Skip to content
Magento 2 extension · Security

Store Guardian

Know when something important changes on your Magento store.

  • Files, admin, orders, cron and security in one place
  • Plain-language findings with next steps
  • Email alerts and a daily digest
  • Admin only: nothing added to your storefront
Price
US$99.99
Version
1.0.0
Status
Coming soon
Store Guardian dashboard: store status 'Something needs attention now', findings by urgency (2 critical, 32 warning, 87 notice) and a list of what needs attention

Why it matters

Most store problems are noticed by customers first.

A file changes after a deployment, cron quietly stops, a new admin account appears, payments start failing at 2am. Magento doesn't tell you. You find out from a customer or a drop in sales. Store Guardian watches for the changes that matter and tells you in plain language, with what to check next.

Features

What Store Guardian does

One screen that says what needs attention

The dashboard leads with your store's status and groups findings by urgency: Critical, Warning, Notice. Routine records stay out of the way, and lower-severity items can be cleared in one click.

Store status card reading 'Something needs attention now' above a findings-by-urgency bar with 2 critical, 32 warning and 87 notice findings

Every finding explains itself

Open any finding to see what happened, why it matters and a recommended next step, including the exact command where one helps. Then Acknowledge it, Resolve it, or Re-check whether the condition is still there.

Event Details for 'Admin panel is using the default path' with a recommended investigation, details panel and history of earlier occurrences

Security checks Magento doesn't run for you

Store Guardian flags shared admin logins, the default admin URL, database dump files left in public folders, and (if you turn it on) suspicious content in CMS pages, blocks and email templates.

Security & Integrity list filtered to the Security category, showing Default Admin Path findings with status, location, occurrences and dates

A full timeline you can filter

Every finding is recorded with severity, category, type, status, location and time. Filter by any of them, or bulk-acknowledge and resolve many findings at once.

Store Guardian Timeline listing cron and protected-file findings with severity, category, type, status, summary, location and dates

Planned changes don't cause false alarms

Declare an Expected Change Window before a deployment and activity in those paths is recorded without full-severity alerts. Windows also open and close automatically with Magento's maintenance mode.

Expected Change Windows list with active windows for app/code and app/design and two expired manual windows

Email when it matters, a digest for the rest

Warning and Critical findings are emailed within minutes. Everything else arrives as one daily digest at the time you choose. Pick the recipients and the store email identity it's sent from.

Notifications settings: send email notifications, recipient email addresses, email sender and daily digest time

What it watches

Six areas, checked around the clock

File checks run every 5 minutes, health and activity checks every 10 minutes, security checks daily or whenever you press Scan Now.

  • Admin and store changes

    New or disabled admin users, role changes, configuration edits, product status, mass updates and price changes.

  • Files and integrity

    Files created, changed or deleted in protected folders, suspicious executable files, mass deletions and critical files removed.

  • Customer activity

    Unusual spikes in registrations or password resets, compared with your store's own normal pattern.

  • Orders and payments

    Order submission and payment failures, one by one and as unusual failure rates.

  • System health

    Cron jobs failing or not running, indexers stuck as invalid, and maintenance mode switching on or off.

  • Security settings

    Shared admin logins, the default admin path, exposed SQL dump files and (optional) suspicious database content.

Screenshots

See it on real stores

Real screenshots from Magento 2.4.9 test stores. Click any image to enlarge it.

How it works

Live in three steps

  1. Install

    Add the module with Composer and run setup:upgrade. It works with any storefront theme because it only lives in the admin.

  2. Set who gets alerts

    Open Stores › Configuration › MageEnv › Store Guardian, add recipient emails and choose the daily digest time.

  3. Review and resolve

    Check the dashboard, open a finding, follow the recommended next step, then acknowledge or resolve it.

What Store Guardian is, and isn't

It's an early-warning layer that tells you when something worth your attention happens. It doesn't replace your other security tools.

It is

  • A change-detection and awareness tool
  • A single place to review store activity
  • A guide to what to check next
  • A record of what was found and resolved

It isn't

  • Antivirus or a malware remover
  • A web application firewall
  • A vulnerability scanner or patch replacement
  • DDoS protection or a guarantee against compromise

Compatibility

Works with your stack

We only claim what we've tested. Where something is expected to work but wasn't tested, we say so.

Store Guardian compatibility
PlatformSupportNotes
Magento Open Source 2.4.9 Verified
Magento Open Source 2.4.7 – 2.4.8 Allowed by Composer, not tested yet
Adobe Commerce 2.4.x Not tested yet
PHP 8.3 Verified
PHP 8.4, 8.5 Code checked for compatibility, not tested on a live store
Storefront theme Any Admin only: Luma, Hyvä or custom themes are not affected
Magento cron Required Checks and email alerts run on Magento's cron

Installation

Install with Composer

After you buy, the Adobe Commerce Marketplace gives you access keys for repo.magento.com. Then run:

  1. Core module

    composer require mageenv/module-store-guardian
  2. Enable it

    bin/magento setup:upgrade && bin/magento cache:flush

    In production mode, also run setup:di:compile and setup:static-content:deploy.

FAQ

Questions merchants ask

Is Store Guardian an antivirus or malware scanner?

No. It tells you when something important changes or goes wrong on your store, so you can look at it quickly. It doesn't remove malware, block attacks or scan for known vulnerabilities. Use it alongside those tools, not instead of them.

Will it slow down my store?

It adds nothing to your storefront pages. Most checks run in the background on Magento's cron, and it listens to a few events such as admin saves, orders and customer registrations without changing what they do.

What happens during a deployment?

Create an Expected Change Window for the paths you're changing. Activity there is still recorded but isn't treated as a full-severity alert. If you use Magento's maintenance mode, a window opens and closes automatically.

Will I get flooded with emails?

No. Only Warning and Critical findings are emailed right away. Everything else is collected into one daily digest. A condition that keeps happening updates the same open finding instead of creating duplicates.

Does it need Magento cron?

Yes. The scheduled checks and email notifications run on Magento's cron. Store Guardian will also tell you if cron stops running.

Does old data pile up?

No. Scheduled cleanup jobs remove old records so the history doesn't grow without limit.

Does it work with Hyvä?

Yes. Store Guardian only adds admin screens, so it works the same whatever storefront theme you use.

Changelog

Release history

  1. v1.0.0 Latest
    • Dashboard with store status, findings by urgency and resolved history
    • Timeline with filters and bulk Acknowledge and Resolve
    • Event and Incident details with Acknowledge, Resolve and Re-check
    • Security & Integrity checks
    • Expected Change Windows, linked to maintenance mode
    • Real-time email alerts and a daily digest
    • Detectors for files, admin activity, customer activity, payments and system health
    • Scheduled data retention cleanup

Documentation

A full PDF user guide covers installation, every screen, what each finding means and a quick-start checklist. It's included with your purchase.

Support

Email support from the developers who wrote the code. We reply within 1 business day. info@mageenv.com