Open source PHP security scanner

Find suspicious code before it spreads.

Scan PHP projects and WordPress sites. Review each finding before you change a file.

Run a first scanUse WordPress

Loading terminal player...

Command lineScan a project in minutes

Install the scanner, choose a safe mode, and create your first report.

WordPressWork from the dashboard

Schedule scans, inspect reports, and control remediation without leaving WordPress.

ReferenceFind the right option

Browse commands by purpose instead of searching through one long flag list.

Start with a report

Report mode records detections without deleting, cleaning, or quarantining files. It is the safest way to understand the scanner on an unfamiliar project.

php scanner /var/www/site --lite --report

The scanner writes an HTML report by default. Open it, review the matched code, and confirm the file belongs to the installed application before taking action.

Protect the original files

Create a current backup before cleaning, deleting, or quarantining anything. A detection identifies suspicious code. It does not prove that the entire file is malicious.

What the scanner checks

Signatures

Known code fragments and patterns associated with malware families. Signature only mode usually produces the most focused review.

Exploits

Suspicious programming patterns that attackers often use. Legitimate applications can contain similar code, so inspect the context.

Dangerous functions

PHP functions such as system and shell_exec. Their presence deserves review but does not confirm an infection.

Integrity

Checksums compare supported platforms and packages with trusted releases. Modified and unknown files still receive a full scan.

Choose your next step

Goal	Read next
Run a local scan	Getting started
Install with Composer or a release file	Installation
Configure reports, paths, or automation	CLI reference
Scan from WordPress administration	WordPress plugin
Understand detection data	Definitions