WM Guard
WM Guard
Select an article on the left or use the search.
Erste Schritte
WM Guard Overview What WM Guard checks, which functions work locally, and which areas are optional. System Requirements Minimum WordPress and PHP requirements and prerequisites for optional functions. Install and Activate WM Guard Installation, activation, and the first WM Guard check. Quick Start: WM Guard in Five Steps The most important steps for a sensible initial setup. Navigation: Overview, Settings, and About WM Guard The three main areas of the WM Guard interface. What WM Guard Changes—and What It Does Not The difference between read-only diagnostics and optional runtime protection.
Überblick & Gesundheitsindex
Finding Groups: Critical, Check, Notices, and OK How WM Guard classifies and prioritizes individual checks. Use Finding Details and the Glossary Explanations, recommended steps, and glossary links for individual findings. Understand the Health Index How the 0–100 value is calculated and which signals carry more weight. Health Index History Monthly snapshots and retention of the local health history. Check Update Readiness Backup, free space, update folder, background updates, and WordPress.org status before updates. Operational Status and Background Tasks Understand WP-Cron, Action Scheduler, REST API, loopback, and outbound connectivity. Local Change Log Which WordPress events WM Guard records locally and how long they are retained. Show WM Guard on the WordPress Dashboard Optional compact overview with health index and open items on the WordPress dashboard.
Prüfungen & Befunde
WordPress, Plugin, and Theme Updates How WM Guard evaluates pending updates from WordPress update information already present on the site. Core File Integrity and Executable Files in Uploads Checksum comparison for WordPress system files and detection of unusual executable files in uploads. Local Malware and Backdoor Signature Scan How the local heuristic scan works, its limits, and how to handle matches. Understand Backup Detection Correctly Which backup solutions WM Guard detects and why “no backup detected” does not necessarily mean “no backup exists.” PHP, Server, Storage, and Database Review PHP support status, server environment, disk space, database, and resources. Users, Debugging, Permissions, and Security Configuration Important local security signals such as admin users, debug display, permissions, XML-RPC, and 2FA. WordPress Configuration, Cron, Plugins, and Themes Review registration, default role, system email settings, inactive extensions, permalinks, comments, and cron. Site Health Signals: Extensions, Autoload, Cache, and Memory Additional technical signals in the style of WordPress Site Health. Maintenance Mode and Search-Engine Visibility How WM Guard evaluates maintenance states and WordPress search-engine visibility. Recommended Plugin Categories How WM Guard detects the presence of certain functional plugin categories. Email Authentication: Evaluate SPF and DMARC Findings How WM Guard interprets SPF and DMARC findings and why DKIM is not checked automatically. Removed or Unmaintained Plugins in the WordPress.org Directory Optional check for closed and long-unmaintained WordPress.org plugins. Manually Check Known Plugin Vulnerabilities Manual query of the public wpvulnerability.net database with local version comparison.
Online-Diagnostik & Datenschutz
Enable or Disable Optional Online Diagnostics A separate opt-in for WordPress.org, DNS, and self-tests. WordPress.org Queries: Checksums and Plugin Directory Which data is sent during optional WordPress.org checks. Check SPF and DMARC via DNS Optional DNS check of email authentication for your site domain. HTTP Self-Tests: REST, Loopback, and Maintenance Mode What optional requests to your own site check and which traces they may leave. Privacy: Which Data Stays Local? Distinguishing local technical data from optional external requests.
Zusatzschutz & Benachrichtigungen
Extra Protection Overview Four optional protection switches that are off by default and operate only at runtime. Make Username Harvesting Harder How WM Guard limits REST user lists and author queries for logged-out visitors. Disable XML-RPC Disable XML-RPC while considering possible effects on apps or Jetpack. Block the Backend File Editor Disable the built-in theme and plugin file editor at runtime. Neutralize Login Error Messages Reveal less information about existing usernames after failed logins. Configure Email Notifications Configure warnings on decline, the monthly report, and the recipient address. Warning on Decline When WM Guard sends a warning email and how the cooldown works. Monthly Report Monthly summary with health index, trend, and open items.
Externe Analyse & Monitoring
Start the Free External Analysis Analyze the publicly reachable site from the outside only after an explicit click. Request the Detailed Report Request an emailed report with consent and double opt-in. Enable Monitoring with Witte Marketing Set up the optional persistent connection and authorize technical status retrieval. Monitoring Endpoint and Access Key How the protected REST endpoint is secured and when to generate a new key. Display External Monitoring Data Retrieve uptime, outages, response time, performance, and SSL/domain information after a connection exists. End Monitoring or Lock Access Disconnect, lock the endpoint, and invalidate the previous key. Distinguish Online Diagnostics, Vulnerability Checks, and Monitoring Three separate online function groups with different triggers and data flows.
System, Daten & Hilfe
Download the Technical Support Profile Export key technical facts for an agency, host, or support request as a text file. Stored Data and Uninstallation Which WM Guard data is stored locally and what is removed when the plugin is deleted. Email Notifications Are Not Arriving Troubleshooting warning emails and monthly reports. Online Diagnostics Show No Results Troubleshooting checksums, DNS, plugin-directory checks, and self-tests. Vulnerability Check or Witte Marketing Service Fails Troubleshooting wpvulnerability.net, external analysis, reports, and monitoring. Handle Critical Findings Safely How to proceed with malware matches, modified core files, or unusual executable files. Limits of the Assessment and Security Guarantees Why a clean WM Guard status is not a complete security clearance. WM Plugin Hub, Onboarding, and Notices & Offers Shared WM Plugins administration and optional online content from the Admin Framework.