Guard the files behind WooCommerce
A card skimmer on a WooCommerce shop can be a few lines added to the payment plugin, in a file you'd never open. The checkout keeps working and the orders keep coming. Alertica checks your shop's files every day and tells you the day a payment plugin changes. There's no plugin to install, our team sets it up with you on Pro, and there's a free plan that never expires.
- Checks for Stripe, WooPayments and PayPal
- Free plan that never expires
Your shop, watched in three steps
-
Connect your shop
Add the shop with the SFTP, FTPS or FTP login from your host. Alertica only lists files, so a read-only login will do, and it finds the shop folder by itself.
-
Turn on WooCommerce Protection
Pick WooCommerce as the platform. You get every WordPress check, plus checks on WooCommerce itself and on the payment plugins you use.
-
Choose who hears about it
Add the people who should know, by email or SMS, with Slack coming soon. The first scan reports anything suspicious already in the shop's files.
What gets watched in your shop
Everything we check on a WordPress site, plus the plugins that run your shop and take its payments.
-
The plugins that take payments
Stripe, WooPayments and PayPal handle your customers' cards. Any change to them raises an alert, and an update you ran shows up as yours.
-
Your shop and its plugins
Any file added or changed in WooCommerce, your other plugins, WordPress itself and your theme. Your own updates show up too.
-
Plugins you never installed
Some malware hides in a plugin that runs on every page, checkout included, and doesn't show in your normal plugin list. Alertica alerts you the day one appears.
-
The key to your customer data
wp-config.php holds the password to the database where every order and customer address is kept. Alertica alerts you when it changes, and when a copy turns up.
-
Scripts among your product photos
Your uploads folder should only hold product images and documents. A script there is a red flag.
-
Files that shouldn't be there
Database backups left where anyone could download them, known hacking tools, and scripts disguised as images like logo.php.png.
Why WooCommerce shops pick Alertica
-
Still watching after a break-in
Anything that runs inside WordPress can be turned off by whoever gets into your files. Alertica runs on our servers and logs in to read, so it keeps checking.
-
Nothing added to checkout
No plugin and no script, nothing that runs while a customer pays. Your checkout stays as fast as it is today.
-
Secure by design
Alertica reads file names, sizes and timestamps, never what's inside, and never touches the database. The login is encrypted with AES-256, with two-step sign-in on every account.
-
Proof of every check
Scan history keeps every scan, the clean ones too, so you can show when the shop was last checked and what each check found.
Questions WooCommerce shops ask
What WooCommerce Protection catches, what it leaves to other tools, and what it costs.
-
Can Alertica catch a card skimmer on WooCommerce?
It catches one hidden in your files: a changed payment plugin, a new must-use plugin or a script in uploads. Some skimmers are stored in the database instead, in a widget or a plugin's settings, and Alertica doesn't read the database, so pair it with a scanner that does.
-
Which payment plugins does it watch?
WooPayments, the Stripe gateway and PayPal Payments get a check of their own when they're installed. Any other gateway is covered by the plugins check, which alerts on any file added, changed or deleted in wp-content/plugins.
-
Will WooCommerce updates set off alerts?
Yes. An update changes plugin files, and the alert confirms the change was yours. WooCommerce's logs and WordPress's cache and upgrade folders are skipped, so they don't add noise.
-
Is it safe to give Alertica access to our shop?
Yes. Alertica is agentless and read-only: it lists files and never opens, changes or deletes them. It has no access to the database where orders are kept. A read-only login is all it needs, kept encrypted with AES-256.
-
What does it cost?
Free covers one shop with a weekly scan and the site-wide security check. Pro is $20 per shop per month and runs every check daily, with SMS alerts and setup and onboarding with our team. Compare plans
-
Do I need to install a plugin?
No. Alertica connects with the SFTP or FTP login you give it and only lists files. There's no WordPress plugin, no agent on the server and nothing to update.
Check your shop before the next order
Tell us about your shop. We'll turn on WooCommerce Protection with you and go through the first scan together.