Qartvelo Guard documentation

Qartvelo Guard is a WordPress plugin that scans your whole site for malware and holds every new upload, plugin or theme install and unknown file until an administrator approves it. Each approval is remembered by the file's SHA-256 fingerprint, so a file you allowed once is never held again.

New here? Start with Getting started, then let the setup wizard do most of the work. The pages under "For system administrators" are optional: everything they describe makes a site safer, but none of it is needed for the plugin to protect you.

Start here

• Getting started Install Qartvelo Guard from WordPress.org or a ZIP file and open the setup wizard.
• Setup wizard The seven steps of the setup wizard, the one-click fixes and what each step changes.
• Protection levels Strict, Balanced and Relaxed, what each one holds, and how to fine-tune uploads, installs and file checks.

Everyday use

• Reports and approvals Allow or deny held uploads, installs and changed files, and use the quarantine, history, allowlist and activity log.
• Scanning Quick, full and baseline scans, what is scanned, scheduled scans, the database scan and Recent changes.
• Clean core reinstall Replace damaged WordPress core files with a verified clean copy, by hand or with one click.

For system administrators

• Early upload guard Hold uploads sent to any PHP script with auto_prepend_file, set up per hosting panel, and remove it safely.
• ClamAV and maldet Add ClamAV and Linux Malware Detect to find more known infections, with the cgav server script, for one site or many on a server.
• Real cron Run scans on time with a server cron job instead of WP-Cron, per hosting panel.
• Hosting panels Which hosting panels are detected, how to override the detection and what changes per panel.
• Multisite How Qartvelo Guard works once for a whole multisite network.
• WP-CLI and cron.php Every wp wpcybersec command, the options of bin/cron.php and how to run them with the site's PHP and user.

Help and reference

• Troubleshooting Fixes for the guard, ClamAV, the maldet monitor, held uploads, WP-CLI, folder permissions, open_basedir, loopback requests, false positives and Cloudflare.
• Uninstall What "Delete all data on uninstall" removes and what stays on the server.
• Privacy and external services Which outside services the plugin contacts and exactly what it sends.
• Terms of use The license of the plugin and the terms of the optional usage statistics.
• Changelog Release notes for Qartvelo Guard.