Off-site check
- Runtime / agent sends inventory and requested artefacts
- Guard scan workers analyse off-site
- A verdict returns to Nought.io
- A human authorises any remediation
Protect your website.
Lighten its workload.
Nought's security layer. Remote checks, site health and integrity signals processed off-site in Rust, with visibility in Nought.io.
Why Guard
Security work that does not have to happen inside PHP.
Guard is the security brain of the Nought stack: a Rust service that scans, analyses and produces verdicts, rather than loading every expensive security job into WordPress. The WordPress side is a worker. Nought.io is the control plane. Guard may recommend; Command authorises; the site agent executes. Deeper tooling is still being built — this page describes the architecture and what is actually in motion, not a finished consumer antivirus.
A better starting point
Move scan, intelligence and verdict work to Nought's Rust security plane. Keep a small WordPress agent for inventory, heartbeats and approved execution. Watch the estate from Nought.io.
- Security plugins compete with the site for CPU on the same host they are meant to protect.
- Agency estates need one view, not twenty plugin dashboards.
- A clean scan inside wp-admin is not the same as an off-site integrity signal.
In practice
From task
to done.
How the product fits into the work you already do.
What’s inside.
The capabilities behind the product.
Remote security plane
Rust services for job intake, scan workers and vulnerability / malware intelligence ingest.
Site agent model
A WordPress agent handles inventory, heartbeats and authorised commands. It is not the full scanner.
Nought.io visibility
Control-plane UX for sites, policies and authorised work. Guard recommends; Nought.io authorises.
On the roadmap
Up next.
Planned work, separate from what is available today.
Richer vulnerability and integrity signalling
Deeper security tooling is still being built. Do not assume every advertised check is live on every site.
Automation through Runtime / Flow
Guard as a step in a Flow: backup, update, scan, roll back if unhealthy.
Agency estate monitoring
One security posture across many sites, not a plugin login per property.
A lighter WordPress
The heavy jobs
leave your website.
Your site serves your visitors. Nought.io handles operational work away from the server you are trying to protect.
Fits your workflow.
Runtime
Shared worker and capability registration.
Nought.io
Policies, dashboards, approvals.
Flow
Planned orchestration after updates and deploys.
Technical details
Not a PHP scanner-in-the-plugin
Expensive analysis belongs in Guard, not in a WordPress cron on shared hosting.
Recommend, then authorise
Guard does not silently rewrite production. Command authorises. The agent executes.
Separate from Backup
Backup integrity verification is not a Guard malware scan.
Your toolkit, your choice
One product.
Or the connected Suite.
Choose an individual product licence or ask about Nought Suite. Contact us for pricing and availability.
Individual
Guard
Discuss this product and the right licence for your sites.
Ask about Guard ↗The toolkit
Nought Suite
Connected WordPress tools, with individual and agency options.
Explore the Suite ↗Remote operations
Nought.io
Some Nought.io plans include Suite products. What’s included depends on your plan.
Explore Nought.io ↗Questions
Is this a WordPress firewall plugin?
The agent can carry runtime protections, but Guard's point is off-site analysis and verdicts. Do not buy it expecting a drop-in clone of a conventional security plugin.
Does every Nought.io plan include Guard?
Qualifying plans can include Guard. Entry Nought.io plans may not. See the comparison and Nought.io page rather than assuming Suite-wide entitlement.
Also in the toolkit
Nought.io Remote WordPress operations: monitoring, backups, Guard, Optimise, updates, health, Runtime connectivity and agency estate management. ↗ Backup Two layers: a conventional WordPress backup product for people who want a plugin, and a remote Nought backup plane that moves the heavy work off the site. ↗ Optimise Performance intelligence and optimisation jobs processed in Nought's Rust services, with site-level status in Nought.io. ↗ Nought Suite The collection of WordPress products built by Nought. Buy one, or licence the lot. ↗