Start today, in the way that fits your site.

1. 1

   Download the plugin

   Save the zip file from the button below (free, no sign-up).

2. 2

   Upload it to WordPress

   In the admin, go to Plugins → Add New → Upload Plugin, choose the zip and click Install Now.

3. 3

   Activate

   Click Activate. The recommended settings apply straight away.

4. 4

   Check the result

   Run the free check again to confirm the improvement.

It makes no external calls and collects no data. It does not replace PHP or WordPress updates, so always apply them.

1. 1

   Run the free check

   See where you stand and keep the result.

2. 2

   Copy the request

   Copy the text below and send it to your web agency or host.

3. 3

   Confirm the fix

   Run the free check again once they are done.

Hello,
Could you please check and, where needed, update the following for our website?

1. PHP and WordPress (or our CMS) are on the latest patched versions
   (including the critical PHP flaws CVE-2026-109618 / 109619 disclosed in October 2026)
2. Version numbers are hidden from public responses
3. Security headers are set (HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy)
4. Access to the admin / login page is restricted, or two-factor authentication is enabled

Please let us know whether you can do this, and the expected cost and timing.

You can also set up Cloudflare (free plan) yourself. If that sounds daunting, the Clinic Care Pack does it for you.

1. 1

   Add the SDK

   Add it to a TypeScript project such as Next.js (npm release coming soon; contact us for early access).

2. 2

   Create keys

   Generate the recipient key pair (ML-KEM-768 + X25519) and keep the private key yourself.

3. 3

   Encrypt before saving

   Encrypt only the sensitive fields in the browser before they are stored.

import { generateHybridKeyPair, encryptFields } from '@quantum-ai-safeguard/sdk';
import { nobleProvider } from '@quantum-ai-safeguard/sdk/noble';

const kp = await generateHybridKeyPair(nobleProvider); // 秘密鍵は自社で保管
const row = await encryptFields(nobleProvider, kp.publicKey,
  { id: 'r1', note: '既往歴：なし' }, ['note'],
  { kid: 'k1', table: 'visits', rowId: 'r1' });
// → supabase.from('visits').insert(row)  データベースには暗号文だけが残る

Prefer us to do it? Order “SDK integration” (¥1,000).