></p>
<h3>How It Works</h3>
<h4>Local Assessment (Default)</h4>
<ol>
<li>Install and activate the plugin</li>
<li>Go to <strong>BoonRisk</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> <strong>Local Assessment</strong></li>
<li>Click <strong>Run Assessment Now</strong></li>
<li>View your Security Posture Summary and Top Risks</li>
<li>Click <strong>View Full Report</strong> for a printable HTML report</li>
</ol>
<p>All analysis happens on your server. Nothing is sent externally.</p>
<h4>Web Dashboard (Optional)</h4>
<ol>
<li>Create a free account at <a href="https://boonrisk.com/" rel="nofollow ugc">boonrisk.com</a></li>
<li>Go to <strong>BoonRisk</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> <strong>Connect (Optional)</strong></li>
<li>Enter your API key</li>
<li>Send your assessment to the dashboard for vulnerability intelligence, surface scan, and monitoring</li>
</ol>
<p>External API calls only happen when you explicitly request them.</p>
<h3>Data Usage</h3>
<h4>Local Assessment</h4>
<p>In local mode, <strong>no data is sent externally</strong>. All checks run inside WordPress.</p>
<h4>Web Dashboard (Optional)</h4>
<p>When you send data to the dashboard, the following is transmitted:</p>
<ul>
<li>PHP and WordPress versions</li>
<li>Active plugin and theme names/versions</li>
<li>Configuration flags (debug mode, file editor status, etc.)</li>
</ul>
<p>What you get in return:</p>
<ul>
<li>Known vulnerability data for your installed plugins and themes</li>
<li>Surface scan results for public-facing security</li>
<li>Severity context for identified risks</li>
<li>Historical trend data and monitoring alerts</li>
</ul>
<p><strong>What is never collected:</strong></p>
<ul>
<li>User data or personal information</li>
<li>Passwords or credentials</li>
<li>Post/page content</li>
<li>Database contents</li>
<li>File contents</li>
</ul>
<p>Data is sent <strong>only when you click</strong> Send to Dashboard or enable automatic daily sync. No personal data is collected.</p>
<h3>Privacy Policy</h3>
<p>Read our full privacy policy at https://boonrisk.com/privacy</p>


BoonRisk – Site Security Check & Report

Security posture report for WordPress — 30+ checks, prioritized risks, and a printable report. Get a clear picture in minutes.

Malcure Web Security

cybermalcure

Malware Intercept

<h3>Malcure Security</h3>
<p>★★★★★</p>
<p>Protect your WordPress site from hacks and downtime.</p>
<p>Malcure Security Suite is a fast, lightweight, cloud-connected security platform for WordPress. It performs deep server-side scans (files + database) to catch malware and unauthorized changes, allows you to monitor login activity, enables a site-wide forced re-login after incidents, and sends email alerts of incidents upon scan. Built for commercial workloads—WooCommerce stores, memberships, LMS, bookings, directories, and multi-vendor marketplaces—it plays nicely with caching/CDNs and won’t get in the way of checkout, lessons, or bookings.</p>
<h3>What Malcure Security Suite Focuses On</h3>
<ul>
<li><strong>Detect:</strong> Deep server-side malware scans (files + database), integrity/diff checks, and vulnerabilities.</li>
<li><strong>Control:</strong> Session analytics (user/IP/device), Emergency Logout (everyone except you), rotate auth keys & salts to invalidate tokens, and force site-wide re-login post-incident. Compatible with 2FA/SSO.</li>
<li><strong>Report:</strong> Clear, actionable summaries with exact file paths and reasons, email alerts with next steps, and audit-friendly logs for teams and compliance (coming-soon).</li>
<li><strong>Logging:</strong> Event logs with identifiable and traceable details.</li>
</ul>
<h3>How It Works (SaaS)</h3>
<ol>
<li>Secure Handshake: Your site authenticates with Malcure and pulls fresh threat intelligence (signatures, heuristics, rules and analysis).</li>
<li>Local-first scanning: Scans your files and database in the background.</li>
<li>Severity-ranked results: Findings are grouped by Critical/High/Medium/Low with exact specs, the reason they were flagged, and one-click actions plus email alerts and audit-ready logs.</li>
<li>Graceful: If the cloud is temporarily unreachable, Malcure Security Suite continues with last-known rules and logs locally until it reconnects.</li>
</ol>
<h3>Features</h3>
<ul>
<li>Deep server-side malware scans (files + database) using tuned signatures + heuristics.</li>
<li>Background scanning so long runs finish reliably on large sites.</li>
<li>Low overhead by design; preserves Core Web Vitals and optimized to minimize impact on site speed</li>
<li>Session management: see who’s logged in, from where.</li>
<li>Emergency Logout: one-click sign-out (everyone except you); rotate auth keys & salts to invalidate sessions.</li>
<li>Robust Event Monitor.</li>
<li>Optimal Dark Mode.</li>
</ul>
<h3>Highlights</h3>
<ul>
<li>Signature + heuristic detection for obfuscated/injected PHP/JS (backdoor/web-shell traits).</li>
<li>Database scan of options, postmeta, posts, and comments for malicious payloads.</li>
<li>Email notifications for critical events and scan results</li>
<li>Security status panel (permissions, environment)</li>
<li>Compatible with WooCommerce, LearnDash/TutorLMS, MemberPress/PMP, major booking/event plugins, WPML/Polylang, Elementor/Divi/Block Editor, and caching/CDNs (LiteSpeed Cache, WP Rocket, NGINX FastCGI, Cloudflare).</li>
</ul>
<h3>Premium (Pro)</h3>
<ul>
<li>Scheduled scans (daily/weekly/monthly) with summary emails.</li>
<li>WP-CLI automation for headless/CI workflows and cron.</li>
<li>Priority support with accelerated SLAs.</li>
</ul>


Malcure Security Suite

🔐 All-in-one WordPress security: malware scanner (files+DB), force re-login, force logout, control logins, email-alerts. Cloud-based, light & fast.

BoonRisk – Site Security Check & Report vs Malcure Security Suite