Piyush Asthana

<p>ActivityPilot is an activity log and audit-trail plugin for developers, agencies, and security-conscious site owners. Meaningful changes on your site — logins, content edits, plugin and theme operations, role changes, high-impact options, integrations, and more — are stored in a dedicated database table and shown in a modern admin timeline.</p>
<h4>Privacy defaults</h4>
<ul>
<li>External-service features are <strong>opt-in</strong>.</li>
<li>Geolocation (<code>ip-api.com</code>) is <strong>disabled by default</strong> (<code>enable_geo = 0</code>).</li>
<li>Outbound webhooks (Slack/Discord/Teams/custom URL) are <strong>disabled by default</strong> until you enable them and provide destination URLs.</li>
<li>The plugin does not send data to third-party services unless you explicitly enable and configure those features.</li>
</ul>
<h4>Why use this plugin?</h4>
<ul>
<li><strong>Custom tables</strong> — logs live in <code>{prefix}apwpm_activity_logs</code> (not post meta) with indexes for fast queries.</li>
<li><strong>Modern admin UI</strong> — dashboard, timeline, filters, search, pagination, exports, dark mode, and keyboard shortcuts.</li>
<li><strong>Security-first</strong> — capability checks, REST nonces, prepared SQL, output escaping, and optional sudo mode for destructive actions.</li>
<li><strong>Break detection</strong> — spots error spikes and surfaces recent risky changes.</li>
<li><strong>Extensible</strong> — REST API (<code>activitypilot/v1</code>), hooks, custom event registry, and PSR-3 adapter.</li>
</ul>
<h4>Core features</h4>
<ul>
<li>Activity logging for logins, posts, plugins, themes, users, roles, and important site options</li>
<li>Timeline view with avatars, severity colors, and structured context</li>
<li>Filters by user, action, object type, severity, date range, status, assignee, and search</li>
<li>CSV and JSON exports; daily retention pruning via cron</li>
<li>Email alerts when break detection finds unusual error activity</li>
<li>Workflow: acknowledge, resolve, snooze, assign, and comment on events</li>
<li>Smart insights: bursts, off-hours access, role escalation, and statistical spikes</li>
<li>Optional rollback for supported change types (sudo-gated)</li>
<li>Analytics heatmap, hour-of-day chart, and top users</li>
<li>Scheduled HTML digest reports (daily, weekly, monthly)</li>
<li>Multisite support with per-site tagging and network overview</li>
<li>Hash-chain integrity verification (optional)</li>
<li>File integrity monitoring, IP throttle, PII redaction, GDPR export/erase helpers</li>
<li>Integrations: WooCommerce, ACF, popular form builders, SEO plugins, page builders</li>
<li>Optional outbound webhooks (Slack, Discord, Microsoft Teams, generic URL)</li>
<li>WP-CLI: <code>wp apwpm list|count|verify|prune|purge|export|digest|scan-files</code></li>
</ul>
<h4>For developers</h4>
<p>Log custom events from your code:</p>
<pre><code>APWPM_Logger::log( array( 'action_type' => 'my_event', 'description' => 'Something happened' ) );
</code></pre>
<p>Filter hooks include <code>apwpm_skip_log</code>, <code>apwpm_pre_insert_row</code>, and <code>apwpm_register_event_types</code>. The shorter <code>ap_*</code> hook names from earlier builds are still fired for backward compatibility.</p>
<h3>External services</h3>
<p>This plugin can connect to third-party services <strong>only when you enable the related feature</strong> and, for webhooks, when you provide URLs.</p>
<h4>IP geolocation (optional)</h4>
<p>When <strong>Enable geolocation</strong> is on, the plugin may send the visitor IP address to <a href="http://ip-api.com/" rel="nofollow ugc">ip-api.com</a> to resolve country and city. No API key is required. Results are cached in WordPress transients (about 24 hours). See the <a href="https://ip-api.com/docs/legal" rel="nofollow ugc">ip-api privacy policy</a> for their terms.</p>
<ul>
<li>Data sent: IP address (in the request URL).</li>
<li>When: On log insert for events that include an IP, if geo is enabled and not already set.</li>
<li>Purpose: Display country/city on timeline rows and detect logins from new countries.</li>
</ul>
<h4>Outbound webhooks (optional)</h4>
<p>When webhooks are enabled and URLs are saved in settings, the plugin sends HTTP POST requests to <strong>your</strong> endpoints (for example Slack, Discord, Microsoft Teams, or a custom URL) when qualifying events occur.</p>
<ul>
<li>Data sent: Event title, description, severity, site name, and related metadata you configure to receive.</li>
<li>When: After an event is logged that meets your minimum severity threshold.</li>
<li>Purpose: Notify external chat or monitoring systems.</li>
<li>Services/endpoints: Slack, Discord, Microsoft Teams, or any custom HTTPS endpoint that you explicitly configure.</li>
<li>Terms/privacy (when using those services):<br />
Slack: https://slack.com/terms-of-service , https://slack.com/privacy-policy<br />
Discord: https://discord.com/terms , https://discord.com/privacy<br />
Microsoft Teams (Microsoft): https://www.microsoft.com/servicesagreement , https://privacy.microsoft.com/privacystatement</li>
</ul>
<p>Webhook delivery is fully optional and disabled by default. No webhook requests are sent until you enable webhooks and provide at least one destination URL.</p>
<p>The plugin does not include bundled third-party API keys. Geolocation and webhooks are optional and disabled by default until configured by a site administrator.</p>


ActivityPilot

Track, visualize, and analyze admin and user activity in a timeline UI with break detection, workflows, REST API, and exportable audit logs.

Krishna Kant Chourasiya

Ram Ratan Maurya

<p>Stalkfish is a no setup plugin that will monitor and log all the site activity, error and crashes without bloating your database. All the errors and activity logs are stored in your Stalfish account, and can be accessed via the Stalkfish dashboard without compromising your site privacy.</p>
<p>Unlike alternative plugins, Stalkfish does not require any configuration, and is compatible with most recent WordPress versions. We provide a dedicated monitoring system for your site, and a dashboard to view and manage activity for all your WordPress sites, in once place.</p>
<h3>Why use an activity logging and monitoring plugin?</h3>
<p>Don’t you hate it when you have no clue when something on your site changed, and you have no idea why? Stalkfish helps you keep track of all your site activity, and you can see what’s going on in a single place. This helps you locate when a particular action was performed on your site.</p>
<h3>Benefits of Stalkfish</h3>
<ul>
<li><strong>Track any activity:</strong> Stalkfish will monitor all the activities on your site, and log it to Stalkfish server with contextual data that will help you locate what has changed.</li>
<li><strong>Track errors:</strong> Stalkfish would automatically track all errors on your site and alert you as needed.</li>
<li><strong>Share event data:</strong> Easily creating public links that can be shared with others. You may set a range of expiry dates for the link, and the link will be automatically deleted after the expiry date.</li>
<li><strong>Get alerts for important events:</strong> Create contextual alerts and get notified when something specific happens on your site.</li>
<li><strong>Unlimited sites:</strong> Stalkfish gives you unlimited sites to monitor in a decent dedicated dashboard.</li>
</ul>
<h3>Get Started with Stalkfish</h3>
<p><a href="https://stalkfish.com" rel="nofollow ugc">Stalkfish</a> is a SaaS product, and we offer a free plan for personal use. You can record upto 500 events per month for free, ideal if you’re trying the plugin or using it on small sites and still feel secure.</p>
<h3>What activities are tracked?</h3>
<ul>
<li><strong>Posts, Pages and Custom Post Types</strong> – Log all the activities/events associated including metadata and custom fields</li>
<li><strong>Taxonomies</strong> – Log any and all changes from creation to attachment in posts and CPTs.</li>
<li><strong>Comments</strong> – Log all the comment updates from status changes to spamming.</li>
<li><strong>Users</strong> – Log all user logins to any profile changes.</li>
<li><strong>Media & Library</strong> – Log all the media uploads to attachment in posts and CPTs.</li>
<li><strong>Settings</strong> – Log all setting updates from general to privacy.</li>
<li><strong>Customizer</strong> – Log any and all WordPress Customizer changes including theme modifications.</li>
<li><strong>Plugins and Themes</strong> – Log all theme and plugin installations to uninstalls.</li>
<li><strong>Widgets</strong> – Log any and all sidebar changes to widget updates.</li>
<li><strong>Classic Editor and Block (Gutenberg) Editor</strong> – Log all the editor updates from post creation to deletion.</li>
<li><strong>WordPress Core Updates</strong> – Log WordPress core updates from manual to auto.</li>
<li><strong>Multisite</strong> (Coming Soon) – Log network wide site updates from adding them to removal.</li>
</ul>
<p>That’s not it! We’re working around the clock to improve your experience and add more useful activity logging.</p>
<h4>Privacy</h4>
<p>Stalkfish is a SaaS (software as a service) connector plugin that uses a custom API to log all the site activity. We only store event data on Stalkfish server which do not include any sensitive data, and we do not share your data with anyone. We do record user’s IP who performs an activity to give you a better insight of action’s origin. Respecting your privacy is our top-most priority.</p>


Stalkfish – Error Monitoring and Activity Log Monitoring

Stalkfish actively tracks error, crashes, and activity log on your WordPress site and sends them to your Stalkfish dashboard.

ActivityPilot vs Stalkfish – Error Monitoring and Activity Log Monitoring