Quttera ThreatSign – Web Malware Scanner for WordPress

77 Quality Score

Active Installs

18/30

With only 10,000 active installs, Quttera sits well behind competing security plugins that have 20,000 to 1 million installs, so it is a relatively niche choice.

Update Freshness

25/25

The plugin was last updated in July 2026 and is tested against WordPress 7.0.1, which signals very active maintenance from the developer.

User Rating

12/15

A rating of 78 out of 100 from 47 reviewers is decent but lower than the scores earned by alternatives like Security Optimizer or MalCare.

Support Health

8/15

Only one support thread exists in the record, and it was resolved, but the small volume makes it hard to judge responsiveness under heavier demand.

WP Compatibility

15/15

Requiring PHP 7.2 and WordPress 3.3.2 with confirmed testing on 7.0.1 shows broad forward compatibility, earning a perfect score in this area.

Scores higher than 56% of indexed plugins

About

WordPress multi-level security scanner detecting malware, 0-day threats, brute-force attacks, bot attacks, and unauthorized admin changes.

Active Installs 10k+

Rating ★★★½ 3.9/5

Last Updated 2026-09-24 12:01am GMT

Requires WordPress 3.3.2+

Tested Up To 7.1.2

Requires PHP 7.2+

Security History

3 known vulnerabilities, all patched

2 Medium 1 Low

Most recent: August 14, 2025

View details ▸

What It Does

Quttera ThreatSign scans your WordPress site for malware, suspicious code patterns, credit card skimmers, and signs of brute-force or bot attacks. It runs multi-level scans that check for zero-day threats and flags unauthorized admin account changes. Results are presented through the WordPress dashboard and external Quttera reports, though actual cleanup requires a paid Quttera service.

Who It's For

This plugin is best for site owners who want an external, third-party malware detection layer in addition to any existing security tools, particularly those running small-to-medium business sites, WooCommerce stores worried about card skimmers, or sites that have already been compromised and need diagnosis. It suits users comfortable with a scanner that flags problems rather than handling automatic cleanup in most cases.

Who Should Skip It

If you want an all-in-one firewall, login protection, and built-in malware removal in a single free plugin, look elsewhere, since Quttera is primarily a detection tool. Sites on hosting environments running PHP below 7.2 should also skip it due to the minimum version requirement.

The Bottom Line

Quttera ThreatSign is a focused malware detection scanner with strong maintenance and compatibility but a smaller user base and ratings that trail the top alternatives. It earns a 77.11 quality score on PluginCheck and works well as a supplementary scanner, especially for skimmer detection, but should not be your only security layer. Pair it with a firewall and login hardening plugin for full coverage.

Pick this if you want a free, well-rounded suite of firewall, login, and malware tools backed by SiteGround and 1 million installs.

MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security Firewall 84/100

Choose MalCare if you need one-click automatic malware cleanup rather than detection only, plus a strong firewall.

Defender Security – Malware Scanner, Login Security & Firewall 84/100

Go with Defender if you want a polished, free layered security plugin from WPMU DEV with login locking and two-factor authentication.

BulletProof Security 81/100

Select BulletProof Security if your priority is .htaccess firewall protection and database backup hardening.

SecuPress with Simple SSL 80/100

Pick SecuPress if you want a beginner-friendly security plugin from a known WordPress vendor with both free and pro tiers.