Requirements

To run the scanner you need these requirements installed on your environment:

PHP 7.4+

PHP 7.4 or newer is required (PHP 8.x is recommended).

Required extensions

• php-fileinfo (ext-fileinfo): MIME type and binary file inspection
• php-json (ext-json): reports, whitelists, cache, and configuration
• php-mbstring (ext-mbstring): multibyte string operations and encoding detection
• php-zlib (ext-zlib): deobfuscation of compressed code payloads

Optional extensions

• php-zip (ext-zip): required for ZIP archive scanning (--scan-archives), WordPress upload ZIP inspection, and restoring trusted WordPress core files
• php-curl (ext-curl): recommended for downloading definitions, platform checksums, and remote updates
• php-ftp (ext-ftp): required for remote FTP and FTPS scans
• php-mysqli (ext-mysqli): required only for the CLI --scan-wordpress-db option