Contact
Found a false positive, want a rule added, or need help cleaning a site? Send a message and it lands in our inbox. You can also email info@wpsniffer.com directly.
Bug reports and rule requests
For anything about the scanner itself, a public issue is better than email: others can find it, and fixes link back to it. Open one on GitHub issues. If you are reporting a security problem in WPSniffer, email info@wpsniffer.com instead of filing a public issue.
Need hands-on help?
WPSniffer is a scanner, not a cleanup service. If your site is hacked right now and you want someone to take it from here, WP Server Guard does malware removal, server hardening and WordPress penetration testing. For a free outside-in check of your site, such as security headers, TLS and known vulnerabilities, try ScanBastion.
What to include
- False positives: the rule name from the report, the file path, and the
matched_textcolumn if you have it. - Infected sites: which host you are on, whether you have SSH, and what the scan found so far. Do not attach the malware itself.
- Rule requests: a sample or a public write-up of the malware family.