WordPress upload security

Scan files before they enter your WordPress media library

CypherScan scans WordPress uploads through a secure presigned workflow and can automatically block suspicious or malicious files.

WordPress.org distribution is coming soon.

Example: CypherScan blocks a risky upload before it becomes available in WordPress.

Quick installation

1. Download the official plugin ZIP.

2. Open WordPress Admin → Plugins → Add New Plugin.

3. Upload the ZIP and activate CypherScan.

4. Open Settings → CypherScan.

5. Add your CypherScan API key and save the configuration.

Malware indicators

Exposed API keys

JWT secrets

Suspicious payloads

Risky upload patterns

Step 1

Download and install the plugin

Step 2

Add your CypherScan API key

Step 3

Upload files normally

Step 4

Allow or block files based on the verdict

• Clean uploads are allowed.

• Suspicious or malicious uploads can be blocked.

• Fail Open and Fail Closed modes are supported.

• Files use CypherScan's presigned upload workflow.

Download the plugin, add your CypherScan API key, and start scanning uploads before risky files reach production.