K-Shield — Free, Saver, Full. Free diagnosis, clean-up and WordPress monitoring.
Free

Know whether your site is infected, without changing anything.

The scan runs on your server, read-only. It writes nothing, moves nothing, deletes nothing. In the end, it tells you whether the site is infected, and keeps you a report — whether you buy anything or not.

Read the guide

How it goes

  1. You sign upYour address and your domain name. You receive the download links — no account, no key.
  2. You drop two files by FTPanalyse.php and kshield-analyse.zip, at the root of your site. Nothing to unzip: it is the only technical step.
  3. You open the page and enter your emailA validation code is sent to you: it opens the scan, which takes two to three minutes on an ordinary site.
  4. You read the reportWhat was found, where, and what it does. In your language, no jargon.

Why a sign-up

Because a detection tool handed out without any control also serves those who write backdoors: they would test their own code on it until it slips through the net. The validation code is sent to a real address, and the number of scans is limited.

It is also why the report names the dangerous files and says what they do, but never how they were spotted.

Get the analysis tool

The site the delivery email will be about.

What the scan transmits. The scan is free. At the end, its verdict and the address you validated by code are sent to us — even if nothing is detected. If items are found, we receive for each one its digital fingerprint, its size and its location. Never the content of your files, never your database, never your visitors' data — unless you tick the box below.

This information serves one purpose only: improving our detection. It stays with Karbonic Sàrl, hosted in Switzerland, and is passed on to nobody else. You can ask for its deletion at any time.

The paid kit, for its part, transmits nothing. It works on your server and lets nothing out of it.

Expected use. The scan is meant for those who run the site being analysed. Any use aimed at testing the detection on deliberately planted malicious code will be blocked, and the submitted samples will be kept and analysed.