Cybersecurity

File integrity monitoring

Watching a site's files for unexpected changes that could signal a hack.

By Nick Irmo · Updated

What File integrity monitoring means

Attackers often modify core files or slip in hidden scripts. Integrity monitoring alerts you when files change outside planned updates. Fast detection means faster cleanup and less damage.

Why it matters for your website

Hackers often hide code inside your site files to spread spam, steal data or redirect visitors. File integrity monitoring alerts you when files change unexpectedly, so you can catch a breach early. The sooner you know, the less damage to your rankings and reputation.

Example

A security plugin on a winery's WordPress site alerts the owner that a core file changed overnight. The developer finds injected spam code and cleans it before Google flags the site.

Tips

  • Turn on file change alerts in your security plugin or host.
  • Review alerts after updates so you learn what normal changes look like.
  • Keep clean backups so you can restore modified files quickly.

Common mistakes

  • Ignoring alerts because updates trigger them, then missing a real attack.
  • Monitoring core files but not themes, plugins and uploads folders.

Questions about File integrity monitoring

What is File integrity monitoring?
Watching a site's files for unexpected changes that could signal a hack.
How does file integrity monitoring detect changes?
It records a fingerprint of each file and checks it regularly. If a fingerprint changes when you did not make an update, it raises an alert.
Do I need file integrity monitoring on a static site?
The risk is lower since there is less code running on the server, but monitoring your hosting and code repository is still smart.

Tell us what the site needs to do.

Share a few details and a budget range. We reply within one business day with a plan, a platform recommendation and a fixed quote.