A powerful standalone malware scanner that works across all platforms — WordPress, Joomla, Drupal, Magento, vBulletin, and any custom PHP website. No sign-up form and no advanced IT knowledge required.
This version of Website Antivirus works across all platforms — WordPress, Drupal, Joomla 1.0 and above, Magento, vBulletin, PrestaShop, OpenCart, and any custom-built PHP website. It supports Apache, NGINX, and Windows web servers, making it one of the most versatile website malware scanners available. No sign-up form or advanced IT knowledge is required: the scanner registers your website with your email address.
Installation takes just one click. Download the scanner, upload it to your website via FTP or your hosting panel's File Manager, open it in your browser and press "Install the agent", then scan the entire website. Our proprietary heuristic scanning engine will detect known and unknown malware, backdoors, webshells, injected JavaScript, obfuscated malicious code, and other threats that standard scanners miss.
The standalone antivirus is a single PHP file: no database and no complex setup. It installs our agent, sends the code of your website to SiteGuarding for analysis and shows the report within minutes. It needs PHP 5.6 to 8.5 with cURL and outgoing HTTPS connections. Perfect for emergency security checks and quick malware detection on any web server.
This standalone tool is ideal for website owners, developers, and system administrators who need to perform immediate security scans without installing a full CMS extension. It's also an excellent first step for websites that suspect they may be compromised — providing a fast, reliable assessment of your server's file integrity and overall security posture.
Follow these six simple steps to scan your website for malware, backdoors, and security vulnerabilities. Installing the agent takes a few seconds, and the scan takes 2 to 10 minutes.
Download the scanner: click here to download. It is a single PHP file, antivirus_scanner.php, for PHP 5.6 to 8.5 with the cURL extension (almost every hosting has it).
readme.txt instruction.
Use any FTP client you prefer (e.g., FileZilla, WinSCP, Cyberduck) and upload the file antivirus_scanner.php into the root folder of your website, the folder with index.php. On most servers, this is the /public_html folder.
public_html and upload the file antivirus_scanner.php with the Upload button.
Open your browser (Chrome, Firefox, Safari, or any other) and type the following address:
https://www.YourWebsite.com/antivirus_scanner.php
Replace www.YourWebsite.com with your website address. Then set a password for the scanner, or press "Skip".
Enter your email address and press "Install the agent". We register your website on siteguarding.com and install our antivirus agent into the folder webanalyze/ of your website. It takes a few seconds, and the scan reports are sent to this email address.
Choose a quick or a deep scan and press "Start the scan". The quick scan checks every PHP file and every other server script; the deep scan also reads images, templates and other files to find PHP code hidden inside them. Your files are analyzed on SiteGuarding servers, and the scan takes 2 to 10 minutes.
When the analysis is ready, press "Open the report": the report opens on siteguarding.com, and a copy is sent to your email address. Press "Check the blacklists" to check your website and its server against 100+ blacklists.
Press "Remove the scanner" when you are done: a page that can scan and change files should not stay on a live website. It deletes the scanner, its settings, the installer and the support tool. Tick the box in that form if you also want the antivirus agent to be removed.
"The folder webanalyze/ is not writable": give that folder in the website root the permission to write (0755, and 0777 on some servers), then reload the page.
The page shows a server error: open the "Server check" link at the bottom of the scanner. It shows the PHP version, the extensions, the permissions and whether your server can reach siteguarding.com.
Your hosting blocks outgoing connections: ask your hosting provider to allow HTTPS to www.siteguarding.com, or contact our support.
A second scan on the same day shows the same report: the free plan allows one scan a day for each website, so a second scan on the same day shows the report of that day. A new scan is possible tomorrow.
You lost the password: delete webanalyze/sg_scanner_state.php on the server, upload the scanner again and set a new password.
The scanner says it is no longer here: it was used without a password and removed itself after 3 hours. Upload antivirus_scanner.php again.
Our standalone antivirus combines the power of a professional-grade security scanner with the simplicity of a one-click installation process.
Works on every CMS and platform — WordPress, Joomla, Drupal, Magento, vBulletin, PrestaShop, OpenCart, and any custom PHP site. Supports Apache, NGINX, and Windows servers.
No sign-up form and no complex configuration. Upload a single PHP file, open it in your browser, install the agent with one click and start scanning.
Our proprietary engine goes beyond signature-based scanning — detecting unknown malware, zero-day threats, heavily obfuscated backdoors, and suspicious code patterns that standard tools miss entirely.
Our scanning engine analyzes every file on your server to identify a wide range of security threats and malicious code patterns.
Detects known malware signatures, trojans, and virus code injected into PHP, JavaScript, HTML, and system files on your server.
Identifies PHP backdoors, webshell scripts, and hidden access points that attackers use to maintain persistent unauthorized access to your server.
Detects heavily obfuscated and encoded malicious scripts designed to evade standard security scanners — using pattern analysis and code behavior evaluation.
Finds suspicious files and code injected into the files of your website. To get an alert about every change of your files, add our file change monitoring.
Common questions about the standalone Website Antivirus, its installation, and how it compares to our full security packages.
Yes. The scanner, the agent installation, the scan, the report and the blacklist check are free, with no payment and no card. The free plan allows one scan a day for each website. For ongoing protection and monitoring, consider our full Website Security packages.
No. If you can upload a file via FTP or your hosting panel's File Manager, you can install and run the antivirus. The whole process is six simple steps: download, upload, open in your browser, install the agent, scan, and remove the scanner. No command line access or programming skills needed.
The antivirus works on any web server that runs PHP 5.6 to 8.5 with cURL: Apache, NGINX, LiteSpeed and Windows IIS. It's compatible with shared hosting, VPS, and dedicated servers. Your hosting must allow outgoing HTTPS connections to www.siteguarding.com.
The standalone version is platform-independent and doesn't integrate into your CMS admin panel. It's ideal for quick one-time scans and emergency checks. Our CMS-specific antivirus extensions (for WordPress, Joomla, Magento, etc.) integrate directly into your admin panel, providing continuous monitoring, automatic updates, and a dashboard for ongoing security management.
Yes. Press "Remove the scanner" when you are done: it deletes the scanner, its settings, the installer and the support tool, and the antivirus agent too if you tick the box. A scanner used without a password removes itself 3 hours after it was uploaded. For continuous, automated security monitoring, consider upgrading to our full Website Security package which includes 24/7 scanning, file change monitoring, malware removal, and expert incident response.
If the scan detects malware on your website, we strongly recommend contacting our security team immediately. Our experts can perform thorough malware removal, identify the attack vector, clean all infected files, and harden your website against future attacks. You can reach us through our Contact page or sign up for our Website Security package.
Download the standalone Website Antivirus, upload it to your server, and get a comprehensive security report in minutes. No sign-up form required.
