Suspicious code
Review supported web-shell, obfuscation, hidden-iframe and PHP-in-upload patterns.
Free WordPress malware scan
Stop hidden malware before it costs your business.
Protect rankings, revenue and customer trust. Scan WordPress files and selected database areas, review supported threats, and clean up to three detected items free.
- No account required for Free
- Clean up to 3 detected items
- Website files remain on your server
- WordPress 5.6+ and PHP 7.4+
Illustrative interface preview
Turbo Guard Scanner
SCAN COMPLETE
Turbo Guard ScannerReview detected items before cleanup
See the affected path, threat category and severity before deciding what to do next.
Suspicious PHP patternREVIEW
Modified WordPress core fileREVIEW
Known component vulnerabilityUPDATE
Pre-launch note: replace this illustration with an approved capture from the current plugin build.
From the Turbo Addons team100K+ downloads
4.8/5 on WordPress.orgBased on 5 Turbo Addons reviews
Turbo Guard is publicListing, code and changelog
⚠ Possible compromise
Could your WordPress site already be hacked?
A compromised site can continue looking normal while hidden changes affect search visibility, redirect visitors or create unauthorized access. Install Turbo Guard, activate it on your WordPress site, then run a scan before the damage becomes harder to contain.
Unexpected redirects or pop-upsVisitors are being sent somewhere you did not configure.
Unknown administrator accountsA privileged user appears without your approval.
Spam pages in search resultsGoogle shows unfamiliar pages or keywords under your domain.
Files keep changingSuspicious files or code return after a basic cleanup.
A hidden threat becomes a business problem
Your site can look normal while harmful changes stay out of sight.
Injected code, rogue administrator accounts, SEO spam and modified core files may remain unnoticed until search visibility, customer trust or access to the website is affected.
See how the scan worksSEO spam
Check supported files and database areas for Japanese, Chinese and Korean spam patterns.
Core-file changes
Compare supported WordPress core files with official checksum information.
Repeated attacks
Reduce exposure to supported SQL injection, XSS, traversal, brute-force and bad-bot patterns.
Choose the path that matches your situation
Start with the problem you need to solve.
Turbo Guard supports individual site owners, WordPress professionals and teams responding to a suspected infection.
Protect one or two sites
Install the Free plugin, run a scan, review the findings and add login, firewall and integrity protection without editing server files manually.
Install FreeUse the same toolkit across client sites
Apply a consistent scanning, cleanup and access-control workflow across the WordPress websites you manage.
Compare site plansReview before you remove
Locate supported malware and SEO-spam patterns, inspect affected items and create a backup before cleanup.
See the cleanup workflowFrom uncertainty to a practical next step
Scan, review and clean with a recovery path.
Turbo Guard shows the finding before asking you to take a destructive action.
Run a WordPress scan
Check supported core files, wp-content areas, uploads and selected database content with visible scan progress.
Review detected items
Inspect the affected path, threat category, severity and context before deciding whether to quarantine or delete.
Back up, clean and strengthen
Create a ZIP backup, clean supported findings, then configure firewall, login protection, 2FA, hardening and monitoring.
No security plugin can guarantee complete protection or identify every possible compromise. Keep verified backups and use qualified incident-response support when the scope or impact is unclear.
A focused WordPress security toolkit
Detect supported threats, understand the finding and take the next action.
Free covers scanning and essential protection. Pro removes cleanup limits and adds advanced visibility, guidance and access controls.
Malware and SEO-spam scanning
Check supported PHP, JavaScript and HTML files, WordPress core areas, uploads and selected database content.
Free detectionFirewall and login protection
Configure supported WAF rules, rate limiting, bot protection, brute-force lockouts and TOTP two-factor authentication.
Free protectionBackup-aware cleanup
Create a ZIP backup before deleting or quarantining identified files. Free cleanup is limited to three detected items.
Unlimited in ProVulnerability information
Review supported plugin, theme and WordPress core vulnerability information, including expanded details in Pro.
Basic Free, advanced ProTraffic visibility
Review recent human, bot, blocked and error traffic, then block a suspicious IP from the traffic view.
ProOptional security guidance
Request plain-language analysis of documented scan information. Optional AI analysis requires your own OpenAI API key.
Pro, user initiatedReady to check your WordPress site?
Install Turbo Guard Free from WordPress.org, activate it on your site, then run your first security scan.
Evidence before purchase
Review how the plugin works, not just what the page promises.
Verify the plugin, its product team and its data flow before installing it on your WordPress site.
- Official WordPress.org listing. Check the current version, compatibility, installation instructions and public support channel.
- Public source and changelog. Review releases and inspect the distributed plugin files.
- Existing WordPress product team. Turbo Addons and Turbo Guard share the same official WordPress.org author profile and overlapping named contributors. Turbo Addons reports 100K+ downloads and has a 4.8/5 rating based on 5 reviews.
- Transparent data flow. See which external services are used, what is sent and when each connection occurs.
- Real product captures. Validate scanning, threat review, backup and cleanup against the current release.
Security without unnecessary exposure
Your website files remain on your server.
Turbo Guard processes website files locally. Optional features connect to external services only for their documented purpose and according to the user's action or configuration.
Review External ServicesWhat leaves the site, and when
Data flow should be understandable before you enable a feature.
WordPress.org checksums
WordPress version and locale are used when supported core-file verification is requested. No website file upload.
Vulnerability lookup
Supported plugin or theme identifiers and versions may be used for manual or enabled scheduled vulnerability checks.
Geo-Fence
A visitor IP address is used by the configured geolocation service only when country-based controls are enabled.
Optional AI analysis
Documented, anonymised scan information is sent only when the user requests analysis and provides an OpenAI API key.
Google Search Console
Google OAuth credentials and the site URL are used only after the user connects an account and initiates related features.
Pre-launch dependency: publish a dedicated Turbo Guard privacy and external-services page, then replace the current destination above.
Pro pricing
Choose Pro by the number of sites you need to protect.
Every Pro license includes the same Pro feature set. The plan changes only the number of site activations.
Up to 2 Sites
For individual owners and small WordPress teams
$16/ year
$8 per site/year when both activations are used
Choose 2-Site ProSecure checkout powered by Freemius
Up to 10 Sites
For freelancers and agencies with a growing portfolio
$40/ year
$4 per site/year when all activations are used
Choose 10-Site ProSecure checkout powered by Freemius
Up to 100 Sites
For agencies managing larger client portfolios
$128/ year
$1.28 per site/year when all activations are used
Choose 100-Site ProSecure checkout powered by Freemius
Required before production launch: confirm the checkout amounts and publish verified renewal price, automatic-renewal, tax, cancellation, license-transfer and refund terms. Optional AI analysis requires the customer's own OpenAI API key.
Prefer to evaluate the plugin first? Install Turbo Guard Free from WordPress.org.
Free vs Pro
Use Free to scan and protect. Choose Pro for unlimited cleanup and advanced visibility.
Start with the commitment level that fits your situation, then upgrade if you need more cleanup capacity and Pro-only controls.
| Capability | Free | Pro |
|---|---|---|
| Malware and SEO-spam scanning | Included | Included |
| Firewall, login security and 2FA | Included | Included |
| Core integrity and site hardening | Included | Included |
| Malware and SEO-spam cleanup | Up to 3 items | Unlimited |
| Vulnerability information | Basic | Expanded details |
| Live Traffic Monitor | Not included | Included |
| AI Security Advisor | Not included | Included, own API key |
| Geo-Fence and trusted locations | Not included | Included |
| Scheduled vulnerability checks | Not included | Included |
Questions before installation
Know what the plugin does, and what it does not promise.
Clear expectations reduce installation and purchase risk.
Is Turbo Guard completely free?
Scanning, detection and essential protection features are available in Free. The Free version can clean up to three detected files or spam items. Pro adds unlimited cleanup and advanced monitoring, guidance and access controls.
Does Turbo Guard guarantee that my website is completely secure?
No security plugin can guarantee complete protection or identify every possible compromise. Turbo Guard helps detect supported patterns, reduce exposure to supported attack types and provide tools for reviewing and cleaning identified issues.
Will scanning slow down my website?
Scanning uses browser-driven AJAX chunks to reduce long-request timeout risk. Actual resource use depends on the website, hosting environment, file volume and configuration. Run the first scan during a suitable maintenance window if resource capacity is limited.
Does Turbo Guard upload my website files?
Website files remain on your server. Optional features use external services only for their documented purpose. Review the External Services information before enabling vulnerability lookup, Geo-Fence, AI analysis or Google Search Console features.
Does the AI Security Advisor require an API key?
Yes. Optional AI analysis requires your own OpenAI API key and is initiated by the user. Review the documented data sent before using the feature.
Is Turbo Guard made by the Turbo Addons team?
Yes. Turbo Guard and Turbo Addons use the same official WordPress.org author profile and include overlapping named contributors. Turbo Addons reports 100K+ downloads and has a 4.8/5 rating based on 5 reviews. These figures belong to Turbo Addons, not Turbo Guard.
Can Turbo Guard work beside another security plugin?
It is designed with false-positive protections for supported security plugins. Review both configurations before enabling overlapping firewall, lockout, hardening or monitoring rules.
What are the technical requirements?
The current public listing states WordPress 5.6 or newer and PHP 7.4 or newer. Confirm the latest tested versions on WordPress.org before installation.
What happens when a Pro license expires?
This answer must be replaced before production launch with the verified update, support, feature-access, renewal and grace-period policy.
Can I move a Pro activation to another site?
This answer must be replaced before production launch with the verified deactivation, transfer and activation-limit policy.
What is the refund policy?
This answer must be replaced before production launch with the approved refund period, eligibility conditions and request process.
Install Free, run your first scan and see what protection your site needs.
Install Turbo Guard from WordPress.org, review the results and upgrade only when you need unlimited cleanup or Pro-only visibility and controls.