Onboarding many sites
How agencies and teams connect many WordPress sites to PowerSEC Central, one site at a time, without copying keys by hand.
Whole-site malware scanning and webshell detection
PowerSEC's malware scanner reviews PHP-like executable files across your entire WordPress installation, including writable and non-standard directories — uploads, cache, backup folders, and security-plugin log folders — where attackers often hide malicious files. Active…
Database Health: the safe cleanup workflow
PowerSEC's Database Health screen (in the plugin under Database → Database Health, and on the Central dashboard under your site's Database Health panel) shows a health score, a per-table breakdown, and a set of one-click cleanup actions. This guide explains what those numbers…
Why some vulnerabilities are flagged "fix first"
PowerSEC flags vulnerabilities that are confirmed exploited in the wild (CISA KEV) and sorts them to the top so you patch what attackers are actually using first.
Performance impact of PowerSEC
What PowerSEC runs on your server, when it runs, and how to reduce its footprint on a busy or small host.
False positives in malware scans
Sometimes the scanner flags a legitimate file. Here is how to tell, and what to do about it.
Plugin installation troubleshooting
If the PowerSEC plugin won't install, activate, or reach PowerSEC Central, this guide walks through common causes.
Vulnerability scanner: reading reports
How to read the vulnerability list for your sites, how often it is checked, and what to do about each finding.
File integrity monitoring explained
File integrity monitoring (FIM) detects when files on your server change unexpectedly. PowerSEC compares your live filesystem against a known-good baseline. What PowerSEC monitors Two checks make up file integrity monitoring: - WordPress core check (on by default) — once a day,…
Common WordPress attack vectors
The kinds of attacks WordPress sites face, and what PowerSEC does about each one.
Welcome to PowerSEC
PowerSEC protects your WordPress sites from malware, vulnerabilities, brute-force attacks and downtime, and lets you manage them all from one dashboard.
Installing the WordPress plugin
The PowerSEC plugin is the agent that connects your WordPress site to PowerSEC Central. You install it like any other WP plugin. Method 1 — From the WordPress admin 1. Go to Plugins → Add New in your WP admin 2. Search for PowerSEC 3. Click Install Now, then Activate 4. After…
Connecting your first site
Connecting a site gives PowerSEC Central three keys that belong to that site. You create them in Central and paste them into the plugin once. Connect a site 1. In PowerSEC Central, open Sites → Add site and enter the site's URL 2. Central shows three keys once: API Key,…