Commercial malware & exploit scanner for cPanel/WHM — a modern, more advanced alternative to ConfigServer eXploit Scanner (cxs) and Imunify360.
MegaWit Shield detects and removes malware the moment it lands: real-time on-access scanning, automatic clean-up, WordPress & database protection, and runtime blocking of malicious PHP. Everything ConfigServer eXploit Scanner did — plus auto-disinfection, cloud threat intelligence and a full WHM dashboard.
On-access (inotify) detection catches malware the instant a file is written or uploaded.
Removes injected code in place and keeps your legitimate content — every clean is reversible.
Blocks execution of known-malicious PHP at runtime, even before removal.
Rejects malicious uploads via ModSecurity before they ever touch disk.
Signature engine, ClamAV and a network-effect cloud feed for known-bad hashes.
Core-integrity checks against official checksums plus MySQL/WordPress injection scanning.
Statistics, events, per-account view and a cPanel end-user plugin — in 5 languages.
Email, Slack & Telegram — instant or daily digest, with license-expiry reminders.
One license per server, activate from the panel (no SSH), auto-updating agent.
Runs on CentOS 7+, CloudLinux, AlmaLinux, Rocky, Ubuntu & Debian. 15-day free trial on first install.