A Closer Look at Jetpack Scan
Automattic's Jetpack team has released Jetpack Scan, a security tool that examines your site's files for anything suspicious. It doesn't just alert you to problems though; with a single click, it can also automatically fix what it finds.
Automated security scanning is valuable precisely because manual oversight isn't enough anymore. For long-time WordPress users, the threat isn't hypothetical: a single unauthorized edit to something like wp-config.php can take down a site entirely. A tweak to a theme file like single.php can inject spam into every post template on the site, and a compromised plugin can do just about anything. Continuous monitoring that flags foul play is an essential layer of protection.
There is significant reassurance in having Automattic—the company behind WordPress itself—perform these daily checks. Since the scans come as a paid service, Jetpack and Automattic both have a direct stake in its efficacy.
For those familiar with the previous generation of security plugins, Jetpack Scan marks a natural evolution from VaultPress. Notably, scans and backups are now managed from a new dashboard at Jetpack.com itself. Currently, this dashboard is being rolled out to new customers of Jetpack Scan and Backup, with access for all existing customers expected shortly.
The feature is another step in Jetpack's broader shift toward a more à la carte pricing model. Instead of bundling every cloud ability into one expansive plan, functions like backups, content delivery networks, instant search, related posts, or automatic plugin updates are sold individually or in targeted groupings. With Jetpack Scan, you can pay solely for security scanning without subsidizing the suite's other features.
For users interested in the new offering, Jetpack is currently running an introductory promotion at $7 per month or $70 per year. Further details on the release are available in the official announcement post.
