Most WordPress security plugins ask the same vulnerable site to scan, decide and patch itself.
Security work that does not have to happen inside PHP.
Nought's security layer. Remote checks, site health and integrity signals processed off-site in Rust, with visibility in Nought.io.
Guard is the security brain of the Nought stack: a Rust service that scans, analyses and produces verdicts, rather than loading every expensive security job into WordPress. The WordPress side is a worker. Nought.io is the control plane. Guard may recommend; Command authorises; the site agent executes. Deeper tooling is still being built — this page describes the architecture and what is actually in motion, not a finished consumer antivirus.
Why the usual way hurts
- Security plugins compete with the site for CPU on the same host they are meant to protect.
- Agency estates need one view, not twenty plugin dashboards.
- A clean scan inside wp-admin is not the same as an off-site integrity signal.
How Nought does it
Move scan, intelligence and verdict work to Nought's Rust security plane. Keep a small WordPress agent for inventory, heartbeats and approved execution. Watch the estate from Nought.io.
The actual workflow
Not a feature grid. The sequence you would actually run.
Off-site check
- 1 Runtime / agent sends inventory and requested artefacts
- 2 Guard scan workers analyse off-site
- 3 A verdict returns to Nought.io
- 4 A human authorises any remediation
Product, not a mock
Screenshots and video will land here. Placeholders mark the real UI rather than decorating empty space with fake dashboards.
Guard verdict in Nought.io
Shipped in this product
Only what is actually in the current build or honestly in beta.
Remote security plane
Rust services for job intake, scan workers and vulnerability / malware intelligence ingest.
Site agent model
A WordPress agent handles inventory, heartbeats and authorised commands. It is not the full scanner.
Nought.io visibility
Control-plane UX for sites, policies and authorised work. Guard recommends; Nought.io authorises.
Coming
Coming soonRoadmap. Not live.
Richer vulnerability and integrity signalling
Deeper security tooling is still being built. Do not assume every advertised check is live on every site.
Automation through Runtime / Flow
Guard as a step in a Flow: backup, update, scan, roll back if unhealthy.
Agency estate monitoring
One security posture across many sites, not a plugin login per property.
The heavy jobs leave your website
Your website should not also have to back itself up, scan itself, and speed itself up. Those jobs happen somewhere else.
Integrations
Support for a platform is not a partnership or endorsement.
Runtime
Shared worker and capability registration.
Nought.io
Policies, dashboards, approvals.
Flow
Planned orchestration after updates and deploys.
Technical details
Not a PHP scanner-in-the-plugin
Expensive analysis belongs in Guard, not in a WordPress cron on shared hosting.
Recommend, then authorise
Guard does not silently rewrite production. Command authorises. The agent executes.
Separate from Backup
Backup integrity verification is not a Guard malware scan.
How this is licensed
Buy this product on its own, take Nought Suite, or receive it with a qualifying Nought.io plan. Final amounts are not published until the commercial model is approved.
Individual
Guard
Workflow licence
Annual product licence. Site limits will be published with pricing.
Nought Suite
Included in Nought Suite
Nought Suite
One annual licence for the connected toolkit. Agency Suite entitlement is provisioned separately — site limits are not invented here.
Nought.io
Included with qualifying Nought.io plans
Qualifying plans
Entry Nought.io plans may include nothing from Suite, or selected products only. Higher individual/business and agency plans can include Suite entitlement.
Nought.io
Included with qualifying Nought.io plans
Nought.io is WordPress operations infrastructure. Higher individual, business and agency plans can include Suite entitlement. Entry plans may include selected products only, or none. Not every Nought.io subscription includes the entire Suite.
Questions
Is this a WordPress firewall plugin?
The agent can carry runtime protections, but Guard's point is off-site analysis and verdicts. Do not buy it expecting a drop-in clone of a conventional security plugin.
Does every Nought.io plan include Guard?
Qualifying plans can include Guard. Entry Nought.io plans may not. See the comparison and Nought.io page rather than assuming Suite-wide entitlement.
Next in the ecosystem
These are the natural next products — not a popup.