How HachiGuard works
A small sensor in your hosting account sends file fingerprints to HachiGuard. Analysis, clean copies and rules stay on our servers.
A small sensor in your hosting account
One small file, placed outside the public web folder and run by your hosting scheduler (cron). It contains no rules and adds nothing to your pages.
Fingerprints travel, not your data
The sensor sends fingerprints of the watched files and of administrator records. Customer data, orders and card numbers are never sent. The content of a watched code file is sent only when that file changes, so it can be analysed.
Analysis on our servers
Each change is compared with the clean baseline. Where does the payment go? Is the domain genuine or a look-alike? Does the new code look like a backdoor?
Alert, restore, report
A payment file that points to an unknown domain is restored from the clean copy and you are alerted at once. Routine changes go into the daily report.
A missed check-in is an alarm
The rules and the clean copies live on our servers, not on your site. If the sensor is deleted or disabled, it cannot happen quietly: you and we are notified.
Installation
Upload one folder to your hosting account and add one scheduled task. It takes about ten minutes, and we can do it for you. Nothing changes in your store's code or database.
Requirements
PHP 7.2 or newer, a scheduler (cron) and outgoing HTTPS. Works on cPanel, Plesk and any similar hosting, without root access.
Looks like a genuine bank domain – possible fraud
Clean file restored automatically
Put a guard on your checkout before the busy season
Activation takes one day. Every plan includes every feature.