gotmls.net

What It Is

GotMLS (Get Off Those Maliciously Loaded Scripts) is an anti-malware plugin for WordPress, designed to help WordPress administrators clean infected files and malicious scripts from compromised sites. According to the main text, it grew out of the developer’s own experience cleaning hacked hosting accounts and is still under active development.

Core Capabilities and Deployment

Based on the available information, its protection model is more focused on “post-infection scanning and cleanup” than full perimeter protection or a WAF. The plugin can be installed and run inside WordPress, where it detects infected files and performs repairs. In comment replies, the developer also notes that the plugin creates backups of changes, allowing users to undo modifications from quarantine. The site provides instant updates to new threat definition files to address newly discovered threats. For management and alerting, the main text does not disclose enterprise features such as a centralized console, email alerts, SIEM/API integrations, or similar capabilities.

Pricing and Service

Pricing is a clear advantage: the plugin is currently completely free. The developer states that the project requires ongoing effort to remove new threats and patch new vulnerabilities, and therefore asks users for donations. The main text does not specify fixed plans, commercial licensing, payment methods, SLAs, or enterprise support pricing. Some users in the comments mention receiving long-term email communication and assistance, suggesting active personalized support, but this is not the same as a standardized enterprise service commitment.

Pros and Cons

Its strengths are low deployment friction, a clear focus on WordPress infection cleanup, free availability, definition file updates, and a quarantine rollback mechanism. For small and mid-sized site owners, it can be valuable in emergencies. The drawbacks are also clear: the project is still described as a work in progress; it lacks compliance certifications, centralized management, integrations, and enterprise-grade operations information; and there has been negative feedback in the comments about files becoming 0 bytes after cleanup and causing site failures. Although the developer says restoration is possible from backups, users should still fully back up the site and database before running automatic repairs.

Who It’s For and Access from China

It is better suited to individual site owners, small business WordPress sites, and emergency investigation and cleanup after a malware infection. It should not be used as the sole security system for large organizations. The main text does not provide information about access from China, and payment methods are also unknown. If access or support proves unstable, alternatives such as Wordfence, Sucuri, or MalCare can be evaluated, or it can be combined with domestic cloud security, host security, and WAF products as substitutes or supplements.