Malware & virus scanning
Detect and report malicious files with configured scanning providers.
The CR Shield surface
Protection with a clear point of view
From application discovery to audited response, every capability is designed to make security operations easier to understand and safer to run.
File integrity scanning
Detect unexpected changes to protected files and application baselines.
File & folder monitoring
Monitor selected application paths for security-relevant activity.
Persistence detection
Identify startup hooks, scheduled tasks, services, and persistence mechanisms.
REST API protection
Detect suspicious API abuse and protect application endpoints.
Bots & scanner detection
Detect automated scanners, abusive bots, and reconnaissance traffic.
Domain reputation
Monitor outbound email and domain reputation signals.
Email notifications
Deliver security alerts and operational notifications by email.
Real-time protection
Enable continuous agent monitoring and event-driven protection.
Scheduled scans
Run recurring filesystem and application scans on protected servers.
Server health monitoring
Collect authenticated health, resource, and heartbeat telemetry.
IP blocking
Queue controlled IP block and release actions through the agent.
Country access controls
Apply country allow and deny policies locally on protected servers.
Confidence-gated automatic blocking
Policy-controlled automatic blocking after detector confidence checks.
ClamAV scanning
Use the ClamAV command-line engine for malware scanning.
ClamD scanning
Use the ClamAV daemon for lower-latency repeated scans.
YARA rules
Evaluate files against approved YARA detection rules.
CloudRevol AI analysis
Use the configured CloudRevol AI endpoint for opted-in analysis.
Microsoft Defender
Use Microsoft Defender integration on supported Windows agents.
CrowdSec intelligence
Ingest CrowdSec decisions and bouncer health from protected servers.
Application scanning profiles
Scan supported WordPress, PHP, Node.js, Java, Python, and other application stacks.
Agent deployment automation
Generate tenant-scoped installers and manage protected server enrollment.
Advanced integrations
Connect approved notification, reputation, and security integrations.
Long-term reporting
Retain and generate extended security reports and historical trends.
Application patching
Run approved, policy-controlled application security patch workflows.
OS security patching
Apply security-only operating system patches through the agent.
Kernel livepatch
Use supported live kernel patching without an immediate reboot.
Remote agent uninstall
Allow an authenticated agent to securely remove CR Shield from a customer server.
Need a tailored answer?
Let’s map the right protection for your stack.
Tell us about your applications, server sizes, and response requirements. CloudRevol can recommend the right plan and rollout path.