File scanner clean but Google still shows spam?
File scanner says your WordPress site is clean, but Google still shows spam pages, strange redirects, pharma keywords, hidden links, or Japanese keyword hack results?
Content Guard Pro scans the WordPress database for hidden SEO spam, malicious scripts, suspicious iframes, spam links, encoded payloads, and cloaked content inside posts, pages, custom post types, titles, excerpts, and Gutenberg blocks.
Most WordPress security plugins focus on files, firewalls, login protection, or vulnerability checks. Content Guard Pro adds the missing database-content layer, so you can inspect the places attackers often abuse after a hacked-site cleanup: post content, block markup, titles, excerpts, and deeper database fields when Standard Scan is enabled.
What the free WordPress.org version scans
The free plugin includes Quick Scan for wp_posts, including:
- Posts, pages, and custom post types
- Post titles, excerpts, and post content
- Gutenberg block content stored in the database
- Classic Editor and Block Editor content during single-post scans
- Hidden links, suspicious scripts, iframes, SEO spam, and encoded payloads in supported content fields
The free version also includes unlimited manual scans, all findings visible, on-save single post scanning, Watch Mode weekly checks, confidence scores, severity labels, admin notices, dashboard alerts, 30-day scan history, and allowlist/denylist controls.
What this database malware scanner detects
Content Guard Pro helps find content-layer threats such as:
- Hidden SEO spam links and cloaked text using CSS tricks such as
display:none,visibility:hidden,opacity:0, off-screen positioning, and tiny or hidden elements - Pharma spam, casino spam, gambling spam, crypto spam, financial scam phrases, counterfeit goods spam, and redirect spam
- Japanese keyword hack content and cloaked search-result spam
- Suspicious external scripts, iframes, object/embed tags, and links in posts and blocks
- JavaScript redirects, meta refresh redirects,
javascript:links, and suspicious inline event handlers - Obfuscated JavaScript patterns such as
eval(),fromCharCode(),atob(), Base64 payloads, and largedata:URIs - URL shorteners and redirectors that hide the final destination
- Cryptocurrency miner patterns and known cryptojacking script indicators
- Encoded attacks hidden with HTML entities, URL encoding, Base64, ROT13, hex, or octal encoding
- Serialized malware in postmeta, selected options, and Elementor data when Standard Scan is enabled
When to use Content Guard Pro
Use Content Guard Pro when:
- Google flags hacked content, spam pages, or strange search results, but your file scanner looks clean
- You cleaned a hacked WordPress site and want to check whether spam remains in posts or blocks
- You inherited a client site and need to inspect the database content layer before making changes
- You see pharma keywords, Japanese keyword spam, casino links, hidden iframes, or suspicious redirects in search results
- You want to review risky Gutenberg or Classic Editor content before publishing
- You need a database malware scanner alongside your existing firewall, file scanner, and vulnerability scanner
Why database-first scanning matters
File scanners are important, but many SEO spam infections do not live in plugin files or theme files. Attackers often inject spam links, hidden text, malicious scripts, or redirect code directly into WordPress content stored in the database.
Content Guard Pro focuses on that content layer. It is designed to complement your existing security stack, not replace it.
Think of it as database forensics for WordPress content: scan posts, pages, custom post types, block markup, and deeper database fields with a scanner built specifically for content-resident threats.
Low-noise findings for real cleanup work
Not every external link or hidden element is malicious. Content Guard Pro uses confidence scores, Critical/Suspicious/Review severity labels, accessibility-aware rules, and allowlists to reduce obvious false positives.
Findings include the affected content location, matched rule, confidence score, context excerpt, and suggested next action so you can review problems faster.
Free plugin features
- Quick Scan for
wp_postscontent, including posts, pages, custom post types, titles, excerpts, and Gutenberg blocks - Unlimited manual scans
- All findings visible in the plugin dashboard
- Gutenberg-aware scanning with block parsing
- Classic Editor and Block Editor single-post scanning on save
- Confidence scores from 0 to 100
- Watch Mode: automatic weekly checks on new and changed posts, with protection freshness on the admin bar and dashboard
- Severity labels: Critical, Suspicious, and Review
- Admin notices for important findings
- Admin bar alerts and WordPress dashboard summary
- 30-day scan history
- Allowlist and denylist controls to reduce false positives
- One-click Edit Post workflow for manual cleanup
- Ignore/false-positive workflow for accepted findings
- Local scanning with bundled detection rules
Premium adds deeper database coverage
Premium plans add deeper coverage and workflow automation for site owners and agencies:
- Standard Scan for
wp_posts,wp_postmeta, and selectedwp_optionsdata - Deeper inspection of serialized data and Elementor data stored in postmeta
- Watch Mode Deep Watch with daily cadence and deeper delta scope
- Scheduled full daily scans
- Non-destructive quarantine to neutralize risky content without deleting database content
- Revision-based rollback for affected posts
- Email alerts and daily digest emails
- Webhooks for agency monitoring on supported plans
- Reputation checks through supported security services
- Faster rule updates
- CSV/JSON export and REST API access on supported agency plans
- Extended scan history on paid plans
Privacy and external services
Content Guard Pro scans locally on your WordPress server and works without creating an account or connecting to the cloud service.
Optional external service: Content Guard Pro Cloud, provided by contentguardpro.com.
The optional cloud service can be used for rule-pack hints, community allowlist sync, optional anonymous telemetry, optional developer contact, and optional security newsletter preferences. It is consent-based and can be skipped.
If you choose to connect, the service may receive the site URL, site name, plugin version, WordPress version, PHP version, anonymous installation ID, consent choices, optional email address if you provide it, and anonymous scan metrics such as scan count, findings count, duration, and items scanned when telemetry is enabled.
Content Guard Pro does not send post content, database contents, matched excerpts, scan result details, usernames, passwords, payment details, visitor data, or stored customer data to the cloud service.
Terms: https://contentguardpro.com/terms
Privacy Policy: https://contentguardpro.com/privacy
Documentation and support
Documentation: https://contentguardpro.com/docs
Support forum: https://wordpress.org/support/plugin/content-guard-pro/
Screenshots
Hidden SEO Spam Found in the Database - Review a database finding with severity, confidence score, matched excerpt, and exact post location.
Run a WordPress Database Malware Scan - Start a Quick Scan, review progress, and inspect posts, pages, custom post types, and Gutenberg blocks.
Why This Content Was Flagged - See contextual explanations for hidden links, suspicious iframes, malicious scripts, spam keywords, and encoded payloads.
Clean Up Without Deleting Content Automatically - Open affected posts, ignore false positives, and review remediation guidance before making changes.
Block Editor and Classic Editor Scanning - Scan content while editing and review findings before or after saving posts.
Security Dashboard and Site Health - Track open Critical, Suspicious, and Review findings from the Content Guard Pro dashboard.
Scan History and Audit Trail - Review completed scans, detected findings, scan duration, and historical scan status.
Finding Details with Confidence Scoring - Inspect rule matches, affected database field, context snippet, confidence score, and suggested next steps.
Reports and Content Security Summary - View database content security status, severity counts, and scan metrics.
Detection Patterns and Allowlist Management - Manage trusted domains, denylist entries, and detection behavior to reduce false positives.
Pattern Tester - Test suspicious snippets or custom patterns against scanner rules before applying changes.
Scanner Settings and Performance Controls - Configure scan behavior, Safe Mode, notifications, and diagnostics.
System Diagnostics and Support Tools - Copy diagnostics, verify plugin health, and collect information for support.
Admin Bar Security Alerts - See critical database-content findings while working inside WordPress admin.