ThreatSign Website Security

Quttera ThreatSign provides on-demand scans and investigation reports from the WordPress admin area. ThreatSign Website Security plans add options for ongoing response and protection, including expert malware cleanup, automatic malware removal, continuous and scheduled scans, a Web Application Firewall (WAF), DDoS protection and mitigation, blacklist removal across more than 40 security authorities, and 24/7 monitoring.

What scans examine

Cloud-based scanning reduces server resource load. Quttera’s AI-driven heuristic engine uses rules, weighted systems, emulators, flow analysis, and statistical methods to examine potentially malicious functionality, including threats that may not match traditional signatures. Investigation reports assign severity levels to findings.

• Malicious PHP, including backdoors, shells, and injections
• Obfuscated or polymorphic JavaScript
• Malicious iframes, redirects, hidden links, spam, and SEO malware
• Checkout skimmers on checkout pages
• WordPress core integrity and unauthorized documents in core directories
• External links and outbound references
• Blacklist status across more than 40 security authorities

When a scan finds suspicious activity, the plan’s automatic removal and expert cleanup provide response options. Continuous and scheduled scans add recurring checks to the on-demand scan process.

Brute-force and bot controls

The WordPress extension also provides layered controls for login attempts and automated traffic. Brute-force protection can lock by IP, apply configurable thresholds and soft or hard locks, and use progressive delays. IP allow and deny lists support CIDR notation, while combo-lock detection checks IP and username together. Email alerts can report locked accounts. Policies can account for shared hosting or dedicated servers, and an emergency bypass is available for critical situations.

Bot protection evaluates risk across requests, uses heuristic analysis and token-bucket rate limiting, and recognizes legitimate bots such as Googlebot and Bingbot. Controls can cover the REST API, XML-RPC, and WooCommerce checkout and cart endpoints. Observe, Balanced, and Aggressive modes let administrators pick how enforcement is applied.

Review administrator changes

Monitoring detects administrator additions and removals, and role changes. WordPress hooks can detect changes as they occur; scheduled checks and admin page loads provide additional checks. Database snapshots create an audit trail for reviewing account activity, and alerts can notify you about changes.

Start using the service

Install and activate Quttera ThreatSign from the WordPress admin area, then execute an on-demand scan and review its investigation report. To add the broader service set, upgrade to a ThreatSign Website Security plan. Configure the available protections and review scan severity levels and account alerts in the WordPress security workflow.