Server-Level Malware Protection.

They cover different layers, so using both makes sense for sites that need it. Cloudflare Enterprise works at the network edge and is the source of large-scale DDoS mitigation, a self-service WAF, rate limiting and AI crawler blocking. Malware Protection works on the server, where it finds and cleans malware that has already got in. The Cloudflare Enterprise add-on starts from $4.99 a month per domain and can be added separately.

The effect on site speed is designed to be negligible. The add-on works at the server level, so its scans do not run inside your application the way plugin scans do, and there is no extra plugin to load on each site. The Scan History and Proactive Defence tabs show what the add-on is doing. Speed also depends on your own app, plan and caching, so we cannot promise a specific number for every site.

Occasionally, and you have controls. The enhanced DoS protection on Cloudways Flexible tracks requests per IP address in 30-second windows and sends IPs over the limit to an anti-bot challenge. If a real visitor or a member of your team is caught, you can whitelist the IP address in the Cloudways platform. A blocked visitor may see a generic error page, so if you hear about one, contact support and we will help you check what happened.

Open a support ticket. If you have subscribed to the add-on, our support team analyzes the malware together with security analysts and cleans it manually for you. There is no charge for this cleanup, and it applies on every support plan, including the free Standard plan. Automated cleanup does the first pass, and a person steps in when an infection needs one.

Cloudways Flexible sends free malware alerts through CloudwaysBot whenever a scan detects malware. If you use the add-on, you also get a detailed report after each detection, and the dashboard lists every finding in the Malicious tab with its status, such as Cleaned or In Progress. The Scan History tab keeps earlier results, so you can look back at what was found and when, and restore a file if needed.

Open your application in the Cloudways platform, go to Application Management, then Application Security, then Malware Protection, and select Enable Protection. The add-on is off by default and works per application, so you can protect only the apps that need it. After you enable it, the dashboard shows the Malicious, Scan History and Proactive Defence tabs for that app.

Yes. Malware Protection is enabled and billed per application, so you can protect the client sites that need it and leave the others on the free Flexible baseline. Each app has its own Malicious, Scan History and Proactive Defence tabs, so you can see what happened on one specific client site. Volume pricing falls to $2 per app at 16 or more apps, with the same features at every tier.

It works with WooCommerce stores, which run on WordPress, and with Magento stores. It scans files and the database for injected malware and arbitrary redirects, then cleans what it finds automatically. It does not by itself make a store compliant with PCI DSS or any other standard, and no tool stops every attack. Keep your plugins updated and pair the add-on with a CDN WAF for traffic-level protection.

The URL Scanner checks incoming links to your site for malicious content, and the Link Sanitizer automatically cleans dangerous links to protect your visitors from harmful URLs and phishing. Both are part of the add-on, alongside phishing injection protection, which identifies and blocks phishing injection in real time. Like every layer, they reduce risk rather than remove it, and the Scan History tab records what they find.

Database protection finds malware hidden in database tables, including malicious cron jobs that attackers use as a backdoor, and cleans threats such as arbitrary redirects. It is included in every plan of the add-on at no extra cost. It covers WordPress, Joomla, Magento 1 and Magento 2 only. Many infections live in the database as well as in files, so scanning both gives you a fuller picture than file scanning alone.

RASP, short for runtime application self-protection, scans files whenever they change and is designed to block malicious code as it is injected. Proactive Defence is a second runtime layer that watches what PHP scripts do while they run and is designed to block malicious behavior. It looks at behavior rather than only known signatures. Both reduce risk, but neither catches everything, and new malware can appear before detection catches up.

The add-on works with WordPress, Magento, Joomla, Drupal, Laravel and custom PHP apps. Database scanning and protection cover WordPress, Joomla, Magento 1 and Magento 2 only, so Laravel and Drupal apps do not get database protection. Because the add-on works at the server level, it does not depend on a security plugin existing for your CMS or framework, which helps with platforms that have few plugin options.

Not for now. Malware Protection is a paid add-on for Cloudways Flexible only. Autonomous plans have their own protection: Cloudflare WAF and DDoS protection are built into every Autonomous plan. If you run apps on Flexible, you can enable Malware Protection on each application separately from the Cloudways platform, and you only pay for the apps you choose to protect.

Malware Protection is billed per application, per month. It costs $4 per app for 1 to 5 apps, $3 per app for 6 to 15 apps and $2 per app for 16 or more apps. Every tier includes the same features. The more apps you protect, the lower the price per app, which helps agencies protecting many client sites. The add-on is available for Cloudways Flexible apps.

Malware Protection is an add-on, powered by Imunify360, that works at the server level, outside your application, and inside PHP at runtime. It scans for malware, cleans what it finds automatically and sends a detailed report afterward. RASP scans files whenever they change and is designed to block malicious code as it is injected. Because it runs outside your site, it is designed so malware inside a site cannot switch it off. No tool catches everything, so support and restore options sit behind it.

No. Malware Protection finds and removes malware that has already reached a site, while a CDN WAF filters traffic before it arrives. Cloudways Flexible includes DoS protection out of the box, but protection against large DDoS attacks comes from the Cloudflare Enterprise add-on. We recommend using a CDN WAF alongside Malware Protection so you have a layer for incoming traffic and a layer for anything that gets through. Each one covers a different part of the problem.

The add-on is designed to minimize false positives, but no scanner is perfect. If you think a cleaned file was a false positive, open the Malicious tab in the Cloudways platform and restore it, either one file at a time or in bulk. Restoring a file reports the false positive automatically. The Scan History tab keeps a record of every scan, so you can check what was found and what happened next before you decide to restore anything.

It should not interfere. The add-on works at the server level, above the layer where plugins run, so the two do not compete. Many security plugins run inside the same site they protect, which means malware that gets in can try to disable them. The add-on is designed to run outside the application instead. You can keep a plugin for features you like and use both side by side, or rely on the add-on alone if you prefer fewer plugins to maintain.

Every app on Cloudways Flexible gets free malware scanning, detection and alerts, plus scheduled scans. Flexible also includes a server firewall, DoS protection, brute-force and bot protection, IP and country blocking, domain reputation checks and the vulnerability scanner at no cost. Malware Protection adds on-demand scans, automated cleanup, runtime protection, phishing injection protection, database protection and scan history. Free detection tells you about malware. The add-on is what removes it.

The Vulnerability Scanner finds weak spots, while Malware Protection deals with malware itself. The scanner uses the Patchstack database to tell you when your WordPress plugins or themes have known vulnerabilities. Malware Protection scans for malware, including malware that may have got in through such a vulnerability, and cleans it automatically. Use both: the scanner helps you close the gap, and the add-on helps clean up if something slipped through before you could update.