JayHackPro®
Get JayShield

JayHackPro® Inc. Los Angeles

Security tools built to be read.

JayHackPro is a cybersecurity company in Los Angeles. The company finds threats in real systems and builds the software that stops them, free open tools and full products alike. No telemetry. No bloat. Nothing to hide.

Try JayShield Read the source
jayshield — scansample output
$ npx @jayhackpro/jayshield scan ./public_html
JayShield v1.2.1 · scanning ./public_html
1,284 files read · 0 modified · 0.8s
 
CRITICAL uploads/07/IMG_0412.jpg      php_in_media
HIGH     wp-includes/css/.cache.php   webshell.wso
MEDIUM   themes/site/footer.php       obfuscation.b64
LOW      uploads/cache/index.php.bak  double_extension
 
4 threats · exit 1 · nothing was modified
next: jayshield quarantine ./public_html

The roadmap

A good security tool should be small enough to trust, sharp enough to matter, and readable enough to audit in an afternoon.

That sentence is the company’s roadmap. Every tool JayHackPro ships is measured against it, before any feature, any release, any line of code.

  1. Small enough to trust

    Zero dependencies. One package, one command, nothing to audit but the tool itself.

  2. Sharp enough to matter

    Five classes of threat, tuned against real WordPress, Laravel and jQuery so it flags attacks, not your code.

  3. Readable enough to audit

    MIT licensed, 54 tests, written for the person reviewing it. Read the whole thing before lunch.

Flagship JayShield®

Your site got hacked. JayShield finds what the attacker left behind.

Webshells, backdoors, injected miners, sealed in a quarantine vault without deleting a single file.

Webshells & backdoors

c99, r57 and WSO shells, eval-based droppers, remote code execution left behind after a breach.

signature + heuristic

Obfuscated payloads

Base64 chains, packed JavaScript, hidden iframes, code that works hard not to be seen.

entropy + pattern

Image polyglots

Executable PHP disguised inside PNG and JPG files, a favorite hiding spot in upload folders.

content inspection

Miners & skimmers

CoinHive-style cryptominers, session skimmers and card sniffers injected into front-end code.

pattern + domain list

Known malicious files

Ships with a hash list of known malware, including the EICAR test file. Extend it with your own.

sha-256 hash list
npx @jayhackpro/jayshield scan .
Everything JayShield does

Non-destructive by design

Nothing gets destroyed.

Malware removal that deletes files is a second incident. JayShield is non-destructive at every step, and permanent deletion only happens when you type it yourself.

  1. 01

    Scan

    Read-only. Nothing is modified, ever. Human-readable report in the terminal, machine-readable JSON for your pipeline.

    jayshield — scansample output
    $ npx @jayhackpro/jayshield scan ./public_html
JayShield v1.2.1 · scanning ./public_html
1,284 files read · 0 modified · 0.8s
 
CRITICAL uploads/07/IMG_0412.jpg      php_in_media
HIGH     wp-includes/css/.cache.php   webshell.wso
MEDIUM   themes/site/footer.php       obfuscation.b64
LOW      uploads/cache/index.php.bak  double_extension
 
4 threats · exit 1 · nothing was modified
next: jayshield quarantine ./public_html
  2. 02

    Quarantine

    Flagged files move into a sealed local vault and are neutralized. Your site keeps running while you review each finding.

    jayshield — quarantinesample output
    $ jayshield quarantine ./public_html
4 files moved to .jayshield-vault/2026-09-06T0214Z/
neutralized · chmod 000 · .quarantined
manifest.json written · sha256 recorded per file
 
site still serving · review with: jayshield list
  3. 03

    Restore

    False positive? Bring any file back with one command, byte-for-byte identical to the original.

    jayshield — restoresample output
    $ jayshield restore uploads/07/IMG_0412.jpg
sha256 verified against manifest
restored to uploads/07/IMG_0412.jpg
 
byte-for-byte identical · exit 0

v1.2.1 · MIT license · zero dependencies · Node 18+ · 54 tests · exit codes: 0 clean, 1 threats, 2 error

jayshield — scansample output
$ npx @jayhackpro/jayshield scan ./public_html
JayShield v1.2.1 · scanning ./public_html
1,284 files read · 0 modified · 0.8s
 
CRITICAL uploads/07/IMG_0412.jpg      php_in_media
HIGH     wp-includes/css/.cache.php   webshell.wso
MEDIUM   themes/site/footer.php       obfuscation.b64
LOW      uploads/cache/index.php.bak  double_extension
 
4 threats · exit 1 · nothing was modified
next: jayshield quarantine ./public_html
jayshield — quarantinesample output
$ jayshield quarantine ./public_html
4 files moved to .jayshield-vault/2026-09-06T0214Z/
neutralized · chmod 000 · .quarantined
manifest.json written · sha256 recorded per file
 
site still serving · review with: jayshield list
jayshield — restoresample output
$ jayshield restore uploads/07/IMG_0412.jpg
sha256 verified against manifest
restored to uploads/07/IMG_0412.jpg
 
byte-for-byte identical · exit 0

The company

How JayHackPro builds.

Four rules, applied to everything that ships under the JayHackPro name.

    Open where it matters

    Free tools ship with their full source, tests and license. Paid products are built and reviewed to exactly the same standard.

    01

    Zero telemetry

    The company’s tools phone home to no one, not even JayHackPro. What runs on your server stays on your server.

    02

    Minimal dependencies

    Every dependency is somebody else’s attack surface. JayShield ships with none at all.

    03

    Readable code

    An audit should take an afternoon, not a quarter. JayHackPro writes for the person reviewing the code, not just the machine.

    04

Store

Software, direct from the source.

Lifetime licenses, subscriptions, priority support and signature packs, sold directly by JayHackPro with no marketplace in between.

Visit the store
cd ~