Overview

MuRu Guard installs like a standard Joomla extension and runs directly inside the Joomla Administrator area. It uses Joomla's built-in authentication and permission system, so there is no separate scanner URL, access key, or publicly accessible file that needs to be removed after installation.

The scanner checks the entire Joomla website for real-world compromise indicators and attack patterns, including exploitation of the SP Page Builder uploadCustomIcon vulnerability, suspicious JCE paths, Joomla core entry-point tampering, unauthorized or rogue Super Users, malicious database payloads, and other indicators commonly associated with compromised Joomla websites.

MuRu Guard supports Joomla 3 through the latest Joomla releases, with a dedicated Joomla 3 Pro version available for older Joomla installations.

Detecting a compromise is only the first step. MuRu Guard also provides the tools needed to respond and protect the website, including a live request-blocking plugin, scheduled security scans with results that can be delivered directly to your team's chat, and a Smart AI Assistant that can open and analyze flagged files, explain suspicious code or behavior, and generate a proposed fix.

For additional safety, the Smart AI Assistant is restricted from modifying Joomla core files or MuRu Guard's own code, helping keep the security system itself protected while assisting with investigation and remediation.