SiftWP connects through a dedicated SSH key, runs a full security scan, then sends an AI agent to investigate and fix what it safely can — pausing on anything risky, escalating what it can't reach.
SiftWP never adds a plugin to your WordPress site. No extra code running on your server, nothing new to update, nothing new that can break — or be broken into.
You import a SiftWP-generated SSH key into cPanel. That's the whole connection. It gives SiftWP shell access to that one cPanel account only (never WHM or root), it's unique to each site you add, and you can revoke it any time by deleting the key in cPanel.
We don't ask for it, we don't store it, we don't want it. Your wp-admin credentials stay yours — SiftWP works entirely outside them.
Import the SSH key SiftWP generates for you into cPanel. Two minutes, no plugin, no admin password — and you can revoke it any time.
Every week, an automated scan combs your core file integrity, database, and uploads folder, and the AI agent investigates everything it finds.
The agent auto-fixes what's provably safe. Anything risky comes to you first with a plain-language explanation and an approve/decline button.
Most owners find out only after the damage is done — broken pages, stolen data, or a Google blacklist warning.
Source: Wordfence network attack data →Keyword scanners flood you with false positives while skipping sophisticated, deeply-buried malware.
Learn moreSiftWP watches your site with security-consultant-level rigor, 24/7, without the hourly rate.
Learn moreMalicious versions swapped in silently to replace legitimate WordPress core files.
Injection points buried deep in your database — invisible to surface-level plugin scans.
Malicious code buried inside theme files, silently collecting your visitors' login data.
Behavioral anomalies and obfuscated code that keyword scanners never flag.
Deep scans that go far beyond what any plugin can offer.
AI investigates every flag before anything is touched on your site.
Approve risky fixes on your terms — SiftWP never acts without you on the big stuff.
The same access that sifts your security also reviews your pages — titles, meta, headings, structure — and files a prioritized list of fixes. Security keeps you online; this helps you get found.
Every new account gets 100 free credits — enough for a full first scan. No card required.
We come in, clean the infection, harden the site, and hand it back.
The weekly sift, delivered.
Scans, then handles the safe stuff.
The whole watchtower.
Credits cover the AI-driven work — a weekly scan uses credits based on your site's size, and open-ended requests are billed by the real work done, not a flat rate. Top up anytime — 1,000 credits for $15, or 5,000 for $60.
Register a free account, connect your site with one SSH key, and see your first report. Takes about two minutes.