ThreatSign Website Security

When an on-demand scan flags suspicious activity, its investigation report offers severity levels for review. ThreatSign Website Security is the paid plan for sites using the Quttera ThreatSign WordPress add-on. It includes ongoing scanning and response services to the add-on’s on-demand process.

From scan findings to response

The scanner uses cloud-based scanning to reduce server resource load and an AI-driven heuristic engine to identify potentially malicious functionality. Heuristic analysis applies rules, weighted systems, emulators, flow analysis, and statistical methods, so it can identify threats that may not match traditional signatures.

• Malicious PHP, including backdoors, shells, and injections
• Obfuscated or polymorphic JavaScript
• Malicious iframes, redirects, hidden links, spam, and SEO malware
• Checkout skimmers on checkout pages
• WordPress core integrity issues and unauthorized files in core directories
• External links and outbound references
• Blacklist checks across more than 40 security authorities

A plan adds expert malware cleanup, automatic malware removal, continuous and scheduled scans, a Web Application Firewall (WAF), DDoS protection and mitigation, blacklist removal across more than 40 authorities, and 24/7 monitoring and protection. These services provide response settings when a scan or monitoring identifies suspicious activity.

Controls for login attempts and bots

The plugin’s brute-force controls can lock out repeated attempts by IP, apply configurable thresholds and progressive delays, and use soft or hard locks. Site owners can manage IP allow and deny lists with CIDR notation, receive email alerts for locked accounts, and detect combinations of IP addresses and usernames. Policies account for shared hosting or dedicated server environments. An emergency bypass is available for critical situations.

Bot protection evaluates risk in multiple stages, uses heuristic analysis and token-bucket rate limiting, and recognizes legitimate bots such as Googlebot and Bingbot. It can protect the REST API, XML-RPC, and WooCommerce checkout and cart endpoints. The available modes are Observe, Balanced, and Aggressive.

Monitoring administrator changes

Real-time monitoring can alert site owners to administrator additions, removals, and role changes. Database snapshots provide an audit trail for reviewing account activity.

Set up the service

Start with the Quttera ThreatSign plugin in the WordPress admin area and use its on-demand scan and investigation utilities to review the website. Upgrade to a ThreatSign Website Security plan for the broader services, then configure protection and review reports, severity levels, and account alerts through the WordPress security workflow.