Know your websites are safe.
SherDore Shield watches your sites for downtime, malware, vulnerabilities and risky configuration, and tells you the moment something needs attention.
- Uptime checks every 5 minutes
- 35 outside-in security checks
- Agent-based malware scanning
- Alerts by email and webhook
Illustration with sample data
Why Shield
Most site owners find out last.
A hacked or broken site rarely announces itself. The first sign is usually a customer, a search warning or a hosting suspension.
Without Shield
- A customer tells you the site is down.
- Malware sits in a plugin folder for weeks.
- Nobody notices the outdated plugin with a known exploit.
- Security is a once-a-year scramble.
With SherDore Shield
- An alert the moment a check fails.
- Files are scanned and every change is flagged.
- Known vulnerabilities are matched to what you actually run.
- One score per site shows where to look first.
Features
Everything that keeps a site safe, in one place.
Monitoring, scanning and alerting that work together, so one dashboard answers the question: is my site OK?
Uptime monitoring
Every site is checked every 5 minutes, with the HTTP status and response time of each check recorded.
SSL and domain expiry
Get warned before a certificate or a domain lapses, instead of finding out from your visitors.
Malware scanning
A drop-in agent scans every file for injected code, backdoors and known-bad signatures, with a full history per site.
Vulnerability detection
Sites are checked against a database of known CMS, plugin and theme vulnerabilities, with severity and fix guidance.
File integrity monitoring
Shield fingerprints your files and flags anything added, changed or removed between scans.
Security Check
The agent audits PHP configuration and hardening in five categories, so you see exactly what to tighten.
Site Scan
35 outside-in checks for exposed files, information leaks and weak configuration, tuned to each platform.
Backups
Create backups of a site's files and database through the agent, and download them from the portal.
Alerts
Choose which events matter and where they go. Alerts reach you by email or webhook.
Monitoring and alerts
Know the moment something breaks.
Shield checks your sites around the clock and tells you when something changes, so you hear it from Shield first.
- Uptime checks every 5 minutes, with HTTP status and response time recorded
- Warnings before SSL certificates and domains expire
- Alert rules per event, delivered by email or webhook
- A notice when a site comes back online
Illustration with sample data
Security score
One score for every site.
Everything Shield finds rolls up into a single score per website, so you always know which site to look at first.
- A score built from monitoring, malware, vulnerabilities, file integrity and Site Scan
- Spot the weakest site on your dashboard at a glance
- Vulnerabilities come with severity and fix guidance
- Dismiss findings that do not apply to you
Illustration with sample data
How it works
From first site to full protection.
Start with outside-in monitoring in minutes, then add the agent when you want to look inside.
- 1
Add your website
Enter the domain and choose its platform: WordPress, Magento, Laravel, PHP, Node.js, Python or static.
- 2
Verify it is yours
Confirm that you own the site.
- 3
Monitoring starts
Uptime, SSL and domain checks run, and Site Scan looks for exposed files and weak configuration.
- 4
Add the agent for deep scans
Upload one PHP file for malware scanning, Security Check and backups. No SSH, no server changes.
Deep scan agent
Scan from the inside with a single file.
Download one PHP file, upload it to your site, and Shield scans it from the inside and reports back.
- Every file checked for injected code, backdoors and known-bad signatures
- A full scan history per site, with open, dismissed and resolved findings
- PHP configuration audited across command execution, code execution, information disclosure and filesystem
- A per-site token you can rotate whenever you need to
Illustration with sample data
Site Scan
Check your site the way an attacker would.
Site Scan probes your site from the outside for the mistakes attackers look for first. Nothing to install.
- 35 checks across exposure, disclosure, hardening and configuration
- Platform-aware: each platform gets its own checks on top of the universal ones
- Exposed .env files, backups, debug pages and version leaks flagged with a severity
- Critical and high findings trigger an alert
Illustration with sample data
Platforms
Built for the stacks you actually run.
Shield supports seven platforms, and the checks change with the platform: WordPress user enumeration, Laravel debug mode, Magento admin paths, Django and Flask debug pages, and more.
Integrity and backups
Catch tampering. Keep a way back.
Know when a file changes that should not have, and keep backups you can download if something goes wrong.
- Files are fingerprinted, and anything added, changed or removed is flagged between scans
- Backups of a site's files and database, started from the agent
- Download any backup from the portal
- Failed backups show why they failed
Illustration with sample data
Teams
Built for teams, not just one admin.
Bring in the people who look after your sites and give each of them the access they need.
- Invite teammates by email
- Four roles: owner, admin, team member and read only
- Every site and finding in one shared dashboard
- Websites and findings scoped to your team, never shared with others
Illustration with sample data
FAQ
Questions, answered.
Do I need to install anything?
Not to start. Uptime, SSL and domain monitoring and Site Scan all work from the outside. For malware scanning, Security Check and backups you add one PHP file (the agent) to your site. No SSH or server changes are needed.
Which platforms does it support?
WordPress, Magento, Laravel, plain PHP, Node.js, Python and static sites. Each platform gets its own set of Site Scan checks on top of the universal ones.
Will Shield fix problems for me?
No. Shield finds and reports problems, with a severity and guidance, so you or your developer can fix them. You can dismiss a finding that does not apply to you.
Is Shield a firewall?
No. Shield monitors and scans your sites. It does not sit in front of them or block traffic.
How do alerts reach me?
By email or webhook today. Slack, Discord and Telegram are planned. You choose which events trigger an alert: a site going down, a certificate or domain expiring, and new malware, vulnerability, file integrity or Site Scan findings.
How often are sites checked?
Uptime is checked every 5 minutes. You can also run scans on demand from the portal.
Can my team use it?
Yes. Invite people by email and give each one a role: owner, admin, team member or read only. Everyone works from the same dashboard.
How do I sign in?
Shield uses single sign-on with your SherDore account. Choose Log in or Sign up, and you come straight back here.
Is my data separate from other customers?
Yes. Your websites and findings belong to your team and are scoped to it, so other teams cannot see them.
Start watching your websites today.
Sign up with your SherDore account, add a site, and have monitoring running in minutes.