Back doors
Secret entry points hackers leave behind so they can get back in later. JayShield finds and removes them.
HIGHwp-includes/css/.cache.phpwebshell.wsopattern matchJayHackPro® Inc. Los Angeles
JayHackPro is a security company in Los Angeles. It builds tools that find the malware hackers hide on websites and remove it safely. The code is open for anyone to check, and it never sends your data anywhere.
$ npx @jayhackpro/jayshield scan ./public_html JayShield® · find and remove web malware v1.2.1 github.com/JayHackPro/JayShield scanning ./public_html 1,284 files read · 0 modified · 0.8s CRITICAL uploads/07/IMG_0412.jpg php_in_media HIGH wp-includes/css/.cache.php webshell.wso MEDIUM themes/site/footer.php obfuscation.b64 LOW uploads/cache/index.php.bak double_extension 4 threats · exit 1 · nothing was modified next: jayshield quarantine ./public_html
What JayHackPro believes
That is the rule for everything JayHackPro makes. Every feature and every release is measured against it.
No extra parts. One package, one command. Less code means fewer places for problems to hide.
Tested on real WordPress, Laravel and jQuery sites, so it flags attacks and not your own files.
The code is public and free, with 54 automated tests. Anyone can read it and see exactly what it does.
Flagship JayShield®
Hidden files, secret back doors, coin-mining scripts. JayShield finds them and locks them away. It never deletes anything without your say.
Secret entry points hackers leave behind so they can get back in later. JayShield finds and removes them.
HIGHwp-includes/css/.cache.phpwebshell.wsopattern matchCode scrambled so people cannot read it. JayShield spots it anyway.
MEDIUMthemes/site/footer.phpobfuscation.base64_chaincode analysisFake photos that secretly run code. A favorite trick in upload folders.
CRITICALuploads/07/IMG_0412.jpgphp_in_mediafile inspectionScripts that steal your visitors’ card details, or use your server to mine crypto.
HIGHjs/theme.min.jsminer.coinhiveknown domainsA list of known bad files, checked by fingerprint. Add your own.
CRITICALtmp/eicar.comknown_hash.eicarfingerprint listnpx @jayhackpro/jayshield scan .Safe by design
Removing malware by deleting files can break your site. JayShield never deletes anything on its own. You stay in control at every step.
Looks at every file and changes nothing. You get a clear report of what it found.
$ npx @jayhackpro/jayshield scan ./public_html scanning ./public_html 1,284 files read · 0 modified · 0.8s CRITICAL uploads/07/IMG_0412.jpg php_in_media HIGH wp-includes/css/.cache.php webshell.wso MEDIUM themes/site/footer.php obfuscation.b64 LOW uploads/cache/index.php.bak double_extension 4 threats · exit 1 · nothing was modified next: jayshield quarantine ./public_html
Moves the bad files into a locked vault. Your site keeps running while you check each one.
$ jayshield quarantine ./public_html 4 files moved to .jayshield-vault/2026-09-06T0214Z/ neutralized · chmod 000 · .quarantined manifest.json written · sha256 recorded per file site still serving · review with: jayshield list
Changed your mind? Put any file back with one command, exactly as it was.
$ jayshield restore uploads/07/IMG_0412.jpg sha256 verified against manifest restored to uploads/07/IMG_0412.jpg byte-for-byte identical · exit 0
v1.2.1 · free, MIT license · no extra parts · Node 18 or newer · 54 automated tests
$ npx @jayhackpro/jayshield scan ./public_html scanning ./public_html 1,284 files read · 0 modified · 0.8s CRITICAL uploads/07/IMG_0412.jpg php_in_media HIGH wp-includes/css/.cache.php webshell.wso MEDIUM themes/site/footer.php obfuscation.b64 LOW uploads/cache/index.php.bak double_extension 4 threats · exit 1 · nothing was modified next: jayshield quarantine ./public_html
$ jayshield quarantine ./public_html 4 files moved to .jayshield-vault/2026-09-06T0214Z/ neutralized · chmod 000 · .quarantined manifest.json written · sha256 recorded per file site still serving · review with: jayshield list
$ jayshield restore uploads/07/IMG_0412.jpg sha256 verified against manifest restored to uploads/07/IMG_0412.jpg byte-for-byte identical · exit 0
The company
Four promises, kept in everything JayHackPro makes.
Free tools come with all their code, tests and license. Paid products are built to the same standard.
01JayHackPro tools never send data anywhere, not even to JayHackPro. What runs on your server stays there.
02Every extra part is another way in for attackers. JayShield has none.
03The code is written to be read by people, so anyone can see what it does.
04Store
Licenses, support and updates, sold by JayHackPro. No middleman.