Release History · What's new in UltraGuard
Added
- 27-module security suite: WAF, antivirus, login limiter, 2FA, passkeys, hardening, security headers, live traffic monitor, audit log, and more.
- 10-layer antivirus scanner: MD5 hash matching, PHP heuristics, obfuscation detection, polymorphic patterns, supply-chain droppers, JS threats, HTML injection, core integrity, high-entropy strings, and vulnerability detection.
- 8-layer Web Application Firewall with IP/CIDR controls, geo-blocking, rate limiting, bot detection, OWASP pattern matching, auto-ban, and reputation feed integration.
- Real-time Live Traffic Monitor via Server-Sent Events with threat classification and one-click block.
- Login Protection with brute-force lockout, URL obfuscation, session management, and configurable thresholds.
- WordPress Hardening with one-click controls for XML-RPC, version exposure, and sensitive file protection.
- Security Headers suite: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy with live preview.
- Audit Log covering logins, failures, settings changes, plugin events — searchable and exportable.
- Auto Updater for WordPress core, plugins, and themes with scheduling, per-item exclude lists, and rollback hooks.
- .htaccess Manager with visual editor, template library, and safe rollback.
- Email, Webhook, and Slack notification delivery independently configurable per event type.
- Onboarding wizard for new users.
- Passkey & TOTP 2FA (Pro): WebAuthn passkeys, app-based TOTP, per-role enforcement, grace periods, backup codes.
- Vulnerability Scanner (Pro): CVE detection via WPScan & Patchstack with Virtual WAF Patching.
- Database Scanner (Pro): SEO spam, pharma hacks, eval injections, hidden iframes, base64 payloads, orphaned backdoor accounts.
- File Integrity Monitor (Pro): continuous tracking with instant change alerts.
- IP Threat Intelligence (Pro): cloud-synced hostile IP feeds integrated with WAF.
- WooCommerce Security Mode (Pro): checkout rules, JS skimmer detection, WooCommerce-aware logging.
- Blacklist & Reputation Monitor (Pro): continuous domain and IP monitoring.
- Uptime & SSL Monitor (Pro): availability and certificate health monitoring.
- Compliance Reports (Pro): GDPR, PCI-DSS, ISO 27001, and SOC 2 evidence reports.
- REST API & XML-RPC Security (Pro): route-level access controls, API key enforcement, rate limiting.
- Native WordPress Multisite support in the free tier.
- Full mobile/tablet-responsive admin interface.
Install the latest version
UltraGuard is currently available directly from the UltraGuard download page while the plugin directory approval is pending.