WordPress plugin · free
Every file of your WordPress, checked. And repaired in one click.
IntegriFix compares every file of WordPress core, your plugins and your themes with its official version, explains each problem in plain words and puts the right version back. Every repair can be undone in one click.
- No site data sent to us with the free version
- English and French
- One-time payment
A hacked site does not always show. Its files never lie.
- 822,651infected sites detected by Sucuri in 2024
- 11,334new vulnerabilities in the WordPress ecosystem in 2025, 42% more than in 2024
- 5 hmedian time between the disclosure of a vulnerability and its first exploitation
Sources: Sucuri, 2024 report; Patchstack, State of WordPress Security 2026.
How it works
Scan, understand, repair. No technical skills needed.
Scan
Every file is compared with the official reference of the exact version installed. Never with another version: no false alarms.
Understand
Each point is explained plainly: what is happening, why it matters, what to do. Added or removed lines are highlighted.
Repair, undo if needed
The official version is verified before use and the old file is kept for 30 days. One click takes you back.
IntegriFix in 2 minutes
Video description
The video, without sound, shows IntegriFix in the admin of a WordPress demo site.
1. The dashboard starts a scan: every file of core, plugins and themes is compared with its official version.
2. The results are listed by importance: a modified core file, code in the media library, a rule added to the .htaccess file…
3. The detail of a point explains what is happening, why it matters and what to do, with the added lines highlighted.
4. The repair puts the verified official version back and keeps a copy of the old file for 30 days.
5. One click on “Undo the repair” puts the file back as it was.
What IntegriFix checks
The whole site, including where others do not look.
WordPress core
Every file compared with the checksums published by WordPress.org, translated releases included.
Plugins
Compared with their exact version on WordPress.org. Premium plugins are fingerprinted at every installation.
Themes
Compared with the official package of their version. A displayed version that does not match the files is reported.
Sensitive files
Media, wp-config.php, .htaccess, .user.ini, must-use plugins, folders at the root: the favourite hiding places of intruders.
No needless false alarms. Translations, localised releases and cache files are recognised.
Never “site clean”. IntegriFix says honestly what it checked, and what it could not check.
Light. No visit waits for the scan: it runs in small steps, on the schedule you choose or when you start it.
Comparison
What makes the difference.
IntegriFix does not replace your firewall: it checks and repairs the files, where whatever already got in hides.
| IntegriFix | Wordfence | MalCare | Sucuri | SecuPress | |
|---|---|---|---|---|---|
| Comparison with the exact official version | Yes core, plugins, themes | Yes | Yes | core only | core only (Pro) |
| Repair of official files | Yes free | Yes free | Yes paid (from $299 / year) | Yes core free; cleanup paid | core (Pro); human cleanup from €299 |
| Undo of every repair | Yes for 30 days | — (backup download) | safety backup before cleanup | No | not checked |
| Rescue tool when the site no longer opens | Yes without WordPress (repair: Pro) | No | Yes off-site scan | remote scan; server-side scanner (paid) | No |
| Pricing model | one-time payment | subscription | subscription | subscription | subscription |
| Price of the paid version | €49 once | $149 / site / year | $99 to $499 / site / year | $229 to $549 / site / year | €60 / site / year |
Source and date of each row
- Comparison with the exact official version: WordPress.org listings, product pages and documentation of Wordfence, MalCare, Sucuri and SecuPress. (2026-09-25)
- Repair of official files: Product and pricing pages of the vendors (wordfence.com, malcare.com, sucuri.net, secupress.me). (2026-09-25)
- Undo of every repair: Documentation of IntegriFix, Wordfence, MalCare and Sucuri (and the code of the Sucuri plugin). Not checked for SecuPress. (2026-09-25)
- Rescue tool when the site no longer opens: Product pages and documentation of Wordfence, MalCare, Sucuri and SecuPress. (2026-09-25)
- Pricing model: Pricing pages of the vendors. (2026-09-25)
- Price of the paid version: Pricing pages of the vendors (wordfence.com, malcare.com, sucuri.net, secupress.me). (2026-09-25)
Pricing
Pay once. Keep it forever.
The free version is complete; IntegriFix Pro saves time and comes to the rescue. No subscription: one licence per site, for life, updates included. It also covers the copies of that site at a staging. or preprod. address (such as staging.mysite.com) and your local sites (.local, .test, localhost).
Free
€0
Complete and unlimited: every problem can be repaired, one at a time.
- Full scan of the site
- Automatic scans and an e-mail when a new problem appears
- Plain explanations, line-by-line comparison
- File-by-file repair from WordPress.org
- Quarantine of intruding files, reinstallation of a plugin that disappeared
- Undo for 30 days
- Command-line rescue tool (scan only, changes nothing)
Pro
Launch price€491 site, for life
To save time when there is a lot to repair, and to act even when the site no longer opens.
- Everything the free version does
- Every file to put back to its official version, repaired in one go, with a single undo for all
- Rescue tool in the browser: uploaded by FTP, it scans and repairs without WordPress
- Updates from your WordPress admin
- E-mail support within 24 business hours
- Soon: references for premium plugins
Agency 5
€1495 sites
About €30 per site. For freelancers and small agencies.
- 5 Pro licences for life
- One key per site
- Move to another site 3 times a year
Agency 25
€44925 sites
About €18 per site. For agencies looking after many sites.
- 25 Pro licences for life
- One key per site
- Move to another site 3 times a year
Prices include VAT. Secure payment by Paddle, the official reseller (Merchant of Record), which handles VAT and sends your invoice. Refund on request within 14 days, no reason needed.
Rescue tool
Your site no longer opens? The rescue tool works without WordPress.
A single file that scans the site without loading WordPress, so an intruder hiding inside cannot fool it. The free edition runs from the command line and changes nothing. The Pro edition also opens in your browser after an FTP upload, and repairs from the official copies. Both are downloaded from the Download page.
Read the guide# Real output, shortened $ php integrifix-rescue.php scan /var/www/mysite [20/20] done Verdict: ACTION REQUIRED [CRITICAL] CORE_MODIFIED index.php [HIGH] HTACCESS_SUSPICIOUS .htaccess [MEDIUM] SITE_UNKNOWN_PHP wso/shell-demo.php
Frequently asked questions
You may be wondering…
Does IntegriFix replace my security plugin?
No, it complements it. A firewall tries to stop intrusions; IntegriFix checks the files and repairs what was changed. Keep both.
Is the free version limited?
No, neither in number nor in time. It scans the whole site, explains every problem and repairs each one, one at a time, with undo for 30 days.
What does Pro change, in practice?
It saves time. If 12 files were modified, the free version asks for 12 confirmations; IntegriFix Pro repairs them in a single action, and a single undo puts everything back as it was. It adds the rescue tool in the browser, to act when the site no longer opens, updates from your admin and e-mail support within 24 business hours.
Is my data sent anywhere?
The free version only contacts WordPress.org, to get the official references: no data about your site or your visitors is sent to us. IntegriFix Pro also contacts our licence server (api.integrifix.fr) for the licence and updates; the privacy policy gives the details.
What about my premium plugins?
IntegriFix records a reference copy of their fingerprints at every installation or update made from WordPress: any later change is detected.
Does IntegriFix clean the database?
No: IntegriFix checks and repairs files. If the database is affected, call an expert.
Does it slow my site down?
No. The scan runs in small steps, even on modest hosting: in the background on the schedule you choose (weekly by default) or when you start it. No visit waits for it to finish.
Contact
A question? We will answer.
Before buying, for a problem or for an agency: write to us. We answer within 24 business hours.
- Support · support@integrifix.fr
- Report a vulnerability · security@integrifix.fr