Ironlatch Security Scanner 0.1.0 · Comparison updated October 20, 2026
Ironlatch Security Scanner vs Custonis.
Custonis checks whether exposed WordPress files can be opened over HTTP, with soft-404 handling. Ironlatch Security Scanner only lists suspect filenames on your server, but it also covers malware, file integrity, logins and traffic.
Need to know if a file is publicly reachable? Custonis tests that over HTTP and is on WordPress.org. Ironlatch Security Scanner doesn't test it and isn't on WordPress.org yet.
What each plugin covers
| Area | Custonis 1.1.7 | Ironlatch Security Scanner 0.1.0 |
|---|---|---|
| Public backup and log checks | Available; finds backup files, debug logs, and config copies. Source | Lists log, backup and config-like filenames from local folders. It does not open them. |
| HTTP and soft-404 validation | Available per its release notes, including soft-404 handling. Source | None. It makes no request to test whether a file is publicly reachable. |
| Scan history and exposure age | Available per its listing. Source | Keeps the latest inventory only. |
| Database health checks | Available for large tables, autoload size, transients, and revisions. Source | None. |
| Firewall, login, malware, vulnerabilities | Not claimed as product features in the reviewed listing. Source | Included: traffic controls, login protection, a local malware scan, file integrity and optional vulnerability lookups. |
| External services and MCP | Local scans; listing says no external API calls. Source | WordPress.org for checksums. WPVulnerability, Pwned Passwords and MCP only after you turn them on. |
Method and disclosure: AmazingPlugins makes Ironlatch Security Scanner. Custonis claims are from its WordPress.org listing and release notes, reviewed September 28, 2026. In a local WordPress fixture, Custonis 1.1.7 found dummy public log and SQL files, then stopped reporting the log after it was removed. Ironlatch Security Scanner entries describe version 0.1.0. We haven't compared the two on an HTTPS or CDN setup. This page doesn't claim one scanner is more accurate.
Which one fits
If your main worry is a backup or log that visitors can download, Custonis answers that directly. Ironlatch Security Scanner's inventory tells you which files to check with your host, but a filename alone doesn't prove the file is reachable or sensitive.
If you want hardening checks, a malware scan, file integrity, login protection and traffic controls in one plugin, see the Ironlatch Security Scanner product page. For practical steps on any site, see the WordPress security checklist.