Watchdog Security Lite — Powered by Lumiverse Nexus

WordPress security that watches more than attacks.

Watchdog Security Lite does the work you expect — WordPress hardening, exploit blocking, malware scanning, login protection and WooCommerce-aware defense — and then keeps going.

It watches file changes and persistence points, shows outbound connections, groups related activity into Attack Stories, gives you administrator-session visibility and puts trusted recovery tools in one place.

The idea is simple: strong protection, useful evidence and sensible next steps without turning security into a wall of fear.

Powered by Lumiverse Nexus.

Why Watchdog feels different

Many security plugins can tell you that something was blocked. Watchdog is designed to help you see the bigger picture too:

• What changed? Live Watch keeps recent file changes visible instead of reducing everything to a number.
• Could access survive after the obvious problem is gone? Persistence Watch looks at places unwanted access can remain.
• What is WordPress connecting to? Outbound Watch shows external destinations and the plugin, theme or WordPress component behind them.
• Are separate events part of the same activity? Attack Stories turns related events into a readable sequence.
• What should I do next? Recovery Center brings the safest investigation and recovery actions into one place.
• Is my protection actually configured? Protection Coverage shows six clear protection areas without turning security into a maze of switches.

Watchdog Lite is useful on its own. It is not a dashboard built only to advertise an upgrade.

Security without alarm fatigue

Not every changed file is malware. Not every unusual event is an emergency.

Watchdog is built to record broadly but escalate carefully. Routine changes and lower-confidence findings can remain available for review, while stronger evidence can become an actionable alert.

Trusted-source checks, context-aware scanning and grouped notifications help keep the signal useful without hiding the evidence.

Start strong in about a minute

Fresh installations open a 60-Second Setup Wizard.

It detects WooCommerce, applies a conservative local protection set, offers safe WordPress hardening and lets you choose notification preferences without forcing aggressive settings.

You can reopen the wizard at any time.

Hardening without the guesswork

The WordPress Hardening Center brings common protection controls into one clear place.

Its recommended safe set can help with:

• user enumeration;
• revealing login errors;
• unnecessary pingback and XML-RPC exposure;
• WordPress head information;
• conservative browser security headers;
• common configuration weaknesses that are safe to tighten on most sites.

More compatibility-sensitive options stay under your control instead of being silently enabled.

The Watchdog Header Grade gives you a simple view of the security headers managed by Watchdog and shows where there is room to improve.

Stop obvious exploit traffic early

Exploit Shield blocks a compact set of high-confidence hostile request patterns, including common injection attempts, dangerous PHP stream abuse, executable upload attempts and genuine path traversal.

Traffic Shield adds local abuse controls for repeated probing, dynamic-request pressure, selected XML-RPC abuse and obvious scanner behavior.

Probe Trap watches for automated requests to sensitive resources such as environment files, Git metadata, configuration backups and common web-shell locations.

The goal is simple: block strong signals without treating normal WordPress traffic as an attack.

Know when your site changes

Watchdog combines several layers instead of relying on a single malware scan:

• Malware Scanner checks executable and security-relevant files locally.
• Live Watch monitors up to 10,000 security-relevant files and keeps recent added, modified and deleted paths available for review.
• Official File Integrity checks WordPress core and supported WordPress.org components against trusted sources.
• Vulnerability Watch highlights known vulnerabilities in installed WordPress components.
• Database Threat Scan looks for high-confidence malicious code, hidden redirects and persistence indicators in selected database areas.
• Safe Core Repair can restore verified WordPress core files after creating a protected restore point.

Watchdog separates something worth recording from something worth alarming you about. Routine and low-confidence activity can remain visible in the dashboard without becoming another urgent email.

Watch for persistence, not only malware

Removing a suspicious file is not always the end of the story. Persistence Watch gives you a second view of places where access or unwanted behavior can remain.

It watches for meaningful changes involving:

• administrator accounts;
• MU-plugins;
• PHP files placed directly in wp-content;
• suspicious scheduled tasks;
• administrator application-password counts.

The first pass establishes a baseline. Later changes are shown for review, and legitimate WordPress behavior is not automatically labelled as malware.

A built-in WP-Cron inventory also makes scheduled tasks easier to inspect without digging through the database or command line.

See what your WordPress site is talking to

Plugins, themes and WordPress itself regularly connect to external services. Outbound Watch makes those connections visible.

You can see destination hosts, the component making the request, request methods and bounded activity counts. This makes unexpected external communication much easier to spot without blocking normal APIs, webhooks or integrations.

Outbound Watch is monitor-first in Lite and deliberately avoids storing request bodies, cookies, credentials or response bodies.

Turn activity into something you can understand

Security logs are useful, but they are not always easy to read.

Attack Stories groups related protection events from the same source into a clearer sequence, while Watchdog Live Pulse gives you a visual view of recent traffic, bots and protection activity.

Both are built from real Watchdog events. They do not invent attacks to make the dashboard look busy.

WooCommerce-aware protection

WooCommerce traffic is different from a normal brochure site. Product browsing, cart actions, checkout requests, AJAX calls and crawlers should not all be treated the same way.

When WooCommerce is active, Watchdog adds store-aware protection and WooCommerce Bot Cart Guard, which can neutralize supported cart and wishlist mutations from crawler-claimed or obvious automation while keeping public product pages available.

Recovery without panic buttons

Recovery Center brings the safest Lite response tools together:

• run a fresh security scan;
• verify official files;
• review administrator sessions;
• inspect persistence changes;
• review outbound activity;
• use Safe Core Repair when verified WordPress core files need restoring.

Watchdog deliberately favors verification and reversible actions over destructive one-click responses that could turn a security concern into an outage.

Administrator session control

Administrator Sessions uses WordPress core session tokens to show active administrator sessions and lets an administrator revoke stale access deliberately.

There is no custom browser fingerprint system to manage and no fragile IP-bound session requirement.

Optional Nexus Threat Network intelligence

Nexus Threat Network is optional and disabled by default.

If you choose to enable Threat Intelligence, Watchdog can receive shared security intelligence and contribute selected verified security signals. Local protection continues to work when Threat Network participation is disabled.

Learn more at Nexus Threat Network.

Six protection areas. One clear view.

The dashboard brings Watchdog together as six protection areas:

• Request Defense — exploit blocking, traffic controls and probe detection.
• Identity Defense — login protection, administrator sessions and WordPress hardening.
• Malware & Integrity — malware scanning, Live Watch, vulnerability checks and trusted-file verification.
• Persistence Watch — visibility into administrator, scheduled-task and persistent-code changes.
• Commerce Protection — WooCommerce-aware protection when a store is detected.
• Security Intelligence — optional shared Nexus intelligence.

The Protection Coverage score shows which applicable areas are active and where a safe improvement is available. It is a configuration guide, not a promise that any website can be made impossible to compromise.

There is a much deeper platform behind Watchdog

Watchdog Security Lite is powered by the same product family as Lumiverse Nexus PRO.

For business-critical WordPress and WooCommerce sites, Nexus PRO adds deeper layers such as Early WAF, Mirage and Phantom deception, Adaptive Defense, Security Twin, Breach Command, REDLINE, Black Box evidence, Incident Replay and Nexus Fleet for agency operations.

Watchdog Lite gives you a strong local security foundation. Nexus PRO is where that foundation expands into a broader security intelligence and incident-response platform.

Learn more at Lumiverse Nexus.

Privacy and Online Services

Watchdog’s core protection works on your WordPress site. Routine malware scanning, Database Threat scanning, Live Watch and integrity checks are performed locally, and your website files or database content are not uploaded for routine scanning.

To keep security intelligence current, Watchdog may connect to lumiversenexus.com for malware signatures and vulnerability intelligence.

Nexus Threat Network is optional and disabled by default. If you choose to enable it, the site can receive shared security intelligence and contribute selected verified security signals. The participating site URL/domain is associated with its authenticated contributor record, and shared signals may include a public attacking IP address plus limited security-event metadata needed for the service.

Threat Network participation does not send passwords, cookies, form contents, WooCommerce customer/order data or page content.

Learn more at Nexus Threat Network. Privacy information is available in the Lumiverse Nexus Privacy Notice and Terms of Service.