Audience
WordPress developers, agencies, hosting providers, sysadmins and security professionals who need to scan WordPress/PHP sites for malware from the command line.
About WPSniffer
WPSniffer is a free, open-source command-line malware scanner for WordPress and other PHP sites. It scans files on the host where installed, using YARA-X and community YARA Forge rule packages to detect suspicious code such as webshells. Operators can use supplied rules or add their own .yar/.yara files, choose core, extended, or full rule sets, and pin a rule release for repeatable scans. The Python package scans selected paths, accepts paths from standard input, supports filters, and can run in scheduled jobs or CI workflows. Caching, file-size limits and per-file timeouts help manage larger scans. Reports are available in readable, CSV or TSV formats, with selectable columns and optional email delivery. WPSniffer serves administrators, developers, hosting operators and security teams investigating compromised sites or checking server files for malware. Scans run locally; files are not sent to an external service.
Other Popular Alternatives & Related Software
THOR
THOR is the most sophisticated and flexible compromise assessment tool on the market. Incident response engagements often begin with a group of compromised systems and an even bigger group of systems that are possibly affected. The manual analysis of many forensic images can be challenging. THOR speeds up your forensic analysis with more than 12,000 handcrafted YARA signatures, 400 Sigma rules, numerous anomaly detection rules and thousands of IOCs. THOR is the perfect tool to highlight suspicious elements, reduce the workload and speed up forensic analysis in moments in which getting quick results is crucial. THOR focuses on everything the Antivirus misses. With its huge signature set of thousands of YARA and Sigma rules, IOCs, rootkit and anomaly checks, THOR covers all kinds of threats. THOR does not only detect the backdoors and tools attackers use but also outputs, temporary files, system configuration changes and other traces of malicious activity.
Learn more
Veeam Recovery Orchestrator
Veeam Recovery Orchestration & Compliance is a recovery automation and compliance solution within Veeam Data Platform. The software helps organizations build tested, auditable recovery plans that prove readiness before a real outage, cyberattack, or disaster occurs. It automates recovery workflows, approvals, documentation, clean room validation, malware scanning, and disaster recovery drills. Teams can use YARA rules, malware checks, and clean restore point validation to reduce reinfection risk before returning workloads to production. Veeam Recovery Orchestration & Compliance also generates runbooks, captures recovery evidence, validates RPO and RTO targets, and supports audit-ready reporting. Built for IT, security, compliance, and disaster recovery teams, it helps organizations recover fast, recover clean, and demonstrate resilience with confidence.
Learn more
Siterack
All of your websites are pinged every 60 seconds to make sure they are alive and well. If an error is reported back, Siterack assesses the problem and will send a note to let you know. Siterack automatically runs a daily backup of all your sites and securely stores them in our cloud. All backups are displayed in your site's Control Center so you can easily search for the one you need. Before each update, Siterack grabs a backup - just in case. Afterward, Siterack incrementally updates each package and scans the site for any issues or failures using our AI. Error Detection system. If anything goes wrong, Siterack will automatically restore the most recent backup and let you know. Using dual-method, malware detection technology, the Siterack Malware Engine runs daily scans looking for and removing any malicious packages. The system uses a combination of Yara rule and signature violations to detect the malware and automatically remove it upon discovery.
Learn more
Cerber Security
Cerber Security vigorously defends WordPress against hacker attacks, spam, and malware. Blazingly fast and reliable by design. A set of specialized request inspection algorithms screen incoming requests for malicious code patterns and traffic anomalies. Bot detection engine identifies and mitigates automated attacks. Mitigates brute force and code injection attacks. Restricts access with GEO country rules. Prevents both REST API and ordinary user enumerations. Restricts access to REST API and XML-RPC. Uses a global list of IP addresses known for malicious activity. Detects bots by using heuristic and content-based algorithms. Checks IP against a real-time database of IP addresses known for disseminating spam, phishing attacks and other forms of malicious activity. Thoroughly scans every file and folder on your website for malware, trojans, and viruses. Automatically removes malware and viruses. Monitors new, changed, and suspicious files.
Learn more
Pricing
Starting Price:
$0
Pricing Details:
Free to use under GPLv3, with no paid tier or usage limit.
Free Version:
Free Version available.
Integrations
Company Information
Kerger
Founded: 2026
United States
wpsniffer.com
Videos and Screen Captures
Other Useful Business Software
Build Agents and Models on One Platform
Gemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
Product Details
Platforms Supported
Linux
On-Premises
Training
Documentation
Support
Online
