Is this product sold separately?
Yes. This is an individual OmegaWebApps product priced at US$89 one-time. It is not sold as a required suite or subscription.
PURE HTML · VERSION 2.0.1 · INDIVIDUAL PRODUCT
Omega Security Engine Pro
Separate OmegaWebApps commercial product: This product is sold and installed independently for customer websites. It is distinct from the integrated engine components used within the Omega Web Pro website-generation and quality pipeline.
Local file integrity, malware/virus scanning, vaults, IP controls and static-site hardening.
A standalone local-first security engine built specifically for Pure HTML/static hosting. It replaces WordPress-only concepts with static-site equivalents instead of fabricating CMS functionality that does not exist.
OmegaWebApps product distinction: This is a separately sold, separately installed OmegaWebApps commercial product for customer websites. It is not the integrated engine component used internally within the Omega Web Pro website-generation pipeline at omegawebpro.com.
US$89one-time · lifetime licence for the purchased version · unlimited sites
Sold separately. No subscription or recurring licence fee. Stripe checkout. Product terms apply.
PURCHASE FAQ
Key commercial questions before checkout.
How many websites can I use the purchased version on?
The commercial offer provides a lifetime licence for the purchased version for unlimited websites/client sites, subject to the Terms & Licence and applicable open-source rights.
Does the core engine require a cloud account?
No. The product is designed around local/server-side operation for its core functions. Third-party hosting, browsers and platform components still behave according to their own environments.
Are results guaranteed?
No. The engine provides the functions described on this page, but outcomes such as rankings, page-speed scores, security immunity, browser metrics or universal compatibility depend on factors outside the software itself.
DOCUMENTATION
Installation, setup, features, troubleshooting and support.
The product documentation expands the operational details on this commercial page, including installation, configuration, feature use, troubleshooting and support guidance.
WHO IT IS FOR
Designed for website owners, developers and agencies who want direct control.
Omega Security Engine Pro is intended for operators who want a focused specialist engine for Pure HTML / Static Website rather than an all-in-one subscription platform. The licence model makes the purchased version suitable for repeated use across the buyer’s own and client sites, while the product remains independently installable and separately sold.
TECHNICAL BOUNDARIES
Clear limits are part of a serious commercial specification.
- No security scanner can guarantee detection of every threat or prove a finding is malicious without review.
- Nginx ignores .htaccess; equivalent hardening rules require server configuration.
- Email DNS audits depend on publicly resolvable DNS records and correct domain/selector configuration.
LOCAL-FIRST ARCHITECTURE
Your engine runs where your website runs.
The core functions described on this page are designed to operate locally on the customer website/server rather than requiring an OmegaWebApps cloud processing subscription. This reduces dependency on remote processing services and keeps operational state under the website owner’s control, subject to the hosting/platform environment.
SAFETY & CONTROL MODEL
Built to make high-impact actions deliberate.
Scanner findings are indicators requiring administrator review.
No automatic scanner deletion/overwrite.
Quarantine is explicit.
Vaulted files are stored non-executably with SHA-256 evidence.
Root .htaccess changes are managed and backed up.
Dedicated authentication, CSRF validation and throttling protect dashboard actions.
OPERATING WORKFLOW
From installation to production use.
- Extract at public_html and open /omega-security-engine/.
- Create the dedicated Omega administrator.
- Review Hardening and apply/refresh protection rules appropriate to the server.
- Run File Integrity once to establish the trusted baseline.
- Run Quick scans first, then Full or single-file scans as needed.
- Review every finding before quarantine.
- Use File/Malware/Virus Vault controls for restore, mark-safe or deletion decisions.
- Manage IP allow/block lists where required.
- Review security logs and the runtime, URL, message/browser and DNS audits.
DETAILED FUNCTION SPECIFICATION
Technical depth for buyers who want to know exactly what they are purchasing.
Core processing & operation
- Private One-Page Security Dashboard: Central authenticated administration for hardening, integrity, scanners, vaults, IP controls, logs and audits.
- Dedicated Omega Login Protection: Uses a dedicated administrator account, secure sessions and dashboard login throttling because a static site has no CMS login surface.
- File Integrity Baseline: Creates trusted hashes/state for local files so later scans can identify added, changed or removed files.
- Integrity Change Review: Shows integrity differences for administrator review rather than silently overwriting changed files.
- Trusted Backup Creation: Maintains backup material used by integrity recovery workflows where available.
- Restore Changed File: Restores an integrity-tracked file from its trusted backup when the operator chooses.
- Mark File Safe: Accepts a reviewed changed file as trusted without forcing restoration.
- Accept File Removal: Allows a deliberately removed file to be accepted so it no longer remains an unresolved integrity finding.
- File Vault Quarantine: Moves selected integrity/problem files into protected non-executable vault storage.
- Quick Malware Scan: Runs a bounded/high-priority malware indicator scan for faster review.
- Full Malware Scan: Scans the broader site file set for configured PHP/malware indicators.
- Single-File Malware Scan: Allows a specific file to be checked independently.
- Quick Virus Scan: Runs the engine’s quick virus-indicator workflow.
Management, automation & diagnostics
- Full Virus Scan: Runs the complete virus-indicator workflow across eligible local files.
- Single-File Virus Scan: Allows a chosen file to be checked with the virus scanner.
- Explicit Quarantine: Scanner findings are never automatically deleted; quarantine occurs only after an administrator action.
- File Vault Management: Lists vaulted integrity/files with restore, mark-safe, delete-file and delete-record operations as applicable.
- Malware Vault Management: Separate malware vault records and file operations for quarantined scanner findings.
- Virus Vault Management: Separate virus vault records and file operations for quarantined virus findings.
- SHA-256 Vault Integrity Data: Vault records retain cryptographic hash evidence for stored content.
- Non-Executable Vault Storage: Quarantined files are stored as .bin under web-denied protected data storage.
- IP Block Manager: Adds validated IP addresses to the local block list and allows later unblocking.
- IP Allow Manager: Adds trusted IP addresses to an allow list and supports removal.
- Root .htaccess Hardening: Writes a delimited managed hardening block to the site root after backing up the previous rules.
- Install / Refresh Protection Rules: Allows hardening protection rules to be applied/refreshed independently from scanner activity.
- HTTPS Redirect Option: Optional redirect policy for Apache/LiteSpeed sites.
Safety, integration & lifecycle
- Security Headers: Managed response-header hardening options for supported Apache/LiteSpeed hosting.
- Dotfile & Sensitive-File Protection: Blocks direct web access to common hidden/sensitive file patterns through server rules.
- Directory Index Protection: Reduces directory-listing exposure through managed server rules.
- Security Logs: Records administrative/security events locally for review.
- Runtime / Site Delivery Audit: Analyzes site delivery/security behavior and configuration signals.
- URL Structure Analysis: Examines URL structure/signals for potentially risky or suspicious patterns.
- Phishing / Message Signal Analysis: Analyzes supplied message/content signals for phishing-like indicators as a diagnostic aid.
- Browser Capability Audit: Reports relevant browser/user-agent capability/security signals for diagnostic purposes.
- SPF DNS Audit: Checks SPF-related DNS evidence for the configured email domain.
- DMARC DNS Audit: Checks DMARC-related DNS evidence.
- DKIM DNS Audit: Checks DKIM-related DNS evidence where the expected selector/configuration can be evaluated.
- Local Protected State: Stores security state, vaults and logs under web-denied engine data directories.
- No Required Cloud Scanner: Core scans, integrity, vault and hardening operations run locally without a mandatory external scanning API or telemetry service.
COMPLETE COMMERCIAL CAPABILITY MAP
Every meaningful customer-facing capability in this 2.0.1 engine.
This section maps the implemented product functions into buyer-facing capabilities. Internal helper methods are not exposed as marketing clutter; the real operations, controls, workflows and safeguards they implement are represented below.
Private One-Page Security Dashboard
Central authenticated administration for hardening, integrity, scanners, vaults, IP controls, logs and audits.
Dedicated Omega Login Protection
Uses a dedicated administrator account, secure sessions and dashboard login throttling because a static site has no CMS login surface.
File Integrity Baseline
Creates trusted hashes/state for local files so later scans can identify added, changed or removed files.
Integrity Change Review
Shows integrity differences for administrator review rather than silently overwriting changed files.
Trusted Backup Creation
Maintains backup material used by integrity recovery workflows where available.
Restore Changed File
Restores an integrity-tracked file from its trusted backup when the operator chooses.
Mark File Safe
Accepts a reviewed changed file as trusted without forcing restoration.
Accept File Removal
Allows a deliberately removed file to be accepted so it no longer remains an unresolved integrity finding.
File Vault Quarantine
Moves selected integrity/problem files into protected non-executable vault storage.
Quick Malware Scan
Runs a bounded/high-priority malware indicator scan for faster review.
Full Malware Scan
Scans the broader site file set for configured PHP/malware indicators.
Single-File Malware Scan
Allows a specific file to be checked independently.
Quick Virus Scan
Runs the engine’s quick virus-indicator workflow.
Full Virus Scan
Runs the complete virus-indicator workflow across eligible local files.
Single-File Virus Scan
Allows a chosen file to be checked with the virus scanner.
Explicit Quarantine
Scanner findings are never automatically deleted; quarantine occurs only after an administrator action.
File Vault Management
Lists vaulted integrity/files with restore, mark-safe, delete-file and delete-record operations as applicable.
Malware Vault Management
Separate malware vault records and file operations for quarantined scanner findings.
Virus Vault Management
Separate virus vault records and file operations for quarantined virus findings.
SHA-256 Vault Integrity Data
Vault records retain cryptographic hash evidence for stored content.
Non-Executable Vault Storage
Quarantined files are stored as .bin under web-denied protected data storage.
IP Block Manager
Adds validated IP addresses to the local block list and allows later unblocking.
IP Allow Manager
Adds trusted IP addresses to an allow list and supports removal.
Root .htaccess Hardening
Writes a delimited managed hardening block to the site root after backing up the previous rules.
Install / Refresh Protection Rules
Allows hardening protection rules to be applied/refreshed independently from scanner activity.
HTTPS Redirect Option
Optional redirect policy for Apache/LiteSpeed sites.
Security Headers
Managed response-header hardening options for supported Apache/LiteSpeed hosting.
Dotfile & Sensitive-File Protection
Blocks direct web access to common hidden/sensitive file patterns through server rules.
Directory Index Protection
Reduces directory-listing exposure through managed server rules.
Security Logs
Records administrative/security events locally for review.
Runtime / Site Delivery Audit
Analyzes site delivery/security behavior and configuration signals.
URL Structure Analysis
Examines URL structure/signals for potentially risky or suspicious patterns.
Phishing / Message Signal Analysis
Analyzes supplied message/content signals for phishing-like indicators as a diagnostic aid.
Browser Capability Audit
Reports relevant browser/user-agent capability/security signals for diagnostic purposes.
SPF DNS Audit
Checks SPF-related DNS evidence for the configured email domain.
DMARC DNS Audit
Checks DMARC-related DNS evidence.
DKIM DNS Audit
Checks DKIM-related DNS evidence where the expected selector/configuration can be evaluated.
Local Protected State
Stores security state, vaults and logs under web-denied engine data directories.
No Required Cloud Scanner
Core scans, integrity, vault and hardening operations run locally without a mandatory external scanning API or telemetry service.
PRODUCT OVERVIEW
What Omega Security Engine Pro is built to do.
A standalone local-first security administration engine for static websites, combining integrity monitoring, malware/virus indicator scanning, three protected vault workflows, IP management, .htaccess hardening and a broad set of site/delivery/security diagnostics.
COMMERCIAL LICENCE
One product. One-time payment. Clear version scope.
US$89 one-time
No recurring licence charge for continued use of the purchased version.
Lifetime use of purchased version
Future major versions are not automatically promised unless expressly included in the offer.
Unlimited sites
Use is subject to the Terms & Licence and any open-source rights that apply to covered components.
Need the other platform edition or a different specialist engine?
Compare all ten products by platform, job, safety model and technical boundaries.