FILE INTEGRITY MONITORING
File Integrity Monitoring for Your WordPress Sites
File integrity monitoring compares your files with known good copies and flags any that changed. xCloud's Integrity Monitor does this for WordPress core and plugins from WordPress.org, using their official checksums. Scan Now is free on every plan. Automatic checks run with Site Monitoring on paid plans.
- Checks core and plugin files
- Uses WordPress.org's official checksums
- Warning on the site overview when a file changes
WHY IT MATTERS
Why Check WordPress Files for Changes?
Hacks hide in core files
Attackers often add code to a core or plugin file that nobody opens.
Find it before Google does
A changed file is an early sign, long before a browser warning or a blacklist.
Know which file
You get the exact file to look at, not a vague score.
WHAT YOU GET
What Does the Integrity Monitor Check?
WordPress core
Every core file is compared with the official copy for your version.
Plugins
Plugins from the WordPress.org directory are checked against their checksums.
Scan Now
Run a check whenever you want. The page shows when the last scan ran.
Overview warning
Failed checks show on the site overview with Check and Ignore buttons.
HOW IT WORKS
How Do You Check WordPress Checksums in xCloud?
Open Integrity Monitor
Open your WordPress site and go to Security, then Integrity Monitor.
Scan
Click Scan Now. xCloud checks core and plugin files on the server.
Review flagged files
Expand WordPress Core and Plugins to see which files do not match.
Restore or clean
Replace a changed file with the official copy, or restore a backup.
LIMITS AND PLANS
What Does It Not Cover?
WordPress.org plugins only
Premium plugins from outside the directory have no official checksums to compare.
Themes and uploads
Theme files and the uploads folder are not part of the check.
Not a malware cleaner
It tells you which files changed. Removing bad code is up to you or your backups.
Plans
Scan Now: free on every plan. Automatic checks: paid plans, as part of Site Monitoring.
Frequently Asked Questions
What people ask about File Integrity Monitoring on xCloud.
What is file integrity monitoring?
File integrity monitoring checks your files against a known good version and reports any that were added to, changed or replaced. For WordPress, the known good version is the official copy on WordPress.org.
How does xCloud verify WordPress checksums?
xCloud runs WP-CLI's checksum checks on the server: one for WordPress core and one for all plugins. Each file's checksum is compared with the official one for the version you run.
Can it check premium plugins?
No. Only plugins listed in the WordPress.org directory publish checksums. Premium plugins sold elsewhere cannot be verified this way.
Is the Integrity Monitor a malware scanner?
No. It finds files that differ from the official copies, which is often how injected code shows up. It does not scan themes or uploads, and it does not remove anything.
Is file integrity monitoring free in xCloud?
Scan Now on Security, then Integrity Monitor works on every plan. The automatic checks run as part of Site Monitoring, which is on paid plans.
Know When a WordPress File Changes
Check core and plugin files against the official copies, from one page per site.