Piyush Asthana

ActivityPilot is an activity log and audit-trail plugin for developers, agencies, and security-conscious site owners. Meaningful changes on your site — logins, content edits, plugin and theme operations, role changes, high-impact options, integrations, and more — are stored in a dedicated database table and shown in a modern admin timeline.
<h4>Privacy defaults</h4>
<ul>
<li>External-service features are opt-in.</li>
<li>Geolocation (<code>ip-api.com</code>) is disabled by default (<code>enable_geo = 0</code>).</li>
<li>Outbound webhooks (Slack/Discord/Teams/custom URL) are disabled by default until you enable them and provide destination URLs.</li>
<li>The plugin does not send data to third-party services unless you explicitly enable and configure those features.</li>
</ul>
<h4>Why use this plugin?</h4>
<ul>
<li>Custom tables — logs live in <code>{prefix}apwpm_activity_logs</code> (not post meta) with indexes for fast queries.</li>
<li>Modern admin UI — dashboard, timeline, filters, search, pagination, exports, dark mode, and keyboard shortcuts.</li>
<li>Security-first — capability checks, REST nonces, prepared SQL, output escaping, and optional sudo mode for destructive actions.</li>
<li>Break detection — spots error spikes and surfaces recent risky changes.</li>
<li>Extensible — REST API (<code>activitypilot/v1</code>), hooks, custom event registry, and PSR-3 adapter.</li>
</ul>
<h4>Core features</h4>
<ul>
<li>Activity logging for logins, posts, plugins, themes, users, roles, and important site options</li>
<li>Timeline view with avatars, severity colors, and structured context</li>
<li>Filters by user, action, object type, severity, date range, status, assignee, and search</li>
<li>CSV and JSON exports; daily retention pruning via cron</li>
<li>Email alerts when break detection finds unusual error activity</li>
<li>Workflow: acknowledge, resolve, snooze, assign, and comment on events</li>
<li>Smart insights: bursts, off-hours access, role escalation, and statistical spikes</li>
<li>Optional rollback for supported change types (sudo-gated)</li>
<li>Analytics heatmap, hour-of-day chart, and top users</li>
<li>Scheduled HTML digest reports (daily, weekly, monthly)</li>
<li>Multisite support with per-site tagging and network overview</li>
<li>Hash-chain integrity verification (optional)</li>
<li>File integrity monitoring, IP throttle, PII redaction, GDPR export/erase helpers</li>
<li>Integrations: WooCommerce, ACF, popular form builders, SEO plugins, page builders</li>
<li>Optional outbound webhooks (Slack, Discord, Microsoft Teams, generic URL)</li>
<li>WP-CLI: <code>wp apwpm list|count|verify|prune|purge|export|digest|scan-files</code></li>
</ul>
<h4>For developers</h4>
Log custom events from your code:
<pre><code>APWPM_Logger::log( array( 'action_type' => 'my_event', 'description' => 'Something happened' ) );
</code></pre>
Filter hooks include <code>apwpm_skip_log</code>, <code>apwpm_pre_insert_row</code>, and <code>apwpm_register_event_types</code>. The shorter <code>ap_*</code> hook names from earlier builds are still fired for backward compatibility.
<h3>External services</h3>
This plugin can connect to third-party services only when you enable the related feature and, for webhooks, when you provide URLs.
<h4>IP geolocation (optional)</h4>
When Enable geolocation is on, the plugin may send the visitor IP address to <a href="http://ip-api.com/" rel="nofollow ugc">ip-api.com</a> to resolve country and city. No API key is required. Results are cached in WordPress transients (about 24 hours). See the <a href="https://ip-api.com/docs/legal" rel="nofollow ugc">ip-api privacy policy</a> for their terms.
<ul>
<li>Data sent: IP address (in the request URL).</li>
<li>When: On log insert for events that include an IP, if geo is enabled and not already set.</li>
<li>Purpose: Display country/city on timeline rows and detect logins from new countries.</li>
</ul>
<h4>Outbound webhooks (optional)</h4>
When webhooks are enabled and URLs are saved in settings, the plugin sends HTTP POST requests to your endpoints (for example Slack, Discord, Microsoft Teams, or a custom URL) when qualifying events occur.
<ul>
<li>Data sent: Event title, description, severity, site name, and related metadata you configure to receive.</li>
<li>When: After an event is logged that meets your minimum severity threshold.</li>
<li>Purpose: Notify external chat or monitoring systems.</li>
<li>Services/endpoints: Slack, Discord, Microsoft Teams, or any custom HTTPS endpoint that you explicitly configure.</li>
<li>Terms/privacy (when using those services): 
Slack: https://slack.com/terms-of-service , https://slack.com/privacy-policy 
Discord: https://discord.com/terms , https://discord.com/privacy 
Microsoft Teams (Microsoft): https://www.microsoft.com/servicesagreement , https://privacy.microsoft.com/privacystatement</li>
</ul>
Webhook delivery is fully optional and disabled by default. No webhook requests are sent until you enable webhooks and provide at least one destination URL.
The plugin does not include bundled third-party API keys. Geolocation and webhooks are optional and disabled by default until configured by a site administrator.

ActivityPilot

Track, visualize, and analyze admin and user activity in a timeline UI with break detection, workflows, REST API, and exportable audit logs.

Jewel Theme

Liton Arefin

Pixar Labs

<h4>Adminify Activity Logs: Free WordPress User Activity Log</h4>
Adminify Activity Logs records every change made inside the WordPress dashboard. Who did what, when, and from which IP. Built for site owners and agencies who want a clean audit trail without paying for a premium tier or installing a heavy security suite. Everything in this readme is in the free plugin. No locked filters, no upsell modal, no nag screens.
➡️ <a href="https://wpadminify.com/activity-logs?&utm_source=wordpressorg&utm_medium=readme&utm_campaign=adminify-activity-logs" rel="nofollow ugc">Explore More</a> | 📖 <a href="https://wpadminify.com/docs/activity-logs/al-installation?utm_source=wordpressorg&utm_medium=readme&utm_campaign=adminify-activity-logs" rel="nofollow ugc">Documentation</a> | 💬 <a href="https://wordpress.org/support/plugin/adminify-activity-logs/" rel="ugc">Support</a>
Why run a WordPress activity log
If you don’t know who deactivated that plugin or deleted that post, you can’t tell a mistake from a security incident. Activity logs answer who-did-what-when. Any WordPress site with more than one person in the dashboard eventually needs one. Agency builds, membership sites, and multi-author blogs all run into the same problem: someone made a change, nobody owns up, and you spend an afternoon working out what happened. An audit trail saves that afternoon.
<h4>What Adminify Activity Logs does that the others don’t</h4>
<ul>
<li><a href="https://wpadminify.com/activity-logs?utm_source=wordpressorg&utm_medium=readme&utm_campaign=adminify-activity-logs" rel="nofollow ugc">Free with no Pro tier upsell</a>: Every filter, every retention setting, and every detail view ships in the free plugin. Other activity log plugins lock IP tracking or longer retention behind a paid plan.</li>
<li><a href="https://wpadminify.com/activity-logs?utm_source=wordpressorg&utm_medium=readme&utm_campaign=adminify-activity-logs" rel="nofollow ugc">Real-time logging</a>: Activities appear in the log as soon as they happen. No cron, no batch delay.</li>
<li><a href="https://wpadminify.com/activity-logs?utm_source=wordpressorg&utm_medium=readme&utm_campaign=adminify-activity-logs" rel="nofollow ugc">IP address tracking</a>: Each entry records the source IP. Useful when you’re investigating a login or a change you didn’t expect.</li>
<li><a href="https://wpadminify.com/activity-logs?utm_source=wordpressorg&utm_medium=readme&utm_campaign=adminify-activity-logs" rel="nofollow ugc">Time, role, user, component, and action filters</a>: Narrow the log by time frame (today, yesterday, week, month), user role, specific user, WordPress component (Post, Plugin, Theme, etc.), or action type (Updated, Deleted, Activated).</li>
<li><a href="https://wpadminify.com/activity-logs?utm_source=wordpressorg&utm_medium=readme&utm_campaign=adminify-activity-logs" rel="nofollow ugc">Configurable retention</a>: Default is 30 days. Bump it up if you need a longer compliance window. Bring it down if database size is tight.</li>
<li><a href="https://wpadminify.com/activity-logs?utm_source=wordpressorg&utm_medium=readme&utm_campaign=adminify-activity-logs" rel="nofollow ugc">Searchable records</a>: Find a specific change by user, action, or keyword without scrolling.</li>
<li><a href="https://wpadminify.com/activity-logs?utm_source=wordpressorg&utm_medium=readme&utm_campaign=adminify-activity-logs" rel="nofollow ugc">Multisite compatible</a>: Works across WordPress network installations.</li>
<li><a href="https://wpadminify.com/activity-logs?utm_source=wordpressorg&utm_medium=readme&utm_campaign=adminify-activity-logs" rel="nofollow ugc">Built by Pixar Labs</a>: Same team that ships WP Adminify, Admin Bar Editor, Master Addons, and Loginfy.</li>
</ul>
<h4>Detailed Feature Breakdown</h4>
What gets logged for every entry
<ul>
<li>Date: Timestamp when the action happened.</li>
<li>Author: Username of the person who did it.</li>
<li>IP Address: Source IP for location tracking.</li>
<li>Type: Category of the action (post update, plugin installation, etc.).</li>
<li>Label: Short description of the activity.</li>
<li>Action: Specific operation (edited, deleted, added, etc.).</li>
<li>Description: Detailed explanation of the activity.</li>
<li>Delete control: Remove individual log entries with one click.</li>
</ul>
Time-frame filters
<ul>
<li>All time</li>
<li>Today</li>
<li>Yesterday</li>
<li>Week</li>
<li>Month</li>
</ul>
Role-based filters
View activities by user role: Administrator, Editor, Author, Contributor, Subscriber, Customer, Shop Manager, Guest, plus any custom roles registered on the site.
User filters
<ul>
<li>All users</li>
<li>Specific users (select individual users to track)</li>
</ul>
Component filters
Track activities tied to specific WordPress components:
<ul>
<li>Attachments</li>
<li>Comments</li>
<li>Options</li>
<li>Plugin</li>
<li>Post</li>
<li>Taxonomy</li>
<li>Theme</li>
<li>User</li>
</ul>
Action types tracked
<ul>
<li>Activated</li>
<li>Added</li>
<li>Approved</li>
<li>Created</li>
<li>Deactivated</li>
<li>Deleted</li>
<li>Installed</li>
<li>Trashed</li>
<li>Unapproved</li>
<li>Updated</li>
</ul>
Configuration options
<ul>
<li>Data Retention: Adjust the “Data Store for” value (default 30 days).</li>
<li>Search & Filter: Filter logs by user, action, or keyword via the search bar.</li>
</ul>
Common use cases
<ul>
<li>Security investigation: Spot unauthorized access attempts and unusual activity.</li>
<li>Accountability: Know who did what and when across the site.</li>
<li>Troubleshooting: Trace recent changes when something breaks.</li>
<li>Compliance: Keep an audit trail for regulatory requirements (GDPR, HIPAA, internal policy).</li>
<li>Team transparency: Track contributions across multi-author sites.</li>
<li>Disaster recovery: See what changed in the hours before a problem occurred.</li>
</ul>
<a href="https://wpadminify.com/activity-logs?utm_source=wordpressorg&utm_medium=readme&utm_campaign=adminify-activity-logs" rel="nofollow ugc">⚡ Upgrade to Adminify Pro</a> to get the full Adminify Pro suite. 60+ admin customization features beyond activity logging: white labeling, menu editor, dashboard widgets, login customizer.

Adminify Activity Log & Audit Trail

Track every change in your WordPress dashboard. Free user activity log with role, time, component, and action filters. No setup, no paid tier.

ActivityPilot vs Adminify Activity Log & Audit Trail