Forvault Security

Forvault Security is a WordPress plugin designed to provide forensic, read-only scanning for malware and file integrity issues on WordPress sites. It addresses the need for site administrators to confirm whether their site is clean or to identify specific changes following a security incident, all without modifying any site files or executing scanned code.

The plugin operates strictly on-demand, meaning scans are only performed when initiated manually by the user. There is no background processing during front-end page loads, and the tool does not perform any automatic file edits. Its malware scan feature uses heuristic analysis to inspect every PHP file for indicators of web shells and backdoors, such as encoded payloads sent to eval, request input invoked as a function, operating system command execution, known shell-family marker strings, packed or obfuscated code, and executable PHP files within the wp-content/uploads directory. Each suspicious file identified is scored and reported with its exact file path for further review.

Forvault Security is fully functional upon installation, with no features locked behind paywalls or restricted by trial timers. This makes it accessible for users seeking a straightforward, manual approach to security checks without the risk of unintended changes to their site's files. The plugin is suitable for WordPress administrators and site owners who require a reliable method to verify site integrity and detect potential threats without automated interventions.

evidence_sufficient: true