No load on your server
The scans run on Backvera's servers, so your host does no extra work and your pages load as fast as before.
Security scanning
Security scanning for WordPress, run against your backups.
Backvera scans the copy of your site that is already in the Backvera Cloud. The scans run on our servers, so your site does no extra work. A security analyst confirms each threat before it appears on your dashboard.
- Files compared with official WordPress releases
- Malware rules, kept current
- Database and admin account checks
- Threats confirmed by an analyst
Security plans include your backups and security scanning, from $25 a year per site. Each has a 14-day trial, and no card is required.
Outside your site
Why we scan outside your site.
Most security plugins scan from inside the site they protect. They share its server, stop at its time limits, and run next to the malware they are looking for. Backvera scans the copy of your site in the Backvera Cloud instead.
No host time limits
A plugin has to finish its scan inside the PHP time and memory limits your host sets. Backvera reads your backup instead, so those limits don't apply.
Out of the malware's reach
No part of the scan runs on your site, so malware on the site can't hide files from it or switch it off.
What each scan checks.
Each scan reads one backup of your site, including its database.
Checked against official releases
WordPress core and every plugin and theme from WordPress.org are compared, file by file, with the release you run.
- Changed files
- Code that belongs to no release
- Plugin releases found to ship with a backdoor
Malware rules, kept current
Your files are matched against rules for known kinds of malicious code. We follow live injection campaigns across the web and write new rules from what we find.
- Backdoors
- Web shells
- Spam injections
- Malicious redirects
The database, too
Some attacks change the database and leave the files alone, so Backvera checks the database in your backup as well.
- New administrator accounts
- Roles given takeover rights
- Sign-ups that create admins
- A site address pointed at another domain
- Suspicious scheduled tasks
- Scripts hidden in posts or settings
Analyst review
A person confirms each threat.
Automated rules raise false alarms, so a person checks first. A threat appears on your dashboard only after a Backvera security analyst has confirmed it.
-
01
Automated checks flag a file or database entry
The release comparison, the malware rules and the database checks run on Backvera's servers.
-
02
A Backvera security analyst reviews it
The analyst looks at the flagged code and decides whether it is malicious. Anything found harmless stays off your dashboard.
-
03
Confirmed threats appear on your dashboard
They show in your Sites list, on the site's Security tab and in its backup history.
See where the threat is and when it first appeared.
Once an analyst confirms a threat, your dashboard shows it in three places. You can then restore from a backup taken before it appeared.
-
Marked in your Sites list
The site is marked in your Sites list, so you can tell which of your sites needs attention.
-
Shown on its Security tab
The site's Security tab shows the file or database entry, and the first backup that contained it.
-
Marked in backup history
Your backup history marks which backups were checked and which ones contain the threat.
-
Restore from before it appeared
Restore that file, or the whole site, from a backup taken before the threat appeared.
Included in the Security plans.
Each Security plan includes everything in the matching backup plan, plus security scanning. Storage, retention and restores stay the same.
Security Starter
Everything in Starter, plus security scanning.
$25
/year
$2.08 / month, billed yearly
Daily backups · 2 GB · 60-day retention
Try Security Starter
No credit card required
Security Business
Everything in Business, plus security scanning.
$59
/year
$4.92 / month, billed yearly
Hourly backups · 10 GB · 90-day retention
Try Security Business
No credit card required
Security Scale
Everything in Scale, plus security scanning.
$89
/year
$7.42 / month, billed yearly
Realtime backups · 50 GB · 1-year retention
Try Security Scale
No credit card required
Free and the backup-only plans don't include security scanning.
Compare every planFAQ
Does scanning slow down my site?
No. The scans run on Backvera's servers against the backups already in the Backvera Cloud, so your site does no extra work for them.
Which plans include security scanning?
Security Starter, Security Business and Security Scale. Each one includes everything in the matching backup plan, so storage, retention and restores stay the same. Free and the backup-only plans don't include scanning.
What happens when a threat is found?
Once a Backvera security analyst confirms it, the site is marked in your Sites list and its Security tab shows the file or database entry and the first backup that contained it. From there you can restore that file, or the whole site, from a backup taken before it appeared.
Does Backvera remove malware for me?
No. Backvera shows you the file or database entry and the first backup that contained it. You can remove it yourself, or restore that file, or the whole site, from a backup taken before it appeared.
What does "No confirmed threats" mean?
It means no threat has been confirmed in the latest backup Backvera checked. It doesn't promise that the site is free of malware. New kinds of attack keep appearing, and we write new rules as we find them.
How does Backvera protect my backups?
Backups are encrypted before they are stored, every request between Backvera and your site is signed and expires within seconds, and no decryption keys are kept on your host. How we protect your backups covers encryption, data handling and the controls your workspace has.
Try a Security plan free for 14 days
No credit card required. Every Security plan includes its backup plan in full.