Most hacked WordPress sites were broken into through an old plugin or a guessed password. WordPress Guard keeps plugins patched, stops login attacks and puts back any file an attacker changes.
Plugins make WordPress useful, and they are how most sites get hacked.
A typical site runs a dozen or more plugins, each written by a different team. When a flaw is found in one of them, attackers start looking for sites that use it almost straight away. Staying safe means updating quickly, every time.
What attacks WordPress sites
Some of these are aimed at WordPress itself, most at the plugins and themes around it.
Plugins and themes with known flaws
We know which versions have published flaws and update them for you, with a backup taken first.
Login attacks
Bots try common passwords on your login page. We slow them down, block them and can ask for a second step at login.
Malicious code hidden in files
Attackers tuck code inside theme or core files. We compare every file with the original and restore anything that changed.
Spam and fake accounts
Automated sign-ups and comment spam are filtered before they reach your database.
Admin accounts nobody created
A new administrator that no one on your team added is an early sign of a break-in. We alert you at once.
Card skimming on WooCommerce
Scripts that copy card details from your checkout are spotted and blocked.
Updates that cannot take your site down.
Before every update, WordPress Guard takes a backup, and afterwards it checks that your homepage still works. If something broke, the old version comes back by itself.
- A backup before every change
- An automatic check after each update
- Rollback in seconds if anything breaks
- Elementor3.21.4 → 3.21.5 · security fixWaiting
- WooCommerce9.1.2 → 9.1.4 · security fixWaiting
- Yoast SEO22.8 → 22.9 · security fixWaiting
- Contact Form 75.9.3Up to date
How WordPress Guard protects your site
A lightweight plugin works together with Network Overwatch, which checks traffic before it reaches WordPress.
Updates with a safety net
Each update is backed up first and rolled back automatically if your site stops working.
Login protection
Wrong passwords are limited, known attackers are blocked and a second login step can be switched on.
File checks
Core, theme and plugin files are compared with clean copies, and changed files are restored.
Admin account alerts
New administrators and changes to user roles are reported to you right away.
A firewall in front of your site
Requests are checked by Network Overwatch before they reach WordPress, which also takes load off your server.
A monthly report
A plain summary of what was updated, blocked and fixed, ready to forward to a client or a boss.
Install the plugin and you are done.
Add WordPress Guard from your WordPress dashboard, or with WP-CLI if you manage sites from the command line.
$ wp plugin install burstlayer-guard --activateInstalling BurstLayer Guard✓ Plugin activated$ wp burstlayer connect✓ Site linked to your workspace. First scan started.
Works on WordPress 6.0 or newer, including multisite networks and WooCommerce stores.
- 01
Install the plugin
From the plugin directory in your dashboard, or with one WP-CLI command.
- 02
Run the first scan
We check your plugins, themes, users and files, usually within a few minutes.
- 03
Turn on automatic fixes
Choose which updates install on their own and which wait for you.
The products behind it
Each one works on its own. Together they cover WordPress, from the network edge to the last line of code.
Questions, answered.
Will it slow my site down?+
No. The heavy checks run on our servers, and the firewall sits in front of your site, so WordPress has less work to do.
Does it work with my hosting company?+
Yes. It works on shared hosting, managed WordPress hosting and your own servers.
What happens if an update breaks my site?+
WordPress Guard notices within a minute and restores the previous version from the backup it took just before.
Can I look after many sites at once?+
Yes. Agencies and hosting companies see every site in one list and can update them together.
Give your WordPress site a guard.
Free for your first site. Install the plugin and the first scan starts on its own.