Security Suite checks your Joomla website for malware and keeps the most common attacks out. Everything is in one place in the Joomla administrator: a protection score, the file and database scans, blacklists, login protection and alerts.

What is new in version 4

• Rebuilt for Joomla 4.2 or newer, Joomla 5 and Joomla 6, with a new administrator interface.
• Dashboard with a protection score and the status of every measure.
• Database scan of articles and custom HTML modules.
• Blacklist check with Google, McAfee, Norton and more than 30 other services.
• Login protection with Google reCAPTCHA, login alerts by email and Telegram.
• Sites with version 3.0 get version 4 in the Joomla update manager. Your settings stay as they are.

Main features

• Malware scan on the SiteGuarding servers. The scanner collects the files of your website and sends them to the SiteGuarding servers, where they are checked against our malware database and heuristic rules. The report opens on SiteGuarding.com and a copy is sent by email. Infected and suspicious files are listed in the extension.
• Database scan. Articles and custom HTML modules are checked for injected external links, hidden frames, scripts and words that spam campaigns use. The database scan runs on your server; nothing leaves it.
• Blacklist check. Google Safe Browsing, McAfee SiteAdvisor, Norton Safe Web and more than 30 other services. A listing makes visitors see a warning instead of your website.
• Login protection. A Google reCAPTCHA check before the administrator login form stops automated password guessing. Two-factor authentication: Joomla's built-in multi-factor authentication.
• Login alerts. An email, and a Telegram message if you want, about every successful administrator login and about failed logins to existing accounts. Recent logins are shown on the Dashboard.
• Administrator accounts. All users of the Administrator and Super Users groups at a glance, so you can remove the ones you do not recognise.
• Security Panel. Connect the website to your SiteGuarding dashboard and see pending Joomla and extension updates.
• Firewall status. The SiteGuarding firewall comes with the SiteGuarding subscription: we install and set it up for you, and its rules are managed in your SiteGuarding dashboard. The Firewall page shows whether it is active on your website.

Free and paid

Everything listed above is free, except the SiteGuarding firewall. A SiteGuarding plan adds the firewall, 24/7 monitoring, malware removal by our team and more.

Requirements

Joomla 4.2 or newer, Joomla 5 or Joomla 6. PHP 7.2.5 or newer. One package installs the component, its system plugin and the authentication plugin for the login log. Updates come through the Joomla update system. For Joomla 3 version 2.8 stays available: https://www.siteguarding.com/files/com_jmwascanner.zip

Connection to SiteGuarding.com and other services

• siteguarding.com: the license and scan reports (the website address and its access key), registration of the website in your SiteGuarding account (the address and your email), the file scan (the scanner agent in the webanalyze folder sends the files for the check), country database updates and the Joomla update check.
• The blacklist check asks Google Safe Browsing, McAfee SiteAdvisor, Norton Safe Web and URLVoid about your domain name.
• Google reCAPTCHA is used only when you switch on login protection; Telegram only when you switch on Telegram alerts.

A small "Protected by SiteGuarding" link on the home page is available in Settings; it is off by default.