{"id":273886,"date":"2026-01-29T17:56:28","date_gmt":"2026-01-29T17:56:28","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/security-watchdog-lite\/"},"modified":"2026-10-25T09:16:37","modified_gmt":"2026-10-25T09:16:37","slug":"lumiverse-security-watchdog-lite","status":"publish","type":"plugin","link":"https:\/\/nl.wordpress.org\/plugins\/lumiverse-security-watchdog-lite\/","author":13133672,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"4.7.0","stable_tag":"4.7.0","tested":"7.1.3","requires":"6.0","requires_php":"7.4","requires_plugins":null,"header_name":"Watchdog Security Lite \u2014 Powered by Lumiverse Nexus","header_author":"Lumiverse Dynamic","header_description":"Modular background scanner: tracks new plugins, new admin users and scans changed .js files for malware signatures. Sends email alerts. Options to harden your installation.","assets_banners_color":"000c28","last_updated":"2026-10-25 09:16:37","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/lumiversenexus.com\/lite\/","header_author_uri":"https:\/\/lumiversenexus.com\/","rating":5,"author_block_rating":0,"active_installs":60,"downloads":1645,"num_ratings":1,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.1.3":{"tag":"1.1.3","author":"bestseogr","date":"2026-01-29 17:58:48","revision":3449891},"3.0.0":{"tag":"3.0.0","author":"bestseogr","date":"2026-04-24 11:14:46","revision":3514548},"3.0.1":{"tag":"3.0.1","author":"bestseogr","date":"2026-04-24 17:24:43","revision":3514817},"3.0.3":{"tag":"3.0.3","author":"bestseogr","date":"2026-04-24 19:12:11","revision":3514879},"3.0.4":{"tag":"3.0.4","author":"bestseogr","date":"2026-05-20 18:58:01","revision":3539897},"3.5.6":{"tag":"3.5.6","author":"bestseogr","date":"2026-06-13 09:14:19","revision":3570881},"3.6.7":{"tag":"3.6.7","author":"bestseogr","date":"2026-07-02 07:21:48","revision":3593508},"3.8.2":{"tag":"3.8.2","author":"bestseogr","date":"2026-07-24 04:06:55","revision":3620731},"3.8.3":{"tag":"3.8.3","author":"bestseogr","date":"2026-07-24 06:30:23","revision":3620847},"4.0.15":{"tag":"4.0.15","author":"bestseogr","date":"2026-09-07 19:58:38","revision":3685514},"4.1.0":{"tag":"4.1.0","author":"bestseogr","date":"2026-09-10 17:22:59","revision":3690260},"4.2.0":{"tag":"4.2.0","author":"bestseogr","date":"2026-09-19 18:25:45","revision":3703545},"4.3.0":{"tag":"4.3.0","author":"bestseogr","date":"2026-09-22 15:49:50","revision":3707699},"4.3.2":{"tag":"4.3.2","author":"bestseogr","date":"2026-09-25 09:38:57","revision":3712777},"4.7.0":{"tag":"4.7.0","author":"bestseogr","date":"2026-10-25 09:16:37","revision":3764177}},"upgrade_notice":[],"ratings":{"1":0,"2":0,"3":0,"4":0,"5":1},"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3707734,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128}},"assets_banners":{"banner-772x250.png":{"filename":"banner-772x250.png","revision":3707735,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.1.3","3.0.0","3.0.1","3.0.3","3.0.4","3.5.6","3.6.7","3.8.2","3.8.3","4.0.15","4.1.0","4.2.0","4.3.0","4.3.2","4.7.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3764174,"resolution":"1","location":"assets","locale":"","width":1608,"height":759},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3764166,"resolution":"2","location":"assets","locale":"","width":1618,"height":799},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3764167,"resolution":"3","location":"assets","locale":"","width":1599,"height":830},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3764168,"resolution":"4","location":"assets","locale":"","width":1250,"height":769},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3764169,"resolution":"5","location":"assets","locale":"","width":1235,"height":802},"screenshot-6.png":{"filename":"screenshot-6.png","revision":3764171,"resolution":"6","location":"assets","locale":"","width":1246,"height":835},"screenshot-7.png":{"filename":"screenshot-7.png","revision":3764172,"resolution":"7","location":"assets","locale":"","width":1242,"height":825},"screenshot-8.png":{"filename":"screenshot-8.png","revision":3764173,"resolution":"8","location":"assets","locale":"","width":1601,"height":824}},"screenshots":{"1":"Watchdog dashboard with Live Pulse, Protection Coverage and active protection areas.","2":"60-Second Setup Wizard with recommended local protection and safe hardening.","3":"WordPress Hardening Center and Watchdog Header Grade.","4":"Outbound Watch showing external destinations and caller context.","5":"Persistence Watch with administrator, file and WP-Cron visibility.","6":"Malware Scanner, Live Watch, Vulnerability Watch and Integrity Center.","7":"Recovery Center with trusted investigation and recovery actions.","8":"WooCommerce-aware protection and Bot Cart Guard.","9":"Nexus Threat Network controls."}},"plugin_section":[],"plugin_tags":[1174,55021,600,227904,1173],"plugin_category":[54],"plugin_contributors":[84570],"plugin_business_model":[],"class_list":["post-273886","plugin","type-plugin","status-publish","hentry","plugin_tags-firewall","plugin_tags-malware-scanner","plugin_tags-security","plugin_tags-woocommerce-security","plugin_tags-wordpress-security","plugin_category-security-and-spam-protection","plugin_contributors-bestseogr","plugin_committers-bestseogr"],"banners":{"banner":"https:\/\/ps.w.org\/lumiverse-security-watchdog-lite\/assets\/banner-772x250.png?rev=3707735","banner_2x":false,"banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/lumiverse-security-watchdog-lite\/assets\/icon-128x128.png?rev=3707734","icon_2x":false,"generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/lumiverse-security-watchdog-lite\/assets\/screenshot-1.png?rev=3764174","caption":"Watchdog dashboard with Live Pulse, Protection Coverage and active protection areas."},{"src":"https:\/\/ps.w.org\/lumiverse-security-watchdog-lite\/assets\/screenshot-2.png?rev=3764166","caption":"60-Second Setup Wizard with recommended local protection and safe hardening."},{"src":"https:\/\/ps.w.org\/lumiverse-security-watchdog-lite\/assets\/screenshot-3.png?rev=3764167","caption":"WordPress Hardening Center and Watchdog Header Grade."},{"src":"https:\/\/ps.w.org\/lumiverse-security-watchdog-lite\/assets\/screenshot-4.png?rev=3764168","caption":"Outbound Watch showing external destinations and caller context."},{"src":"https:\/\/ps.w.org\/lumiverse-security-watchdog-lite\/assets\/screenshot-5.png?rev=3764169","caption":"Persistence Watch with administrator, file and WP-Cron visibility."},{"src":"https:\/\/ps.w.org\/lumiverse-security-watchdog-lite\/assets\/screenshot-6.png?rev=3764171","caption":"Malware Scanner, Live Watch, Vulnerability Watch and Integrity Center."},{"src":"https:\/\/ps.w.org\/lumiverse-security-watchdog-lite\/assets\/screenshot-7.png?rev=3764172","caption":"Recovery Center with trusted investigation and recovery actions."},{"src":"https:\/\/ps.w.org\/lumiverse-security-watchdog-lite\/assets\/screenshot-8.png?rev=3764173","caption":"WooCommerce-aware protection and Bot Cart Guard."}],"raw_content":"<!--section=description-->\n<p><strong>WordPress security that watches more than attacks.<\/strong><\/p>\n\n<p><strong>Watchdog Security Lite<\/strong> does the work you expect \u2014 WordPress hardening, exploit blocking, malware scanning, login protection and WooCommerce-aware defense \u2014 and then keeps going.<\/p>\n\n<p>It watches file changes and persistence points, shows outbound connections, groups related activity into Attack Stories, gives you administrator-session visibility and puts trusted recovery tools in one place.<\/p>\n\n<p>The idea is simple: <strong>strong protection, useful evidence and sensible next steps without turning security into a wall of fear.<\/strong><\/p>\n\n<p>Powered by <strong>Lumiverse Nexus<\/strong>.<\/p>\n\n<h4>Why Watchdog feels different<\/h4>\n\n<p>Many security plugins can tell you that something was blocked. Watchdog is designed to help you see the bigger picture too:<\/p>\n\n<ul>\n<li><strong>What changed?<\/strong> Live Watch keeps recent file changes visible instead of reducing everything to a number.<\/li>\n<li><strong>Could access survive after the obvious problem is gone?<\/strong> Persistence Watch looks at places unwanted access can remain.<\/li>\n<li><strong>What is WordPress connecting to?<\/strong> Outbound Watch shows external destinations and the plugin, theme or WordPress component behind them.<\/li>\n<li><strong>Are separate events part of the same activity?<\/strong> Attack Stories turns related events into a readable sequence.<\/li>\n<li><strong>What should I do next?<\/strong> Recovery Center brings the safest investigation and recovery actions into one place.<\/li>\n<li><strong>Is my protection actually configured?<\/strong> Protection Coverage shows six clear protection areas without turning security into a maze of switches.<\/li>\n<\/ul>\n\n<p>Watchdog Lite is useful on its own. It is not a dashboard built only to advertise an upgrade.<\/p>\n\n<h4>Security without alarm fatigue<\/h4>\n\n<p>Not every changed file is malware. Not every unusual event is an emergency.<\/p>\n\n<p>Watchdog is built to <strong>record broadly but escalate carefully<\/strong>. Routine changes and lower-confidence findings can remain available for review, while stronger evidence can become an actionable alert.<\/p>\n\n<p>Trusted-source checks, context-aware scanning and grouped notifications help keep the signal useful without hiding the evidence.<\/p>\n\n<h4>Start strong in about a minute<\/h4>\n\n<p>Fresh installations open a <strong>60-Second Setup Wizard<\/strong>.<\/p>\n\n<p>It detects WooCommerce, applies a conservative local protection set, offers safe WordPress hardening and lets you choose notification preferences without forcing aggressive settings.<\/p>\n\n<p>You can reopen the wizard at any time.<\/p>\n\n<h4>Hardening without the guesswork<\/h4>\n\n<p>The <strong>WordPress Hardening Center<\/strong> brings common protection controls into one clear place.<\/p>\n\n<p>Its recommended safe set can help with:<\/p>\n\n<ul>\n<li>user enumeration;<\/li>\n<li>revealing login errors;<\/li>\n<li>unnecessary pingback and XML-RPC exposure;<\/li>\n<li>WordPress head information;<\/li>\n<li>conservative browser security headers;<\/li>\n<li>common configuration weaknesses that are safe to tighten on most sites.<\/li>\n<\/ul>\n\n<p>More compatibility-sensitive options stay under your control instead of being silently enabled.<\/p>\n\n<p>The <strong>Watchdog Header Grade<\/strong> gives you a simple view of the security headers managed by Watchdog and shows where there is room to improve.<\/p>\n\n<h4>Stop obvious exploit traffic early<\/h4>\n\n<p><strong>Exploit Shield<\/strong> blocks a compact set of high-confidence hostile request patterns, including common injection attempts, dangerous PHP stream abuse, executable upload attempts and genuine path traversal.<\/p>\n\n<p><strong>Traffic Shield<\/strong> adds local abuse controls for repeated probing, dynamic-request pressure, selected XML-RPC abuse and obvious scanner behavior.<\/p>\n\n<p><strong>Probe Trap<\/strong> watches for automated requests to sensitive resources such as environment files, Git metadata, configuration backups and common web-shell locations.<\/p>\n\n<p>The goal is simple: block strong signals without treating normal WordPress traffic as an attack.<\/p>\n\n<h4>Know when your site changes<\/h4>\n\n<p>Watchdog combines several layers instead of relying on a single malware scan:<\/p>\n\n<ul>\n<li><strong>Malware Scanner<\/strong> checks executable and security-relevant files locally.<\/li>\n<li><strong>Live Watch<\/strong> monitors up to <strong>10,000 security-relevant files<\/strong> and keeps recent added, modified and deleted paths available for review.<\/li>\n<li><strong>Official File Integrity<\/strong> checks WordPress core and supported WordPress.org components against trusted sources.<\/li>\n<li><strong>Vulnerability Watch<\/strong> highlights known vulnerabilities in installed WordPress components.<\/li>\n<li><strong>Database Threat Scan<\/strong> looks for high-confidence malicious code, hidden redirects and persistence indicators in selected database areas.<\/li>\n<li><strong>Safe Core Repair<\/strong> can restore verified WordPress core files after creating a protected restore point.<\/li>\n<\/ul>\n\n<p>Watchdog separates <strong>something worth recording<\/strong> from <strong>something worth alarming you about<\/strong>. Routine and low-confidence activity can remain visible in the dashboard without becoming another urgent email.<\/p>\n\n<h4>Watch for persistence, not only malware<\/h4>\n\n<p>Removing a suspicious file is not always the end of the story. <strong>Persistence Watch<\/strong> gives you a second view of places where access or unwanted behavior can remain.<\/p>\n\n<p>It watches for meaningful changes involving:<\/p>\n\n<ul>\n<li>administrator accounts;<\/li>\n<li>MU-plugins;<\/li>\n<li>PHP files placed directly in <code>wp-content<\/code>;<\/li>\n<li>suspicious scheduled tasks;<\/li>\n<li>administrator application-password counts.<\/li>\n<\/ul>\n\n<p>The first pass establishes a baseline. Later changes are shown for review, and legitimate WordPress behavior is not automatically labelled as malware.<\/p>\n\n<p>A built-in <strong>WP-Cron inventory<\/strong> also makes scheduled tasks easier to inspect without digging through the database or command line.<\/p>\n\n<h4>See what your WordPress site is talking to<\/h4>\n\n<p>Plugins, themes and WordPress itself regularly connect to external services. <strong>Outbound Watch<\/strong> makes those connections visible.<\/p>\n\n<p>You can see destination hosts, the component making the request, request methods and bounded activity counts. This makes unexpected external communication much easier to spot without blocking normal APIs, webhooks or integrations.<\/p>\n\n<p>Outbound Watch is monitor-first in Lite and deliberately avoids storing request bodies, cookies, credentials or response bodies.<\/p>\n\n<h4>Turn activity into something you can understand<\/h4>\n\n<p>Security logs are useful, but they are not always easy to read.<\/p>\n\n<p><strong>Attack Stories<\/strong> groups related protection events from the same source into a clearer sequence, while <strong>Watchdog Live Pulse<\/strong> gives you a visual view of recent traffic, bots and protection activity.<\/p>\n\n<p>Both are built from real Watchdog events. They do not invent attacks to make the dashboard look busy.<\/p>\n\n<h4>WooCommerce-aware protection<\/h4>\n\n<p>WooCommerce traffic is different from a normal brochure site. Product browsing, cart actions, checkout requests, AJAX calls and crawlers should not all be treated the same way.<\/p>\n\n<p>When WooCommerce is active, Watchdog adds store-aware protection and <strong>WooCommerce Bot Cart Guard<\/strong>, which can neutralize supported cart and wishlist mutations from crawler-claimed or obvious automation while keeping public product pages available.<\/p>\n\n<h4>Recovery without panic buttons<\/h4>\n\n<p><strong>Recovery Center<\/strong> brings the safest Lite response tools together:<\/p>\n\n<ul>\n<li>run a fresh security scan;<\/li>\n<li>verify official files;<\/li>\n<li>review administrator sessions;<\/li>\n<li>inspect persistence changes;<\/li>\n<li>review outbound activity;<\/li>\n<li>use Safe Core Repair when verified WordPress core files need restoring.<\/li>\n<\/ul>\n\n<p>Watchdog deliberately favors <strong>verification and reversible actions<\/strong> over destructive one-click responses that could turn a security concern into an outage.<\/p>\n\n<h4>Administrator session control<\/h4>\n\n<p><strong>Administrator Sessions<\/strong> uses WordPress core session tokens to show active administrator sessions and lets an administrator revoke stale access deliberately.<\/p>\n\n<p>There is no custom browser fingerprint system to manage and no fragile IP-bound session requirement.<\/p>\n\n<h4>Optional Nexus Threat Network intelligence<\/h4>\n\n<p><strong>Nexus Threat Network is optional and disabled by default.<\/strong><\/p>\n\n<p>If you choose to enable Threat Intelligence, Watchdog can receive shared security intelligence and contribute selected verified security signals. Local protection continues to work when Threat Network participation is disabled.<\/p>\n\n<p>Learn more at <a href=\"https:\/\/lumiversenexus.com\/threat-network\/\">Nexus Threat Network<\/a>.<\/p>\n\n<h4>Six protection areas. One clear view.<\/h4>\n\n<p>The dashboard brings Watchdog together as six protection areas:<\/p>\n\n<ul>\n<li><strong>Request Defense<\/strong> \u2014 exploit blocking, traffic controls and probe detection.<\/li>\n<li><strong>Identity Defense<\/strong> \u2014 login protection, administrator sessions and WordPress hardening.<\/li>\n<li><strong>Malware &amp; Integrity<\/strong> \u2014 malware scanning, Live Watch, vulnerability checks and trusted-file verification.<\/li>\n<li><strong>Persistence Watch<\/strong> \u2014 visibility into administrator, scheduled-task and persistent-code changes.<\/li>\n<li><strong>Commerce Protection<\/strong> \u2014 WooCommerce-aware protection when a store is detected.<\/li>\n<li><strong>Security Intelligence<\/strong> \u2014 optional shared Nexus intelligence.<\/li>\n<\/ul>\n\n<p>The <strong>Protection Coverage<\/strong> score shows which applicable areas are active and where a safe improvement is available. It is a configuration guide, not a promise that any website can be made impossible to compromise.<\/p>\n\n<h4>There is a much deeper platform behind Watchdog<\/h4>\n\n<p>Watchdog Security Lite is powered by the same product family as <strong>Lumiverse Nexus PRO<\/strong>.<\/p>\n\n<p>For business-critical WordPress and WooCommerce sites, Nexus PRO adds deeper layers such as <strong>Early WAF<\/strong>, <strong>Mirage and Phantom deception<\/strong>, <strong>Adaptive Defense<\/strong>, <strong>Security Twin<\/strong>, <strong>Breach Command<\/strong>, <strong>REDLINE<\/strong>, <strong>Black Box evidence<\/strong>, <strong>Incident Replay<\/strong> and <strong>Nexus Fleet<\/strong> for agency operations.<\/p>\n\n<p>Watchdog Lite gives you a strong local security foundation. Nexus PRO is where that foundation expands into a broader security intelligence and incident-response platform.<\/p>\n\n<p>Learn more at <a href=\"https:\/\/lumiversenexus.com\">Lumiverse Nexus<\/a>.<\/p>\n\n<h3>Privacy and Online Services<\/h3>\n\n<p>Watchdog's core protection works on your WordPress site. Routine malware scanning, Database Threat scanning, Live Watch and integrity checks are performed locally, and your website files or database content are not uploaded for routine scanning.<\/p>\n\n<p>To keep security intelligence current, Watchdog may connect to <strong>lumiversenexus.com<\/strong> for malware signatures and vulnerability intelligence.<\/p>\n\n<p><strong>Nexus Threat Network is optional and disabled by default.<\/strong> If you choose to enable it, the site can receive shared security intelligence and contribute selected verified security signals. The participating site URL\/domain is associated with its authenticated contributor record, and shared signals may include a public attacking IP address plus limited security-event metadata needed for the service.<\/p>\n\n<p>Threat Network participation does not send passwords, cookies, form contents, WooCommerce customer\/order data or page content.<\/p>\n\n<p>Learn more at <a href=\"https:\/\/lumiversenexus.com\/threat-network\/\">Nexus Threat Network<\/a>. Privacy information is available in the <a href=\"https:\/\/lumiversenexus.com\/privacy\/\">Lumiverse Nexus Privacy Notice<\/a> and <a href=\"https:\/\/lumiversenexus.com\/terms\/\">Terms of Service<\/a>.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Go to WordPress Dashboard -&gt; Plugins -&gt; Add New.<\/li>\n<li>Search for \"Watchdog Security Lite\".<\/li>\n<li>Install and activate the plugin.<\/li>\n<li>Follow the <strong>60-Second Setup Wizard<\/strong>.<\/li>\n<li>Review the Watchdog dashboard and Protection Coverage.<\/li>\n<\/ol>\n\n<p>Threat Intelligence and the Weekly Security Digest remain optional.<\/p>\n\n<!--section=faq-->\n<dl>\n<dt id=\"what%20makes%20watchdog%20different%20from%20other%20wordpress%20security%20plugins%3F\"><h3>What makes Watchdog different from other WordPress security plugins?<\/h3><\/dt>\n<dd><p>Watchdog does more than put a firewall and malware scanner next to each other. Its strength is the way several protection and visibility layers work together.<\/p>\n\n<p>It can harden WordPress, block high-confidence exploit traffic, protect logins, scan for malware, verify trusted files and add WooCommerce-aware protection. But it also keeps watching the parts that are easy to miss after the first alert:<\/p>\n\n<ul>\n<li><strong>Live Watch<\/strong> keeps a history of meaningful file changes.<\/li>\n<li><strong>Persistence Watch<\/strong> looks for changes that could let unwanted access survive.<\/li>\n<li><strong>Outbound Watch<\/strong> shows which WordPress component is connecting to an external destination.<\/li>\n<li><strong>Attack Stories<\/strong> connects related protection events into something readable.<\/li>\n<li><strong>Administrator Sessions<\/strong> gives you direct visibility and revocation controls for active administrator access.<\/li>\n<li><strong>Recovery Center<\/strong> brings the safest investigation and recovery actions into one place.<\/li>\n<li><strong>Protection Coverage<\/strong> shows six protection areas so you can see what is active without digging through dozens of settings.<\/li>\n<\/ul>\n\n<p>Just as importantly, Watchdog separates <strong>evidence worth keeping<\/strong> from <strong>activity worth alarming you about<\/strong>. The goal is strong protection with useful context, not a dashboard that makes every unusual event look like a crisis.<\/p><\/dd>\n<dt id=\"will%20watchdog%20slow%20down%20my%20website%3F\"><h3>Will Watchdog slow down my website?<\/h3><\/dt>\n<dd><p>Watchdog is designed to keep heavier work away from normal page delivery wherever practical. Scanning, file monitoring, reporting and intelligence work are bounded and scheduled, while disabled features do not need to do unnecessary work.<\/p>\n\n<p>As with any security plugin, the exact impact depends on the size and activity of the site, but the Lite feature set is designed for normal production use rather than constant full-site rescanning.<\/p><\/dd>\n<dt id=\"will%20watchdog%20keep%20emailing%20me%20about%20harmless%20changes%3F\"><h3>Will Watchdog keep emailing me about harmless changes?<\/h3><\/dt>\n<dd><p>It is designed not to.<\/p>\n\n<p>Watchdog separates routine changes and low-confidence findings from activity that deserves immediate attention. Review items can remain visible in the dashboard or logs without automatically becoming a HIGH-priority email.<\/p>\n\n<p>No security scanner can promise zero false positives, but Watchdog deliberately uses context, trusted-source checks and confidence rules before escalating many findings.<\/p><\/dd>\n<dt id=\"do%20i%20need%20to%20understand%20security%20jargon%20to%20use%20it%3F\"><h3>Do I need to understand security jargon to use it?<\/h3><\/dt>\n<dd><p>No. The Setup Wizard, Protection Coverage, Live Pulse, Attack Stories and Recovery Center are designed to make the important parts understandable without requiring you to read raw logs or know how every WordPress security mechanism works.<\/p>\n\n<p>Advanced details remain available when you want them.<\/p><\/dd>\n<dt id=\"what%20happens%20if%20watchdog%20finds%20something%20suspicious%3F\"><h3>What happens if Watchdog finds something suspicious?<\/h3><\/dt>\n<dd><p>The finding remains visible with the evidence Watchdog has collected. Higher-confidence findings can generate an alert, while lower-confidence review items stay available without unnecessary alarm.<\/p>\n\n<p>Recovery Center then gives you a clear place to re-scan, verify files, inspect administrator access, review persistence and use supported recovery actions.<\/p><\/dd>\n<dt id=\"what%20does%20apply%20safe%20hardening%20change%3F\"><h3>What does Apply Safe Hardening change?<\/h3><\/dt>\n<dd><p>It enables a deliberately conservative set of WordPress hardening controls, including protections around user enumeration, login feedback, pingbacks\/XML-RPC, WordPress head information and safe browser security headers.<\/p>\n\n<p>Compatibility-sensitive controls remain manual instead of being switched on behind your back.<\/p><\/dd>\n<dt id=\"what%20is%20persistence%20watch%3F\"><h3>What is Persistence Watch?<\/h3><\/dt>\n<dd><p>Persistence Watch looks for meaningful changes in places that can matter after an incident: administrator accounts, MU-plugins, PHP files in the <code>wp-content<\/code> root, suspicious scheduled tasks and administrator application-password counts.<\/p>\n\n<p>It establishes a baseline first and does not automatically treat every legitimate change as malware.<\/p><\/dd>\n<dt id=\"what%20is%20outbound%20watch%3F\"><h3>What is Outbound Watch?<\/h3><\/dt>\n<dd><p>Outbound Watch shows external destinations contacted through the WordPress HTTP API and the WordPress component behind the request.<\/p>\n\n<p>It is useful for understanding plugin and theme integrations and for spotting unexpected communication. Lite monitors this activity without blocking normal integrations.<\/p><\/dd>\n<dt id=\"does%20watchdog%20protect%20woocommerce%20stores%3F\"><h3>Does Watchdog protect WooCommerce stores?<\/h3><\/dt>\n<dd><p>Yes. When WooCommerce is detected, Watchdog adds store-aware traffic protection and Bot Cart Guard for supported automated cart and wishlist actions.<\/p>\n\n<p>The dashboard also treats Commerce Protection as its own protection area instead of pretending an e-commerce site has the same traffic profile as a simple content site.<\/p><\/dd>\n<dt id=\"does%20watchdog%20upload%20my%20website%20files%20for%20scanning%3F\"><h3>Does Watchdog upload my website files for scanning?<\/h3><\/dt>\n<dd><p>No. Routine malware scanning, database threat scanning and integrity work are performed locally on your site.<\/p>\n\n<p>Optional Threat Network participation shares only the limited security intelligence described in the Privacy and Online Services section.<\/p><\/dd>\n<dt id=\"do%20i%20have%20to%20enable%20nexus%20threat%20network%3F\"><h3>Do I have to enable Nexus Threat Network?<\/h3><\/dt>\n<dd><p>No. Threat Intelligence is optional and disabled by default. Watchdog's local protection continues to work without joining the network.<\/p><\/dd>\n<dt id=\"can%20watchdog%20repair%20modified%20files%3F\"><h3>Can Watchdog repair modified files?<\/h3><\/dt>\n<dd><p>Lite includes <strong>Safe Core Repair<\/strong> for verified WordPress core files. It creates a protected restore point first and does not use the feature to overwrite plugins, themes, <code>wp-content<\/code>, <code>wp-config.php<\/code> or server configuration files.<\/p><\/dd>\n<dt id=\"what%20is%20lumiverse%20nexus%20pro%3F\"><h3>What is Lumiverse Nexus PRO?<\/h3><\/dt>\n<dd><p>Nexus PRO is the commercial security intelligence platform behind the wider Lumiverse Nexus product family. It builds on the Lite foundation with earlier request containment, deception, adaptive defense, deeper incident investigation and recovery, evidence preservation and agency operations.<\/p>\n\n<p>Watchdog Lite remains fully usable without Nexus PRO.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>4.7.0<\/h4>\n\n<ul>\n<li>Improved malware scanning accuracy and finding prioritization.<\/li>\n<li>Refined Live Watch coverage, history and security notifications.<\/li>\n<li>Updated Nexus integration and in-plugin presentation.<\/li>\n<li>Refreshed the WordPress.org readme and FAQ for clearer, more human product guidance.<\/li>\n<\/ul>\n\n<h4>4.6.0<\/h4>\n\n<ul>\n<li>Switched new Lite releases to the shared Nexus Malware Intelligence feed used by both Watchdog Lite and Nexus PRO, while preserving legacy feed compatibility for older plugin versions.<\/li>\n<li>Added structured unified-signature parsing with Lite scope filtering and last-known-good cache fallback.<\/li>\n<li>Expanded malware coverage to conservatively inspect top-level executable files, <code>.htaccess<\/code>, Perl\/CGI and shell-script candidates without executing them.<\/li>\n<li>Added high-confidence detections derived from recent real-world WordPress attacks, including reversed remote loaders, hidden-admin\/theme infection, encrypted\/compressed loaders, obfuscated remote eval loaders, malicious <code>.htaccess<\/code> allowlists and CGI shell backdoors.<\/li>\n<li>Preserved the existing false-positive policy, official-source suppression, first-party exact-hash trust and review-first handling.<\/li>\n<\/ul>\n\n<h4>4.5.1<\/h4>\n\n<ul>\n<li>Refined the Incident Inbox so actionable scanner findings include bounded review evidence while routine status remains in Logs.<\/li>\n<li>Manual Threat Intelligence refresh now runs in the background for a smoother WordPress admin experience.<\/li>\n<li>Setup Wizard now includes notification preferences, weekly digest opt-in and a test-digest workflow.<\/li>\n<li>Weekly Security Digest is now a branded HTML report without tracking pixels.<\/li>\n<li>Nexus PRO promotion is moved out of the main operational workflow into a compact sidebar on supported screens.<\/li>\n<li>Protection Coverage wording is clearer: \u201c6 Protection Areas. One clear view.\u201d<\/li>\n<\/ul>\n\n<h4>4.5.0<\/h4>\n\n<ul>\n<li>Added a 60-Second Setup Wizard that applies conservative local protection and safe hardening while keeping optional network participation separate.<\/li>\n<li>Added Outbound Watch for privacy-conscious, monitor-first visibility into WordPress HTTP API destinations and caller context without blocking normal integrations.<\/li>\n<li>Added Recovery Center to bring trusted scanning, integrity, administrator-access, persistence, outbound and Safe Core Repair workflows into one response view.<\/li>\n<li>Added Administrator Sessions using WordPress core session tokens, with deliberate session-revocation controls and no custom IP-binding requirement.<\/li>\n<li>Expanded the Hardening Center with Watchdog Header Grade and additional browser security headers while keeping compatibility-sensitive controls manual.<\/li>\n<li>Expanded Persistence Watch with a bounded WP-Cron inventory for scheduled-hook, timing, interval and overdue review context.<\/li>\n<li>Preserved the conservative false-positive policy, exact first-party trust model and existing WooCommerce-aware protection.<\/li>\n<\/ul>\n\n<h4>4.4.0<\/h4>\n\n<ul>\n<li>Added Protection Coverage with six clear protection areas and a configuration score that does not penalize optional Threat Network participation or non-WooCommerce sites.<\/li>\n<li>Added Persistence Watch for durable, review-oriented visibility across suspicious cron behavior, administrator changes, MU-plugins, wp-content root PHP and application-password counts.<\/li>\n<li>Added Probe Trap for a conservative set of high-confidence automated sensitive-path probes, with masked-source statistics and recent evidence.<\/li>\n<li>Redesigned WordPress Hardening as a clearer Hardening Center with a one-click safe hardening set that avoids disruptive lock-down options.<\/li>\n<li>Reworked public feature naming and in-plugin presentation so the free protection stack is easier to understand at a glance.<\/li>\n<li>Preserved the existing false-positive, first-party trust, Live Watch evidence, IP unblock and path-traversal reliability improvements from the 4.3.3 release candidate line.<\/li>\n<\/ul>\n\n<h4>4.3.3<\/h4>\n\n<ul>\n<li>Added Blocked IP Management with per-IP manual unblock controls for temporary Traffic Shield and Login Guard restrictions.<\/li>\n<li>Added retained Live Watch change evidence so recent added, modified and deleted file paths remain reviewable from the dashboard after an alert email.<\/li>\n<li>Expanded Lite Live Watch coverage to 5,000 security-relevant files with visible coverage status and code\/configuration-first prioritization.<\/li>\n<li>Refined Exploit Shield traversal handling to distinguish normal relative asset paths from high-confidence traversal attempts and improve request evidence.<\/li>\n<li>Added conservative transient-persistence inspection to Database Threat Scan for large encoded records with strong executable or persistence behavior.<\/li>\n<li>Refined security notification prioritization so routine review items stay in Watchdog while important actionable findings remain email-worthy.<\/li>\n<li>Updated first-party integrity coverage for Lumiverse Nexus PRO 6.6.8 and refreshed the in-plugin Nexus PRO introduction.<\/li>\n<\/ul>\n\n<h4>4.3.2<\/h4>\n\n<ul>\n<li>Refined Database Threat Scan handling for security-related WordPress data and improved scan reliability.<\/li>\n<li>Updated first-party integrity coverage for Lumiverse Nexus PRO 6.6.3 and optimized internal scanner state storage.<\/li>\n<\/ul>\n\n<h4>4.3.0<\/h4>\n\n<ul>\n<li>Added Exploit Shield Lite with conservative, local high-confidence request protection for common exploit payload classes in the normal WordPress request path.<\/li>\n<li>Added a flagship Exploit Shield dashboard with real blocked-request metrics, attack classes, a seven-day pressure view and a sanitized recent-interventions feed.<\/li>\n<li>Integrated Exploit Shield interventions directly into Watchdog Live Pulse, including the live radar, event highlights and combined blocked-today counter.<\/li>\n<li>Added Database Threat Scan with bounded, incremental inspection of high-risk WordPress database content for malicious code, redirects and persistence indicators.<\/li>\n<li>Integrated both protections into Recommended Local Protection, dashboard status and Security &amp; Exposure Check.<\/li>\n<li>Kept WooCommerce protection prominent while preserving optional Threat Network participation.<\/li>\n<\/ul>\n\n<h4>4.2.1<\/h4>\n\n<ul>\n<li>Refined first-run guidance so Watchdog proves local value before optional services or upgrades are emphasized.<\/li>\n<li>Made WooCommerce protection a more prominent dashboard experience with clear store-aware monitoring and commerce-pressure visibility.<\/li>\n<li>Improved Security &amp; Exposure Check presentation for WooCommerce stores and clarified quiet\/empty monitoring states.<\/li>\n<li>Includes reliability hardening for settings persistence and background option updates.<\/li>\n<\/ul>\n\n<h4>4.2.0<\/h4>\n\n<ul>\n<li>Added Security &amp; Exposure Check with a clearer view of practical WordPress attack-surface signals.<\/li>\n<li>Added Attack Stories to turn related protection activity into readable security sequences.<\/li>\n<li>Added the cinematic Protection Horizon to show current Lite protection and the additional layers available in Nexus PRO.<\/li>\n<li>Refined Threat Network contributor identification and dashboard presentation.<\/li>\n<\/ul>\n\n<h4>4.1.1<\/h4>\n\n<ul>\n<li>Improved Nexus Threat Network contributor identification for connected Lite installations.<\/li>\n<\/ul>\n\n<h4>4.1.0<\/h4>\n\n<ul>\n<li>Added the optional Weekly Security Digest and clearer protection, scan-coverage and WooCommerce pressure summaries.<\/li>\n<\/ul>\n\n<h4>4.0.16<\/h4>\n\n<ul>\n<li>Improved Integrity Center presentation and managed-host compatibility.<\/li>\n<\/ul>","raw_excerpt":"Advanced WordPress &amp; WooCommerce security with safe hardening, exploit blocking, malware scanning, live change monitoring, persistence watch and r \u2026","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/nl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/273886","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/nl.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/nl.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=273886"}],"author":[{"embeddable":true,"href":"https:\/\/nl.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/bestseogr"}],"wp:attachment":[{"href":"https:\/\/nl.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=273886"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/nl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=273886"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/nl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=273886"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/nl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=273886"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/nl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=273886"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/nl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=273886"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}