Features in detail
Both versions find the malware and stop it from running. Pro also cleans up for you: it removes only the bad part of a file, and it fixes your GitHub repositories. Team is Pro for several people. Ordering and activation: Free, Pro and Team. Prices: pricing page.
Find it
| Feature |
What it does |
Free |
Pro |
| Scan |
checks projects and the device on demand |
yes |
yes |
| Deep and history scans |
looks in node_modules and old git commits |
yes |
yes |
| Detection |
PolinRider and 6 other families, plus general rules |
yes |
yes |
| Daily malware list |
new variants without a new release |
yes |
yes |
Stop it
| Feature |
What it does |
Free |
Pro |
| Real-time guard |
checks every new file within a second |
yes |
yes |
| Process and network checks |
finds malware that is running; Pro stops it |
alert only |
stops it |
| Quarantine and restore |
nothing is lost, everything can be put back |
no |
yes |
| Alerts with manual steps |
you are told what was found, where, and how to remove it by hand |
yes |
yes |
| Payload removal |
only the malware is cut out and your code stays |
no |
yes |
| Firewall block |
blocks the attackers’ servers |
no |
yes |
Prevent it
| Feature |
What it does |
Free |
Pro |
| Editor hardening |
no auto-run tasks, safer npm |
no |
yes |
| Pre-commit hook |
refuses commits that carry malware |
no |
yes |
| CI check |
fails a pipeline when malware is found |
no |
yes |
Clean GitHub
| Feature |
What it does |
Free |
Pro |
| Check every branch |
lists every infected branch and file |
yes |
yes |
| Guided screens |
the same, step by step |
yes |
yes |
| Fix and push |
one normal commit on each infected branch |
no |
yes |
Servers
| Feature |
What it does |
Free |
Pro |
| Server mode |
a service that starts at boot, no dialogs |
yes |
yes |
| Report-only mode |
tells you, never changes a file |
yes |
yes |
| Alerts |
log, journald and a Slack, Discord or Teams webhook |
yes |
yes |
If infected code reaches production
- A deploy writes the file. It is checked within a second.
- A clear match raises an alert with the steps to remove it. With Pro it is quarantined for you, and only the malware is cut out of a config file, so your app keeps running.
- A process with a strict malware marker raises an alert. With Pro it is stopped.
- The attackers’ servers are blocked, so nothing is sent out.
- You are told through the log and your webhook.
- One command puts any file back:
sudo pushwarden history --restore PATH.
- Before production,
scan --ci and the pre-commit hook can stop the code earlier.
What to keep in mind:
- Code already running keeps running until restarted. Restart the app after a file is removed.
- The free version changes nothing, so on a server the malware keeps running until you remove it by hand. Pro quarantines the file or cuts out only the malware. Use
--report-only if a person must approve each change.
- Server mode is for Linux and runs as root.
Keep a record
| Feature |
What it does |
| Activity history |
everything found and done, searchable |
| Team reporting |
webhook alerts, and a redacted file you send by hand |
| Updates |
the program and malware list update themselves, and roll back if needed |
| Disk cleanup |
every store has a limit |
Private by design
It is an offline defender and pushes nothing anywhere. No telemetry, no cloud scan, and your code and file names never leave the machine. It only downloads its own updates. Pro checks your key with our licence server from time to time. See Security and privacy.
Remember
- Free is free forever.
- Pro: $19.99 a month ($199.99 a year) for one device. Team: $14.99 per seat a month for 2 to 50 devices, cheaper from 5 seats. Paying for a year costs less than twelve months. Buy either on the website and extend it with
pushwarden renew. See Free, Pro and Team.
PushWarden