WPlend VS DeckCipher

WPlend's answer

Every archive is verified automatically after upload, and the results are public. The scanner calculates SHA-256, SHA-1 and MD5 checksums, scans every file with ClamAV, runs a PHP syntax check (php -l) and compares the declared plugin/theme version with the product page. Each product page shows a “Verified package” block with a link to the full scan report, so buyers can check the downloaded file with sha256sum. The core scanner is open source: github.com/wplend/wp-zip-check.

WPlend's answer

Transparency. Instead of just saying “clean files”, WPlend publishes the scan report, checksums and PHP version used for every archive, and checks run again for every new version. Product pages clearly state what is not included (developer license keys, developer support, one-click dashboard updates). Pricing is simple: $5.99 per product or a one-time membership with no auto-renewal, plus a 30-day defect refund.

WPlend's answer

WordPress freelancers, small agencies and site owners who use premium plugins and themes on several sites, including client projects, and want to know exactly what file they are installing.

WPlend's answer

WPlend started as a store of GPL WordPress plugins and themes. The common problem in this niche is trust: buyers can’t tell whether a file is original or modified. To solve it, WPlend built an automated verification pipeline (ClamAV, php -l, version match, published checksums), published its review methodology, and released the core scanner as an open-source tool anyone can run on any plugin or theme ZIP.

WPlend's answer

WordPress, WooCommerce, PHP, ClamAV, Stripe