root
df0f2fccb8
Automatic WordPress security: local firewall, malware and file-integrity scanning, vulnerability protection, quarantine, scheduled backups, an optional page cache, and automatic global threat intelligence. See README.md for installation, update, and uninstall instructions.
83 lines
3.2 KiB
Markdown
83 lines
3.2 KiB
Markdown
# ARGUS WordPress Defence
|
|
|
|
Automatic WordPress security. A local firewall, malware and file-integrity scanning,
|
|
vulnerability protection, and scheduled backups — protecting your site with zero manual
|
|
configuration required.
|
|
|
|
**Version:** 1.0.0
|
|
**Requires:** WordPress 6.0+, PHP 7.4+
|
|
**License:** GPLv2 or later
|
|
|
|
## What it does
|
|
|
|
- **Firewall** — blocks malicious requests (SQL injection, cross-site scripting, and more)
|
|
before they reach your site.
|
|
- **Scanner** — regularly checks WordPress core, plugins, and themes for suspicious files
|
|
and integrity changes, and quarantines confirmed threats instead of just reporting them.
|
|
- **Vulnerability Protection** — checks your installed plugins, themes, and WordPress core
|
|
against known security issues.
|
|
- **Backups** — scheduled recovery points for your site's database and files, stored
|
|
outside the web root.
|
|
- **Cache & Performance** — an optional page cache that can make your site faster, built
|
|
to never interfere with the firewall or bans.
|
|
- **Global Threat Intelligence** — automatically connected, no setup required.
|
|
|
|
Everything works out of the box. There is nothing to configure to get protected.
|
|
|
|
## Installation
|
|
|
|
1. Download the latest release ZIP (see [Releases](#releases) below).
|
|
2. In your WordPress admin: **Plugins → Add New → Upload Plugin**, choose the downloaded
|
|
ZIP, then **Install Now**.
|
|
3. Click **Activate**.
|
|
|
|
That's it — ARGUS Defence begins protecting your site automatically. A new **ARGUS
|
|
Defence** menu appears in your wp-admin sidebar with an overview of your site's
|
|
protection status.
|
|
|
|
## Updating
|
|
|
|
Automatic in-dashboard updates require an update channel to be configured for your
|
|
deployment (`ARGUS_WPD_UPDATE_MANIFEST_URL` and `ARGUS_WPD_UPDATE_PUBLIC_KEY` in
|
|
`wp-config.php`). Without one configured, update the plugin the same way you installed
|
|
it: download the new release ZIP and upload it again through **Plugins → Add New →
|
|
Upload Plugin** — WordPress will offer to replace the existing version.
|
|
|
|
## Uninstalling
|
|
|
|
Deactivate and delete the plugin from the **Plugins** page as you would any other
|
|
WordPress plugin. All ARGUS Defence data (settings, scan history, quarantined files,
|
|
database tables) is removed automatically — nothing is left behind.
|
|
|
|
## Releases
|
|
|
|
Each release is published as a ZIP with an accompanying SHA-256 checksum. Verify the
|
|
download before installing it on a production site:
|
|
|
|
```
|
|
sha256sum argus-wordpress-defence-X.Y.Z.zip
|
|
```
|
|
|
|
Compare the result against the checksum published alongside that release.
|
|
|
|
## Source layout
|
|
|
|
```
|
|
argus-wordpress-defence.php Plugin entry point (admin UI, cron, activation)
|
|
mu-loader/ Tamper-resistant enforcement core (installed as a Must-Use
|
|
plugin, keeps running even if the main plugin is deactivated)
|
|
includes/ Firewall, ban/policy engine, scanner, quarantine, backups,
|
|
vulnerability intelligence, cache
|
|
admin/ wp-admin dashboard and settings pages
|
|
bin/ Release packaging and signing tools (not shipped in the
|
|
plugin ZIP)
|
|
```
|
|
|
|
## Support
|
|
|
|
Please open an issue in this repository.
|
|
|
|
## License
|
|
|
|
GPLv2 or later. See [LICENSE](LICENSE).
|