{"id":285341,"date":"2026-04-07T05:23:00","date_gmt":"2026-04-07T05:23:00","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/phantomguard\/"},"modified":"2026-07-24T09:57:11","modified_gmt":"2026-07-24T09:57:11","slug":"phantom-guard","status":"publish","type":"plugin","link":"https:\/\/sna.wordpress.org\/plugins\/phantom-guard\/","author":23458205,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.1","stable_tag":"1.0.1","tested":"7.0.3","requires":"6.5","requires_php":"7.4","requires_plugins":null,"header_name":"PhantomGuard","header_author":"PhantomGuard","header_description":"WordPress security hardening with automated rules. Protect your site with essential security measures.","assets_banners_color":"050a24","last_updated":"2026-07-24 09:57:11","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/phantomguard.io","header_author_uri":"https:\/\/phantomguard.io\/","rating":0,"author_block_rating":0,"active_installs":10,"downloads":304,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.0":{"tag":"1.0.0","author":"phantomguard","date":"2026-04-07 05:37:16"},"1.0.1":{"tag":"1.0.1","author":"phantomguard","date":"2026-07-24 09:57:11"}},"upgrade_notice":{"1.0.1":"<p>Adds the dashboard plugin vulnerability overview and WPVulnerability disclosure in the readme.<\/p>","1.0.0":"<p>First public release. Install and activate, then open PhantomGuard from the admin menu to get started.<\/p>"},"ratings":[],"assets_icons":{"icon.svg":{"filename":"icon.svg","revision":3500344,"resolution":false,"location":"assets","locale":false}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3500344,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0","1.0.1"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3621044,"resolution":"1","location":"assets","locale":"","width":2363,"height":1221},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3621044,"resolution":"2","location":"assets","locale":"","width":2367,"height":1219},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3500344,"resolution":"3","location":"assets","locale":"","width":2370,"height":1226},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3621044,"resolution":"4","location":"assets","locale":"","width":2417,"height":1232},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3621044,"resolution":"5","location":"assets","locale":"","width":2419,"height":1210},"screenshot-6.png":{"filename":"screenshot-6.png","revision":3621044,"resolution":"6","location":"assets","locale":"","width":2385,"height":1218}},"screenshots":{"1":"Dashboard overview and stats (some areas show Pro features when unlocked)","2":"Malware scanner (Pro)","3":"Security hardening rules and presets","4":"CDN \/ DNS management (Pro)","5":"Settings and license","6":"Plugin vulnerability checker and patcher"}},"plugin_section":[],"plugin_tags":[],"plugin_category":[],"plugin_contributors":[259600],"plugin_business_model":[],"class_list":["post-285341","plugin","type-plugin","status-publish","hentry","plugin_contributors-phantomguard","plugin_committers-phantomguard"],"banners":[],"icons":{"svg":"https:\/\/ps.w.org\/phantom-guard\/assets\/icon.svg?rev=3500344","icon":"https:\/\/ps.w.org\/phantom-guard\/assets\/icon.svg?rev=3500344","icon_2x":false,"generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/phantom-guard\/assets\/screenshot-1.png?rev=3621044","caption":"Dashboard overview and stats (some areas show Pro features when unlocked)"},{"src":"https:\/\/ps.w.org\/phantom-guard\/assets\/screenshot-2.png?rev=3621044","caption":"Malware scanner (Pro)"},{"src":"https:\/\/ps.w.org\/phantom-guard\/assets\/screenshot-3.png?rev=3500344","caption":"Security hardening rules and presets"},{"src":"https:\/\/ps.w.org\/phantom-guard\/assets\/screenshot-4.png?rev=3621044","caption":"CDN \/ DNS management (Pro)"},{"src":"https:\/\/ps.w.org\/phantom-guard\/assets\/screenshot-5.png?rev=3621044","caption":"Settings and license"},{"src":"https:\/\/ps.w.org\/phantom-guard\/assets\/screenshot-6.png?rev=3621044","caption":"Plugin vulnerability checker and patcher"}],"raw_content":"<!--section=description-->\n<p><strong>PhantomGuard<\/strong> is a full WordPress security suite\u2014malware scanning, hardening, CDN\/DNS protection, and a clear admin dashboard\u2014so you can lock down and monitor your site without editing code by hand.<\/p>\n\n<p>Enter a <strong>PhantomGuard Pro<\/strong> license in the plugin to unlock the complete toolkit.<\/p>\n\n<h3>Highlights<\/h3>\n\n<ul>\n<li>Two-phase malware scanning with background processing<\/li>\n<li>Quarantine, restore, and file cleanup workflows<\/li>\n<li>Security hardening rules (2FA, XML-RPC, REST API, rename login, and more)<\/li>\n<li>Dashboard plugin vulnerability check (WPVulnerability API)<\/li>\n<li>Under Attack Mode: one-click DDoS shield sensitivity level 4 (CDN) from the PhantomGuard Dashboard, the WordPress Dashboard widget, and the admin toolbar; optional email to the site admin when this mode is enabled<\/li>\n<li>Audit logging and scan history<\/li>\n<li>React admin app with i18n support (English, German, Italian)<\/li>\n<\/ul>\n\n<p><strong>Also included with Pro<\/strong><\/p>\n\n<ul>\n<li>Security presets (Basic, Recommended, Advanced) plus fine-grained rule control<\/li>\n<li>DNS\/CDN management and traffic analytics<\/li>\n<li>Extended hardening beyond the essentials<\/li>\n<\/ul>\n\n<p><strong>Legal<\/strong><\/p>\n\n<p>By using PhantomGuard you agree to our <a href=\"https:\/\/phantomguard.io\/terms\">Terms of Service<\/a> and <a href=\"https:\/\/phantomguard.io\/privacy\">Privacy Policy<\/a>.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Upload the plugin folder to <code>\/wp-content\/plugins\/<\/code>, or install <strong>PhantomGuard<\/strong> from the WordPress.org plugin directory.<\/li>\n<li>Activate the plugin through the <strong>Plugins<\/strong> screen in WordPress.<\/li>\n<li>Open <strong>PhantomGuard<\/strong> in the admin menu to configure hardening and explore the dashboard.<\/li>\n<\/ol>\n\n<p>No extra configuration file is required\u2014everything is managed in the plugin screens. Add your Pro license under Settings to unlock the full suite.<\/p>\n\n<!--section=faq-->\n<dl>\n<dt id=\"does%20the%20free%20version%20need%20a%20license%3F\"><h3>Does the free version need a license?<\/h3><\/dt>\n<dd><p>No. Hardening and the rules listed above work without a license. A PhantomGuard license is only required for Pro features such as malware scanning and advanced tools.<\/p><\/dd>\n<dt id=\"where%20do%20i%20change%20security%20rules%3F\"><h3>Where do I change security rules?<\/h3><\/dt>\n<dd><p>Go to <strong>WordPress Admin \u2192 PhantomGuard<\/strong> and use <strong>Security Hardening<\/strong> (and other tabs as labeled). Presets and individual rules are explained in the interface.<\/p><\/dd>\n<dt id=\"what%20about%20malware%20scanning%20and%20pro%20features%3F\"><h3>What about malware scanning and Pro features?<\/h3><\/dt>\n<dd><p>Those require <strong>PhantomGuard Pro<\/strong> and a valid license. The free plugin still shows where those features live so you can upgrade when you want full protection.<\/p><\/dd>\n<dt id=\"does%20phantomguard%20replace%20my%20security%20plugin%3F\"><h3>Does PhantomGuard replace my security plugin?<\/h3><\/dt>\n<dd><p>PhantomGuard focuses on <strong>hardening and logging<\/strong> in the free tier. Pro adds scanning and related tools. You can use it alongside other plugins if their features don\u2019t overlap in a conflicting way.<\/p><\/dd>\n<dt id=\"does%20phantomguard%20connect%20to%20external%20services%3F\"><h3>Does PhantomGuard connect to external services?<\/h3><\/dt>\n<dd><p>Yes. PhantomGuard loads <strong>Google Fonts<\/strong> (Mulish) for the admin UI. Loading fonts may involve a request to Google; see their terms and privacy policy linked below.<\/p>\n\n<p><strong>PhantomGuard Pro<\/strong> may connect to additional services when you use a license (scanning, 2FA QR, license checks, CDN\/DNS, etc.). Details:<\/p>\n\n<p><strong>WPVulnerability API (www.wpvulnerability.net)<\/strong>\n* <strong>What it does:<\/strong> Supplies vulnerability metadata used to flag plugins that may need updates on the dashboard.\n* <strong>Data sent:<\/strong> For each installed plugin, the plugin slug is requested in the URL path (no WordPress content or credentials).\n* <strong>When:<\/strong> When you open the PhantomGuard dashboard (or when the dashboard requests a refresh of this data).\n* <strong>Terms:<\/strong> See the service operator\u2019s site for current terms.\n* <strong>Privacy:<\/strong> See the service operator\u2019s site for their privacy policy.<\/p>\n\n<p><strong>Google Fonts (fonts.googleapis.com)<\/strong>\n* <strong>What it does:<\/strong> Loads the Mulish font for the plugin\u2019s admin screens.\n* <strong>Data sent:<\/strong> No site content\u2014only font requests (Google may log IP per their policy).\n* <strong>When:<\/strong> While using PhantomGuard in the WordPress admin.\n* <strong>Terms:<\/strong> https:\/\/developers.google.com\/fonts\/faq\n* <strong>Privacy:<\/strong> https:\/\/policies.google.com\/privacy<\/p>\n\n<p><strong>BitNinja API (api.bitninja.io) \u2014 Pro only<\/strong>\n* <strong>What it does:<\/strong> Malware scanning, quarantine, license validation, and related Pro features.\n* <strong>Data sent:<\/strong> May include file hashes, file content for deep scans, license key, site domain, and server IP as needed for the feature you use.\n* <strong>When:<\/strong> While using Pro features that rely on the API.\n* <strong>Terms:<\/strong> https:\/\/bitninja.com\/terms-and-conditions\/\n* <strong>Privacy:<\/strong> https:\/\/bitninja.com\/privacy-policy\/<\/p>\n\n<p><strong>GoQR API (api.qrserver.com) \u2014 Pro only<\/strong>\n* <strong>What it does:<\/strong> Generates QR codes for two-factor authentication setup.\n* <strong>Data sent:<\/strong> OTP Auth URI in the request URL only (no separate account with GoQR required for basic use).\n* <strong>When:<\/strong> Enabling 2FA in Pro hardening options.\n* <strong>Terms:<\/strong> https:\/\/goqr.me\/legal\/tos-api.html\n* <strong>Privacy:<\/strong> https:\/\/goqr.me\/privacy-safety-security\/<\/p>\n\n<p><strong>IPify (api.ipify.org) \u2014 Pro only<\/strong>\n* <strong>What it does:<\/strong> Helps determine the server\u2019s public IP for license validation.\n* <strong>Data sent:<\/strong> Minimal request; response is your public IP.\n* <strong>When:<\/strong> License validation in Pro.\n* <strong>Terms:<\/strong> https:\/\/geo.ipify.org\/terms-of-service\n* <strong>Privacy:<\/strong> https:\/\/geo.ipify.org\/privacy-policy\/<\/p>\n\n<p><strong>WordPress.org (api.wordpress.org, downloads.wordpress.org) \u2014 Pro only<\/strong>\n* <strong>What it does:<\/strong> Core\/plugin checksum checks during scanning workflows.\n* <strong>Data sent:<\/strong> WordPress version and plugin slug as needed for the check.\n* <strong>When:<\/strong> During relevant Pro scan steps.\n* <strong>Terms:<\/strong> https:\/\/wordpress.com\/tos\/\n* <strong>Privacy:<\/strong> https:\/\/wordpress.org\/about\/privacy\/<\/p><\/dd>\n<dt id=\"do%20i%20consent%20to%20those%20services%20by%20using%20the%20plugin%3F\"><h3>Do I consent to those services by using the plugin?<\/h3><\/dt>\n<dd><p>The dashboard plugin check uses WPVulnerability as described above. Using a PhantomGuard Pro license and Pro features means those additional services may process data as described above. Core free hardening does not require a license.<\/p><\/dd>\n<dt id=\"where%20can%20i%20find%20the%20source%20code%3F\"><h3>Where can I find the source code?<\/h3><\/dt>\n<dd><p>The admin area is built with <strong>React<\/strong> and <strong>webpack<\/strong>. The files shipped in this plugin (<code>assets\/js\/*.js<\/code>, <code>assets\/css\/*.css<\/code>) are minified for performance.<\/p>\n\n<p><strong>Full source code<\/strong> (readable and forkable) is here:\nhttps:\/\/github.com\/bitninjaio\/PhantomGuardFree<\/p>\n\n<p><strong>Build from source (developers)<\/strong><\/p>\n\n<ol>\n<li>Clone the repository and <code>cd<\/code> into the plugin directory.<\/li>\n<li>Run <code>npm install<\/code><\/li>\n<li>Run <code>npm run build<\/code> for production assets, or <code>npm run build:dev<\/code> \/ <code>npm run dev<\/code> for development builds.<\/li>\n<\/ol>\n\n<p>See <strong>README.md<\/strong> in the repository for more detail.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.1<\/h4>\n\n<ul>\n<li>Dashboard: plugin vulnerability check (WPVulnerability API) with update links via WordPress core update flow.<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial release of PhantomGuard on WordPress.org.<\/li>\n<\/ul>","raw_excerpt":"WordPress security suite: malware scanning, hardening, CDN\/DNS, Under Attack Mode, and a modern React admin UI.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/sna.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/285341","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sna.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/sna.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/sna.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=285341"}],"author":[{"embeddable":true,"href":"https:\/\/sna.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/phantomguard"}],"wp:attachment":[{"href":"https:\/\/sna.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=285341"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/sna.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=285341"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/sna.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=285341"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/sna.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=285341"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/sna.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=285341"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/sna.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=285341"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}