{"id":285341,"date":"2026-04-07T05:23:00","date_gmt":"2026-04-07T05:23:00","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/phantomguard\/"},"modified":"2026-04-13T09:50:43","modified_gmt":"2026-04-13T09:50:43","slug":"phantom-guard","status":"publish","type":"plugin","link":"https:\/\/zh-sg.wordpress.org\/plugins\/phantom-guard\/","author":23458205,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"1.0.1","stable_tag":"1.0.1","tested":"6.9.4","requires":"6.5","requires_php":"7.4","requires_plugins":null,"header_name":"PhantomGuard","header_author":"PhantomGuard","header_description":"WordPress security hardening with automated rules. Protect your site with essential security measures.","assets_banners_color":"050a24","last_updated":"2026-04-13 09:50:43","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/phantomguard.io","header_author_uri":"https:\/\/phantomguard.io\/","rating":0,"author_block_rating":0,"active_installs":10,"downloads":150,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.0":{"tag":"1.0.0","author":"phantomguard","date":"2026-04-07 05:37:16"},"1.0.1":{"tag":"1.0.1","author":"phantomguard","date":"2026-04-13 09:50:43"}},"upgrade_notice":{"1.0.1":"<p>Adds the dashboard plugin vulnerability overview and WPVulnerability disclosure in the readme.<\/p>","1.0.0":"<p>First public release. Install and activate, then open PhantomGuard from the admin menu to get started.<\/p>"},"ratings":[],"assets_icons":{"icon.svg":{"filename":"icon.svg","revision":3500344,"resolution":false,"location":"assets","locale":false}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3500344,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0","1.0.1"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3500344,"resolution":"1","location":"assets","locale":"","width":2372,"height":1221},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3500344,"resolution":"2","location":"assets","locale":"","width":2366,"height":1221},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3500344,"resolution":"3","location":"assets","locale":"","width":2370,"height":1226},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3500344,"resolution":"4","location":"assets","locale":"","width":2419,"height":1232},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3500344,"resolution":"5","location":"assets","locale":"","width":2409,"height":1229},"screenshot-6.png":{"filename":"screenshot-6.png","revision":3504977,"resolution":"6","location":"assets","locale":"","width":2367,"height":1217}},"screenshots":{"1":"Dashboard overview and stats (some areas show Pro features when unlocked)","2":"Malware scanner (Pro)","3":"Security hardening rules and presets","4":"CDN \/ DNS management (Pro)","5":"Settings and license","6":"Plugin vulnerability checker and patcher"},"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[],"plugin_category":[],"plugin_contributors":[259600],"plugin_business_model":[],"class_list":["post-285341","plugin","type-plugin","status-publish","hentry","plugin_contributors-phantomguard","plugin_committers-phantomguard"],"banners":[],"icons":{"svg":"https:\/\/ps.w.org\/phantom-guard\/assets\/icon.svg?rev=3500344","icon":"https:\/\/ps.w.org\/phantom-guard\/assets\/icon.svg?rev=3500344","icon_2x":false,"generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/phantom-guard\/assets\/screenshot-1.png?rev=3500344","caption":"Dashboard overview and stats (some areas show Pro features when unlocked)"},{"src":"https:\/\/ps.w.org\/phantom-guard\/assets\/screenshot-2.png?rev=3500344","caption":"Malware scanner (Pro)"},{"src":"https:\/\/ps.w.org\/phantom-guard\/assets\/screenshot-3.png?rev=3500344","caption":"Security hardening rules and presets"},{"src":"https:\/\/ps.w.org\/phantom-guard\/assets\/screenshot-4.png?rev=3500344","caption":"CDN \/ DNS management (Pro)"},{"src":"https:\/\/ps.w.org\/phantom-guard\/assets\/screenshot-5.png?rev=3500344","caption":"Settings and license"},{"src":"https:\/\/ps.w.org\/phantom-guard\/assets\/screenshot-6.png?rev=3504977","caption":"Plugin vulnerability checker and patcher"}],"raw_content":"<!--section=description-->\n<p><strong>PhantomGuard<\/strong> helps you harden WordPress without editing code by hand. Pick a preset (Basic, Recommended, or Advanced), turn rules on or off, and review activity in the audit log\u2014all from a modern admin interface.<\/p>\n\n<p><strong>What you get in the free version<\/strong><\/p>\n\n<ul>\n<li><strong>Security presets<\/strong> \u2014 Start with Basic, Recommended, or Advanced and adjust as needed.<\/li>\n<li><strong>Core hardening rules<\/strong> \u2014 Force HTTPS for the admin area, hide the WordPress version, enable audit logging, and obscure login feedback to reduce information leaks.<\/li>\n<li><strong>Clear dashboard<\/strong> \u2014 Overview, onboarding, settings, and support in one place.<\/li>\n<li><strong>Plugin vulnerability check<\/strong> \u2014 Compares installed plugins against public advisories (WPVulnerability API) and links to WordPress updates when a fix is available.<\/li>\n<li><strong>Translations<\/strong> \u2014 Admin UI available in English, German, and Italian.<\/li>\n<\/ul>\n\n<p><strong>PhantomGuard Pro<\/strong> (optional license) adds malware scanning, extended hardening rules, DNS\/CDN management, traffic analytics, and more. You can enter a license key in the plugin when you\u2019re ready.<\/p>\n\n<p><strong>Legal<\/strong><\/p>\n\n<p>By using PhantomGuard you agree to our <a href=\"https:\/\/phantomguard.io\/terms\">Terms of Service<\/a> and <a href=\"https:\/\/phantomguard.io\/privacy\">Privacy Policy<\/a>.<\/p>\n\n<h3>Source code<\/h3>\n\n<p>The admin area is built with <strong>React<\/strong> and <strong>webpack<\/strong>. The files shipped in this plugin (<code>assets\/js\/*.js<\/code>, <code>assets\/css\/*.css<\/code>) are minified for performance.<\/p>\n\n<p><strong>Full source code<\/strong> (readable and forkable) is here:\nhttps:\/\/github.com\/bitninjaio\/PhantomGuardFree<\/p>\n\n<p><strong>Build from source (developers)<\/strong><\/p>\n\n<ol>\n<li>Clone the repository and <code>cd<\/code> into the plugin directory.<\/li>\n<li>Run <code>npm install<\/code><\/li>\n<li>Run <code>npm run build<\/code> for production assets, or <code>npm run build:dev<\/code> \/ <code>npm run dev<\/code> for development builds.<\/li>\n<\/ol>\n\n<p>See <strong>README.md<\/strong> in the repository for more detail.<\/p>\n\n<h3>External services<\/h3>\n\n<p>PhantomGuard loads <strong>Google Fonts<\/strong> (Mulish) for the admin UI. Loading fonts may involve a request to Google; see their terms and privacy policy linked below.<\/p>\n\n<p><strong>PhantomGuard Pro<\/strong> may connect to additional services when you use a license (scanning, 2FA QR, license checks, CDN\/DNS, etc.). Details:<\/p>\n\n<h4>WPVulnerability API (www.wpvulnerability.net)<\/h4>\n\n<ul>\n<li><strong>What it does:<\/strong> Supplies vulnerability metadata used to flag plugins that may need updates on the dashboard.<\/li>\n<li><strong>Data sent:<\/strong> For each installed plugin, the plugin slug is requested in the URL path (no WordPress content or credentials).<\/li>\n<li><strong>When:<\/strong> When you open the PhantomGuard dashboard (or when the dashboard requests a refresh of this data).<\/li>\n<li><strong>Terms:<\/strong> See the service operator\u2019s site for current terms.<\/li>\n<li><strong>Privacy:<\/strong> See the service operator\u2019s site for their privacy policy.<\/li>\n<\/ul>\n\n<h4>Google Fonts (fonts.googleapis.com)<\/h4>\n\n<ul>\n<li><strong>What it does:<\/strong> Loads the Mulish font for the plugin\u2019s admin screens.<\/li>\n<li><strong>Data sent:<\/strong> No site content\u2014only font requests (Google may log IP per their policy).<\/li>\n<li><strong>When:<\/strong> While using PhantomGuard in the WordPress admin.<\/li>\n<li><strong>Terms:<\/strong> https:\/\/developers.google.com\/fonts\/faq<\/li>\n<li><strong>Privacy:<\/strong> https:\/\/policies.google.com\/privacy<\/li>\n<\/ul>\n\n<h4>BitNinja API (api.bitninja.io) \u2014 Pro only<\/h4>\n\n<ul>\n<li><strong>What it does:<\/strong> Malware scanning, quarantine, license validation, and related Pro features.<\/li>\n<li><strong>Data sent:<\/strong> May include file hashes, file content for deep scans, license key, site domain, and server IP as needed for the feature you use.<\/li>\n<li><strong>When:<\/strong> While using Pro features that rely on the API.<\/li>\n<li><strong>Terms:<\/strong> https:\/\/bitninja.com\/terms-and-conditions\/<\/li>\n<li><strong>Privacy:<\/strong> https:\/\/bitninja.com\/privacy-policy\/<\/li>\n<\/ul>\n\n<h4>GoQR API (api.qrserver.com) \u2014 Pro only<\/h4>\n\n<ul>\n<li><strong>What it does:<\/strong> Generates QR codes for two-factor authentication setup.<\/li>\n<li><strong>Data sent:<\/strong> OTP Auth URI in the request URL only (no separate account with GoQR required for basic use).<\/li>\n<li><strong>When:<\/strong> Enabling 2FA in Pro hardening options.<\/li>\n<li><strong>Terms:<\/strong> https:\/\/goqr.me\/legal\/tos-api.html<\/li>\n<li><strong>Privacy:<\/strong> https:\/\/goqr.me\/privacy-safety-security\/<\/li>\n<\/ul>\n\n<h4>IPify (api.ipify.org) \u2014 Pro only<\/h4>\n\n<ul>\n<li><strong>What it does:<\/strong> Helps determine the server\u2019s public IP for license validation.<\/li>\n<li><strong>Data sent:<\/strong> Minimal request; response is your public IP.<\/li>\n<li><strong>When:<\/strong> License validation in Pro.<\/li>\n<li><strong>Terms:<\/strong> https:\/\/geo.ipify.org\/terms-of-service<\/li>\n<li><strong>Privacy:<\/strong> https:\/\/geo.ipify.org\/privacy-policy\/<\/li>\n<\/ul>\n\n<h4>WordPress.org (api.wordpress.org, downloads.wordpress.org) \u2014 Pro only<\/h4>\n\n<ul>\n<li><strong>What it does:<\/strong> Core\/plugin checksum checks during scanning workflows.<\/li>\n<li><strong>Data sent:<\/strong> WordPress version and plugin slug as needed for the check.<\/li>\n<li><strong>When:<\/strong> During relevant Pro scan steps.<\/li>\n<li><strong>Terms:<\/strong> https:\/\/wordpress.com\/tos\/<\/li>\n<li><strong>Privacy:<\/strong> https:\/\/wordpress.org\/about\/privacy\/<\/li>\n<\/ul>\n\n<h4>Consent<\/h4>\n\n<p>The dashboard plugin check uses WPVulnerability as described above. Using a PhantomGuard Pro license and Pro features means those additional services may process data as described above. Core free hardening does not require a license.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Upload the plugin folder to <code>\/wp-content\/plugins\/<\/code>, or install <strong>PhantomGuard<\/strong> from the WordPress.org plugin directory.<\/li>\n<li>Activate the plugin through the <strong>Plugins<\/strong> screen in WordPress.<\/li>\n<li>Open <strong>PhantomGuard<\/strong> in the admin menu to configure hardening and explore the dashboard.<\/li>\n<\/ol>\n\n<p>No extra configuration file is required for the free version\u2014everything is managed in the plugin screens.<\/p>\n\n<!--section=faq-->\n<dl>\n<dt id=\"does%20the%20free%20version%20need%20a%20license%3F\"><h3>Does the free version need a license?<\/h3><\/dt>\n<dd><p>No. Hardening and the rules listed above work without a license. A PhantomGuard license is only required for Pro features such as malware scanning and advanced tools.<\/p><\/dd>\n<dt id=\"where%20do%20i%20change%20security%20rules%3F\"><h3>Where do I change security rules?<\/h3><\/dt>\n<dd><p>Go to <strong>WordPress Admin \u2192 PhantomGuard<\/strong> and use <strong>Security Hardening<\/strong> (and other tabs as labeled). Presets and individual rules are explained in the interface.<\/p><\/dd>\n<dt id=\"what%20about%20malware%20scanning%20and%20pro%20features%3F\"><h3>What about malware scanning and Pro features?<\/h3><\/dt>\n<dd><p>Those require <strong>PhantomGuard Pro<\/strong> and a valid license. The free plugin still shows where those features live so you can upgrade when you want full protection.<\/p><\/dd>\n<dt id=\"does%20phantomguard%20replace%20my%20security%20plugin%3F\"><h3>Does PhantomGuard replace my security plugin?<\/h3><\/dt>\n<dd><p>PhantomGuard focuses on <strong>hardening and logging<\/strong> in the free tier. Pro adds scanning and related tools. You can use it alongside other plugins if their features don\u2019t overlap in a conflicting way.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.1<\/h4>\n\n<ul>\n<li>Dashboard: plugin vulnerability check (WPVulnerability API) with update links via WordPress core update flow.<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial release of PhantomGuard on WordPress.org.<\/li>\n<\/ul>","raw_excerpt":"WordPress hardening: presets, audit log, modern UI. Free core rules; Pro adds scanning &amp; CDN\/DNS.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/zh-sg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/285341","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zh-sg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/zh-sg.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/zh-sg.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=285341"}],"author":[{"embeddable":true,"href":"https:\/\/zh-sg.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/phantomguard"}],"wp:attachment":[{"href":"https:\/\/zh-sg.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=285341"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/zh-sg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=285341"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/zh-sg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=285341"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/zh-sg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=285341"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/zh-sg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=285341"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/zh-sg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=285341"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}