Protect your Magento 2 store from malicious file uploads before they affect your business.
Malware Monitor intercepts, scans, and blocks threats in real time — no external services, no monthly fees, no agents to maintain.

Block malicious PHP uploads across all upload vectors
40+ malware signatures (web shells, eval/exec chains, obfuscation combos)
Entropy analysis detects zero-day threats without known signatures
Auto-quarantine with instant email alerts
Real-time filesystem daemon — zero vulnerability window
Full audit trail: attacker IP, user agent, matched patterns
Admin dashboard with live stats, cron health, quarantine reports
CLI tools for advanced management
Per-page BCRYPT password protection for configs & reports

Stay secure. Stay in control.

MalwareMonitor protects your Magento store from malicious file uploads at the moment they happen — before anything is written to disk.

The module hooks into every Magento upload path (product images, CMS assets, imports, REST API) and runs each file through a multi-layer detection engine: 45+ malware signatures, Shannon entropy analysis, and polyglot file detection. If a file is dangerous, it is blocked instantly — the admin receives a detailed email alert, and every event is logged for audit.

This is the only Magento 2 module with native integration into the upload lifecycle. No external service, no API calls — everything runs entirely on your own server.

Key features:

Intercepts and blocks malicious files before they touch disk
Protection against PolyShell, CVE-2024-39397, eval loaders, obfuscated payloads, and webshells
Quarantine management in Admin Panel
Scheduled full file system scans via cron
CLI tools for DevOps: malware:scan, malware:monitor, malware:check, malware:analyse
Instant email alerts on threat detection
100% on-premise — no data leaves your server