ARGUS WordPress Defence 1.0.0 — first production release

Automatic WordPress security: local firewall, malware and file-integrity scanning, vulnerability protection, quarantine, scheduled backups, an optional page cache, and automatic global threat intelligence. See README.md for installation, update, and uninstall instructions.
2026-08-09 13:40:16 +00:00
commit df0f2fccb8
73 changed files with 12302 additions and 0 deletions
@@ -0,0 +1,82 @@
+# ARGUS WordPress Defence
+
+Automatic WordPress security. A local firewall, malware and file-integrity scanning,
+vulnerability protection, and scheduled backups — protecting your site with zero manual
+configuration required.
+
+**Version:** 1.0.0
+**Requires:** WordPress 6.0+, PHP 7.4+
+**License:** GPLv2 or later
+
+## What it does
+
+- **Firewall** — blocks malicious requests (SQL injection, cross-site scripting, and more)
+  before they reach your site.
+- **Scanner** — regularly checks WordPress core, plugins, and themes for suspicious files
+  and integrity changes, and quarantines confirmed threats instead of just reporting them.
+- **Vulnerability Protection** — checks your installed plugins, themes, and WordPress core
+  against known security issues.
+- **Backups** — scheduled recovery points for your site's database and files, stored
+  outside the web root.
+- **Cache & Performance** — an optional page cache that can make your site faster, built
+  to never interfere with the firewall or bans.
+- **Global Threat Intelligence** — automatically connected, no setup required.
+
+Everything works out of the box. There is nothing to configure to get protected.
+
+## Installation
+
+1. Download the latest release ZIP (see [Releases](#releases) below).
+2. In your WordPress admin: **Plugins → Add New → Upload Plugin**, choose the downloaded
+   ZIP, then **Install Now**.
+3. Click **Activate**.
+
+That's it — ARGUS Defence begins protecting your site automatically. A new **ARGUS
+Defence** menu appears in your wp-admin sidebar with an overview of your site's
+protection status.
+
+## Updating
+
+Automatic in-dashboard updates require an update channel to be configured for your
+deployment (`ARGUS_WPD_UPDATE_MANIFEST_URL` and `ARGUS_WPD_UPDATE_PUBLIC_KEY` in
+`wp-config.php`). Without one configured, update the plugin the same way you installed
+it: download the new release ZIP and upload it again through **Plugins → Add New →
+Upload Plugin** — WordPress will offer to replace the existing version.
+
+## Uninstalling
+
+Deactivate and delete the plugin from the **Plugins** page as you would any other
+WordPress plugin. All ARGUS Defence data (settings, scan history, quarantined files,
+database tables) is removed automatically — nothing is left behind.
+
+## Releases
+
+Each release is published as a ZIP with an accompanying SHA-256 checksum. Verify the
+download before installing it on a production site:
+
+```
+sha256sum argus-wordpress-defence-X.Y.Z.zip
+```
+
+Compare the result against the checksum published alongside that release.
+
+## Source layout
+
+```
+argus-wordpress-defence.php   Plugin entry point (admin UI, cron, activation)
+mu-loader/                    Tamper-resistant enforcement core (installed as a Must-Use
+                               plugin, keeps running even if the main plugin is deactivated)
+includes/                     Firewall, ban/policy engine, scanner, quarantine, backups,
+                               vulnerability intelligence, cache
+admin/                        wp-admin dashboard and settings pages
+bin/                          Release packaging and signing tools (not shipped in the
+                               plugin ZIP)
+```
+
+## Support
+
+Please open an issue in this repository.
+
+## License
+
+GPLv2 or later. See [LICENSE](LICENSE).