Laying out the streets…STEP 1 OF 3

WPSniffer · Office #55,054

Open-source YARA malware scanner for WordPress servers

In the Catching bugs before release neighborhood (Developer). In town since 29 Oct 2026.

Nobody has claimed this office yet. Tablif records every new product and gives it an office; when its owner claims it, the lights go on.

Is this yours? Claim it

What Tablif read on WPSniffer's site

WPSniffer describes itself as: “WPSniffer — Open-source YARA malware scanner for WordPress”

What it is

Calls itself “CLI” and “command-line scanner”.

  • Calls itself: CLI · command-line scanner
“WPSniffer is a free, open-source CLI that scans WordPress and PHP files for malware using ~5,000 community YARA rules”
“WPSniffer is a free, open-source command-line scanner that checks WordPress and PHP files against thousands of community YARA rules.”

Where it puts itself

Rules out “account”, “license key” and “telemetry”. Publishes a comparison page.

  • Says it will not: account · license key · telemetry
“No account, license key or telemetry: your files never leave your server.”
“Compare -> https://wpsniffer.com/compare/”

What it costs

A free tier, free forever. No monthly or yearly plan. No one-time option.

  • One-time: no
  • Monthly: no
  • Yearly: no
  • Commission: no
  • Free plan: free forever
“Yes — GPLv3, no paid tier.”

Who it sells to

Made for agencies, freelancers and hosts.

  • Made for: agencies · freelancers · hosts
“Built for freelancers, agencies and hosts cleaning up hacked sites.”

How it runs

A command-line tool. Can be self-hosted. Distributed through the pip. No API. Open source. Built with Google Analytics.

  • Kind: cli
  • Runs where: self-hosted
  • Distributed via: pip
  • API: no
  • Open source: yes
  • Analytics: Google Analytics
“WPSniffer is a free, open-source CLI that scans WordPress and PHP files for malware”
“Runs on your server.”

What it works with

Names ISPProtect, PHP Malware Finder and 5 more on its pages.

  • Names: ISPProtect · PHP Malware Finder · WordPress · +4
“Comparing tools? See WPSniffer vs Wordfence CLI , maldet , PHP Malware Finder and ISPProtect .”
“WPSniffer is a free, open-source CLI that scans WordPress and PHP files for malware using ~5,000 community YARA rules from YARA Forge, powered by the YARA-X engine.”

What it offers as proof

Live, no waitlist. Try it without signing up. Publishes docs.

  • Trial asks for: nothing
“No account, no license key.”
“WPSniffer is a free, open-source command-line scanner that checks WordPress and PHP files against thousands of community YARA rules.”

Sources

Tablif read these pages, last on 29 Oct 2026. Everything above is what the product says about itself; Tablif does not verify every claim.

Similar products in Tablif Town

Explore Tablif Town