WordPress security built for ownership

Your WordPress access layer, under control.

CR Guard is a WordPress application-security control plane for identity, API access, malware integrity, pre-execution trust, persistence defense and incident response.

Secure your siteExplore the controls
CRWP+
Designed around WordPress ownership, not just alerts.
CR

Security overview

example.com · just now

Protected

Access risk

Low

Files checked

31,420

All matched

Active users

04

Monitored

Protection layers

View activity

Identity & owner lock
Verified
File and folder monitor
Healthy
Extension access
Controlled
Protection active

Access policies enforced

Protection at a glance

Security posture, at a glance.

System baseline

Ready & monitored

01Active

9

Security layers

One unified control plane

Secure
02Active

SHA-256

File integrity

Trusted verification baseline

Secure
03Active

Blocked

Remote mutations

Sensitive changes restricted

Secure
04Active

Full

Incident context

Evidence & recovery visibility

Secure
Core protection controls are actively enforced
CR-GUARDLIVE
100%CoverageProtected
Protection coverage

Know exactly what
your site is protecting.

CR Guard brings identity, access, execution, integrity and incident controls into one security model, giving you a clear view of the protection layers active across your WordPress environment.

9

Security layers

100%

Recommended controls

24/7

Monitoring

Security telemetry

See what your site
is stopping in real time.

Monitoring active

Security pulse

Activity across your protected WordPress environment

LAST 24 HOURS
CR GuardProtected

23

Blocked events

Security & policy blocks

CR GuardMonitored

22

Failed logins

Authentication failures

CR GuardClear

0

Suspicious requests

Payload / upload signals

CR GuardBlocked

1

API / state blocks

Remote mutations stopped

CR GuardClear

0

File changes

FIM changes detected

CR GuardReview

2

Critical findings

Current security findings

CR GuardClear

0

Admin changes

Privilege / identity events

CR GuardDetected

18

Integrity drift

Current integrity findings

Security posture

Every layer has a job.
Every control has a state.

Monitor the controls that matter most and quickly identify where attention is required.

P

Protection Core

ACTIVE

Owner and managed-user enforcement is active.

Security controlOpen control →
M

MU Preload Shield

VERIFIED

Deterministic early CR Guard loader is installed and valid.

Security controlOpen control →
F

File & Folder Monitor

WATCHING

Rapid integrity monitoring is active.

Security controlOpen control →
S

Malware & Integrity

CRITICAL FINDINGS

2 critical current findings require review.

Security controlOpen control →
P

Persistence Shield

ACTIVE

Persistence indicators are monitored across the installation.

Security controlOpen control →
A

API & Remote Access

PROTECTED

Sensitive remote mutations are blocked by policy.

Security controlOpen control →
E

Extension State Shield

CONTROLLED

Plugin and extension access is restricted.

Security controlOpen control →
U

Administrator Watch

MONITORED

Administrator activity is continuously tracked.

Security controlOpen control →
I

Incident Center

READY

Evidence and recovery workflows are available.

Security controlOpen control →
CR Guard · Advanced WordPress Protection

Security that starts before the attack.

CR Guard adds an advanced security layer to WordPress, protecting administrator identity, authentication, sessions, APIs, files and sensitive changes from one controlled security model.

Watch the CR Guard overviewExplore protection
Identity-firstAdmin protection
Controlled accessSessions & users
Visible activityLogs & evidence
CR GUARD
PROTECTED
CR Guard Advanced WordPress Protection
SECURITY LAYERAdministrator identity protected
Active
Protection statusAll systems active
Identity layer online
Security Operations

See every security incident.All in one place.

CR Guard gives you a centralized Incident Center where you can monitor, prioritize, and investigate security events across your WordPress environment before they become bigger problems.

✓

Prioritized security incidents

Quickly identify critical, high, medium, and operational events that require attention.

✓

One investigation queue

Malware, integrity, injection, persistence, file monitoring, API, and authentication events are brought together.

✓

Investigate before you act

Review the affected asset, source, severity, and evidence before taking containment or recovery actions.

Explore protection→Built for WordPress security operations
app.crguard.com / incidents
Security Operations
Incident Center

One prioritized investigation queue across your security events.

Critical
7
High
4
Medium
31
Operational
26
Prioritized Evidence
Investigation Queue
68 shown
CRITICAL
Malicious PHP Signals
Multiple high-confidence execution, obfuscation and persistence signals detected.
CRITICAL
Core Checksum Mismatch
WordPress core file does not match the official checksum.
HIGH
Suspicious Injection
Suspicious database activity requires investigation.
Defense architecture

Less exposed access.
More meaningful control.

A layered security model designed to control identity, access, execution, integrity and response across your WordPress environment.

9 active protection layers
01

Passwordless access

Sign in with a short-lived magic link sent to verified CloudRevol identities.

Protected
02

Protection coverage

Protect your WordPress site against malware, injections, unauthorized changes, backdoors and other common security threats.

Protected
03

API & remote access

Protect APIs, remote access channels and external integrations from unauthorized requests, abuse and malicious state changes.

Protected
04

Owner lock

Protect the site owner, key settings and administrator authority from unauthorized changes.

Protected
05

Managed users

Create and approve team access from one controlled, auditable workflow.

Protected
06

Sessions & extension access

Review active sessions, revoke suspicious access and restrict who can install or upload extensions.

Protected
07

Malware & integrity

Continuously scan for malware, file tampering, injected code and unexpected changes across your WordPress installation.

Protected
08

Branding

Customize your WordPress experience with your own logo, colors and visual identity.

Protected
09

Activity log

Track important site and administrative changes with a clear history of actions, users and timestamps.

Protected
10

Injection & persistence

Detect malicious code injections, hidden backdoors and unauthorized changes designed to maintain persistent access.

Protected
11

File intelligence

Detect additions, modifications and removals across your WordPress install.

Protected
12

Integrity checks

Compare trusted WordPress core and extension files to spot unexpected change.

Protected
13

Incident response

Prioritize evidence, preserve context, revoke sessions and move through a controlled recovery path.

Protected
14

Recovery & restore

Safely restore standard WordPress functionality when CR Guard is disabled or removed.

Protected

Protection continuously monitored

Identity, access, execution and integrity controls

CR-GUARD / DEFENSE-MODEL

A deliberate security model

Stop treating admin access as an open door.

WordPress cannot be made safe by a single switch. CR Guard helps reduce common pathways by combining identity checks, privilege control, detection and fast visibility into sensitive change.

See the implementation approach

CR Guard policy engine

Site-wide protection layer

Active
Owner Lock + Magic Link
Managed Users + least privilege
Sessions + revocation
REST / XML-RPC firewall
Pre-Execution Plugin Gate
MU containment + State Shield
SHA-256 File Monitor
Malware + Persistence scans
Incident Center + recovery mode
Built to run early through a WordPress must-use plugin installation.
CR-GUARD / POLICY
Enforced

Advanced security operations

Investigate, contain and recover with confidence.

CR Guard goes beyond detection with controlled review, remediation and recovery workflows for complex WordPress security operations.

01

Multi-factor authentication

Require authenticator verification for selected managed users, with recovery codes and owner-controlled resets.

02

Bulk trust review

Review, approve or revoke plugin and theme trust across multiple extensions in one controlled workflow.

03

Portable SC & threat scans

Run dedicated scans for supported Portable SC payloads, loaders, recovery files and persistence indicators.

04

Quarantine & recurrence control

Quarantine selected confirmed threats with recovery records and optionally re-quarantine known returning content.

05

Configuration repair

Review suspicious directives in .htaccess and .user.ini, then apply selective repair with recovery copies.

06

Database cleanup previews

Inspect flagged JavaScript and proposed database changes before cleanup, with protected rollback data.

07

WordPress cron management

Search scheduled events and pause, resume or delete selected tasks when investigating persistence.

08

Upload & injection protection

Filter executable uploads and supported SQL/PHP injection patterns with monitoring mode and configurable exceptions.

Questions, answered

A clearer way to understand the guardrails.

Straight answers about what CR Guard protects, how it operates and where infrastructure security still matters.

Security guidance

Clear, practical answers

What is CR Guard?+

CR Guard is a WordPress application-security control plane for identity, API policy, malware and integrity checks, file monitoring, pre-execution trust, persistence defense and incident response.

Can CR Guard replace server security?+

No. It strengthens the WordPress boundary, but it works alongside WAF or CrowdSec protection, operating-system updates, tested backups, locked-down SSH/SFTP, safe filesystem ownership and database security.

How does Magic Link login work?+

Magic Link tokens are one-time and time-limited. The protected owner chooses the authentication mode, and the site should test WordPress mail delivery before relying on login or alert emails.

Does it disable WordPress user management?+

CR Guard governs managed identities and privileged actions instead of deleting WordPress users outright. This preserves a documented break-glass recovery path while reducing unmanaged account creation and privilege drift.

What does “instant” file monitoring mean?+

WordPress hooks can observe managed uploads immediately, while Rapid Watch, scheduled checks and deep SHA-256 verification detect broader content drift. True sub-second filesystem events require a persistent server agent.

What happens when CR Guard blocks something?+

Use the Incident Center to preserve evidence, assess severity, revoke affected sessions, run malware and persistence scans, review file history and only rebuild trusted baselines after cleanup is verified.

Can I use my own email provider, such as SendGrid?+

Yes. You can connect and use your own email delivery provider, such as SendGrid or another supported SMTP/email service. You only pay a $10/year platform fee for using your own email provider. There are no additional email delivery charges from the platform.