Hack detection requires the Business plan or above.
How it works
When you enable hack detection, GhostlyX scans your site and records all third-party scripts and external resources present at that point. This becomes your baseline (the known-good state of your site). GhostlyX then monitors your site on a regular schedule. If anything new appears that was not in the baseline, an alert is sent.Threats detected
Hack detection is designed to catch:- Cryptocurrency mining scripts
- Ad injection scripts
- Malicious redirects
- Data exfiltration scripts (card skimmers, credential harvesters)
- Any other third-party script that was not present when you set up the baseline
Enabling hack detection
- Go to Settings for your site.
- Toggle Hack detection on.
- GhostlyX immediately crawls your site to create the initial baseline.
- Save settings.
Updating the baseline
When you intentionally add a new third-party script (for example, a new chat widget or analytics tool), GhostlyX will alert you on the next scan because it is not in the baseline. After confirming the script is legitimate:- Go to Settings.
- Click Re-baseline under Hack detection.
- GhostlyX re-crawls and updates the baseline to include the new script.