前言介紹
- 這款 WordPress 外掛「Guardian Gaze Security – AI Based Malware Scanner, Firewall and Login Protection」是 2025-12-05 上架。
- 目前有 10 個安裝啟用數。
- 上一次更新是 2026-02-24，距離現在已有 2 天。
- 外掛最低要求 WordPress 4.7 以上版本才可以安裝。
- 外掛要求網站主機運作至少需要 PHP 版本 7.0 以上。
- 有 1 人給過評分。
- 還沒有人在論壇上發問，可能目前使用數不多，還沒有什麼大問題。
外掛協作開發者
外掛標籤
malware | security | ip-management | login protection | AI based malware scanner |
內容簡介
總結：Guardian Gaze 是由 RedSec Labs 開發的功能強大的 WordPress 安全外掛，提供即時保護，防範常見和高級威脅，包括惡意軟體注入、暴力登入嘗試和零日漏洞利用。此外，它具備多項功能，如儀表板、惡意軟體掃描、IP 管理、登入安全、強化和設定等。Guardian Gaze 透過安全智能 API 整合，確保偵測模式一直更新。
#### 問題與答案：
1. 外掛 Guardian Gaze 的功能包括哪些？
- 儀表板
- 惡意軟體掃描
- IP 管理
- 登入安全
- 強化
- 設定
2. Guardian Gaze API (wp-api.guardiangaze.com) 主要用途是什麼？
- 用於授權管理、惡意軟體模式更新和郵件報告投遞。
3. 在外部服務連接中，Guardian Gaze API (wp-api.guardiangaze.com) 會傳送哪些數據？
- 管理員電子郵件地址
- 網站 URL
- API/授權金鑰
- 外掛版本
- 惡意軟體定義版本
- IP 地址（用於封鎖惡意 IP）
原文外掛簡介
Safeguard your WordPress website from evolving malware, brute force attacks, hidden backdoors, and zero-day vulnerabilities.
Guardian Gaze Security – Malware Scanner, AI Backdoor Detection & Login Protection
Guardian Gaze is a research-driven WordPress security plugin designed to help website owners, developers, and agencies protect their sites from malware infections, AI-detected backdoors, brute-force attacks, unauthorized file changes, and emerging WordPress vulnerabilities.
Built by RedSecLabs, a cybersecurity firm specializing in threat research and detection engineering, Guardian Gaze focuses on:
• Continuous WordPress security monitoring
• AI/LLM-assisted malware and backdoor detection
• Login protection and brute force prevention
• IP management and traffic filtering
• WordPress security hardening
• Clear visibility into your site’s security posture
Detection logic is supported by ongoing threat intelligence updates, ensuring protection adapts to new and evolving attack techniques.
Guardian Gaze delivers practical website security for WordPress without aggressive lockouts, excessive alerts, or heavy resource usage.
Key Features
WordPress Malware Detection & AI-Based Backdoor Scan
Guardian Gaze includes a built-in WordPress malware scanner that analyzes WordPress core files, plugins, and themes for suspicious or unauthorized changes.
• Detects modified or infected files
• Identifies malware injections, malicious code, and hidden backdoors
• AI/LLM-assisted backdoor scanning to detect suspicious code patterns
• Highlights changes in WordPress core, plugin, or theme integrity
• Designed for continuous monitoring — not one-time scans
• Helps users review findings before taking action
This approach combines traditional detection techniques with AI-assisted analysis for improved backdoor detection and malware discovery in WordPress.
Login Security & Brute Force Protection
Reduce WordPress login abuse and authentication attacks.
• Limit repeated failed login attempts
• Reduce brute-force and credential-stuffing attacks
• Identify unusual login behavior or suspicious activity
• Protect wp-login.php and XML-RPC endpoints
These controls improve WordPress login security without blocking legitimate users.
IP Management & Traffic Filtering
Manage and reduce unwanted or abusive traffic.
• Block or allow IP addresses manually
• Automatically flag suspicious IP behavior
• Reduce bot noise, vulnerability scanners, and automated attacks
Ideal for sites experiencing repeated probing or targeted WordPress attacks.
WordPress Security Hardening
Improve your website’s default security posture with guided hardening options.
• Strengthen WordPress configuration
• Reduce exposure to known weak points
• Follow recommended WordPress security best practices
• Clear explanations before applying changes
Designed to enhance baseline WordPress website security.
Central Security Dashboard
View real-time WordPress security events and activity:
• Latest malware scan results
• Login attempts and security logs
• Blocked and flagged IP addresses
• Alerts, notifications, and system status
Built for both beginners and developers managing multiple WordPress sites.
Scheduled Scanning
Automate malware scans and stay ahead of threats.
• Weekly, daily, or hourly scan schedules
• Configure scan recipients and frequency
• Receive scan results via email
• Monitor your site’s security regularly
integrity
File Integrity Monitoring
Monitor and alert on unauthorized file changes.
• Detects modified or infected files
• Highlights changes in WordPress core, plugin, or theme integrity
• Helps users understand findings before taking action
Continuous Threat Intelligence Updates
Guardian Gaze receives updated detection logic, indicators, and malware patterns through the Guardian Gaze Security Intelligence API.
These updates help:
• Improve malware detection accuracy
• Adapt to new WordPress security threats
• Maintain performance and stability
Privacy & Data Use
Guardian Gaze uses external services only for security functionality such as license validation, threat intelligence updates, optional reporting, and IP geolocation (if enabled).
• No unnecessary data collection
• No passwords or sensitive content transmitted
• Secure WordPress-native API communication
• Optional features can be disabled
• Only security metadata required for functionality is processed
Guardian Gaze follows a privacy-first design.
External Services Used
Guardian Gaze connects to the following services to provide security features and functionality:
1. Guardian Gaze API – wp-api.guardiangaze.com
Used for license validation, malware pattern updates, threat intelligence updates, and optional email reporting.
Data Sent:
• Admin email
• Site URL
• API key
• Plugin version and definitions version
• IP addresses (for global blocking features)
• Scan report data (if email reporting is enabled)
Terms of Service: https://www.guardiangaze.com/terms-of-service/
Privacy Policy: https://www.guardiangaze.com/privacy-policy/
2. Guardian Gaze API – www.guardiangaze.com
Used for plugin registration.
Data Sent:
• Site URL
Terms of Service: https://www.guardiangaze.com/terms-of-service/
Privacy Policy: https://www.guardiangaze.com/privacy-policy/
3. WordPress.org API – api.wordpress.org
Used for WordPress core file integrity checks and version validation.
Data Sent:
• WordPress version
• Locale / language
Terms of Service: https://wordpress.org/about/privacy/
Privacy Policy: https://wordpress.org/about/privacy/
4. IP-API.com – ip-api.com
Used for IP address geolocation.
Data Sent:
• Visitor IP address
(Free tier used; responses cached locally to reduce external requests.)
Terms of Service: https://ip-api.com/docs/legal
Privacy Policy: https://ip-api.com/docs/legal
5. IPAPI.co – ipapi.co
Alternative IP geolocation provider used for dashboard analytics.
Data Sent:
• Visitor IP address
Terms of Service: https://ipapi.co/terms/
Privacy Policy: https://ipapi.co/privacy/
Important Notes
• All API calls use WordPress wp_remote_get() and wp_remote_post()
• Data is transferred over HTTPS whenever available
• No user passwords or sensitive content is collected or transmitted
• Geolocation lookups are cached to limit external requests
About RedSecLabs
RedSecLabs is a cybersecurity company focused on threat research, detection engineering, and building defensive tools for real-world scenarios.
Guardian Gaze reflects this philosophy by offering a transparent, research-backed WordPress security plugin with AI-assisted backdoor detection, built for long-term reliability and practical protection.
各版本下載點
- 方法一：點下方版本號的連結下載 ZIP 檔案後，登入網站後台左側選單「外掛」的「安裝外掛」，然後選擇上方的「上傳外掛」，把下載回去的 ZIP 外掛打包檔案上傳上去安裝與啟用。
- 方法二：透過「安裝外掛」的畫面右方搜尋功能，搜尋外掛名稱「Guardian Gaze Security – AI Based Malware Scanner, Firewall and Login Protection」來進行安裝。
（建議使用方法二，確保安裝的版本符合當前運作的 WordPress 環境。
1.3.0 | 1.4.0 | 2.0.0 | 2.0.1 | 2.0.2 | 2.0.3 | 2.0.4 | 2.0.5 | 2.0.6 | 2.0.7 | 2.1.0 | 2.1.1 | 2.1.2 | 2.1.3 | 2.2.0 | 2.2.1 | trunk |
延伸相關外掛（你可能也想知道）
暫無相關外掛推薦。