File baselines and malware signatures for Joomla 5 and 6

Joomla core can update the CMS and installed extensions through its update system, but it does not provide a general file-integrity baseline or a malware-signature scanner for the whole site. A template override is not the usual answer either: overrides change presentation output, not the contents of every PHP and asset file. Site owners commonly rely on hosting-provider scanners, manual comparisons with clean packages and backups, external security services, or a dedicated extension.

According to the listing, Integrity Checker goes beyond core by fingerprinting files, reporting additions, changes and deletions, and scanning content for signatures associated with webshells, backdoors, obfuscation and cryptocurrency miners. It also claims to offer quarantine, exclusions, reports and scan history. The listing says the free download provides manual scans and five recent history entries; scheduled scans, email alerts and other additions are part of Pro at €22 per site per year.

This is aimed at administrators of Joomla sites where unauthorised file changes need investigation, particularly agencies or teams managing several sites. A small, rarely changed site with dependable hosting security, backups and manual checks may have little reason to add another security layer.

Before installing, note that the directory lists GOUINEAU as the developer, places it in the integrity checker section, and shows no reviews. The listing says Joomla 5 and 6 are supported and PHP 8.1 or newer is required. It does not explain false-positive handling, signature-update arrangements, scan resource use, quarantine recovery, or how a trustworthy initial baseline is established.

Listed on the Joomla Extensions Directory.