Piyush Asthana

<p>ActivityPilot is an activity log and audit-trail plugin for developers, agencies, and security-conscious site owners. Meaningful changes on your site — logins, content edits, plugin and theme operations, role changes, high-impact options, integrations, and more — are stored in a dedicated database table and shown in a modern admin timeline.</p>
<h4>Privacy defaults</h4>
<ul>
<li>External-service features are <strong>opt-in</strong>.</li>
<li>Geolocation (<code>ip-api.com</code>) is <strong>disabled by default</strong> (<code>enable_geo = 0</code>).</li>
<li>Outbound webhooks (Slack/Discord/Teams/custom URL) are <strong>disabled by default</strong> until you enable them and provide destination URLs.</li>
<li>The plugin does not send data to third-party services unless you explicitly enable and configure those features.</li>
</ul>
<h4>Why use this plugin?</h4>
<ul>
<li><strong>Custom tables</strong> — logs live in <code>{prefix}apwpm_activity_logs</code> (not post meta) with indexes for fast queries.</li>
<li><strong>Modern admin UI</strong> — dashboard, timeline, filters, search, pagination, exports, dark mode, and keyboard shortcuts.</li>
<li><strong>Security-first</strong> — capability checks, REST nonces, prepared SQL, output escaping, and optional sudo mode for destructive actions.</li>
<li><strong>Break detection</strong> — spots error spikes and surfaces recent risky changes.</li>
<li><strong>Extensible</strong> — REST API (<code>activitypilot/v1</code>), hooks, custom event registry, and PSR-3 adapter.</li>
</ul>
<h4>Core features</h4>
<ul>
<li>Activity logging for logins, posts, plugins, themes, users, roles, and important site options</li>
<li>Timeline view with avatars, severity colors, and structured context</li>
<li>Filters by user, action, object type, severity, date range, status, assignee, and search</li>
<li>CSV and JSON exports; daily retention pruning via cron</li>
<li>Email alerts when break detection finds unusual error activity</li>
<li>Workflow: acknowledge, resolve, snooze, assign, and comment on events</li>
<li>Smart insights: bursts, off-hours access, role escalation, and statistical spikes</li>
<li>Optional rollback for supported change types (sudo-gated)</li>
<li>Analytics heatmap, hour-of-day chart, and top users</li>
<li>Scheduled HTML digest reports (daily, weekly, monthly)</li>
<li>Multisite support with per-site tagging and network overview</li>
<li>Hash-chain integrity verification (optional)</li>
<li>File integrity monitoring, IP throttle, PII redaction, GDPR export/erase helpers</li>
<li>Integrations: WooCommerce, ACF, popular form builders, SEO plugins, page builders</li>
<li>Optional outbound webhooks (Slack, Discord, Microsoft Teams, generic URL)</li>
<li>WP-CLI: <code>wp apwpm list|count|verify|prune|purge|export|digest|scan-files</code></li>
</ul>
<h4>For developers</h4>
<p>Log custom events from your code:</p>
<pre><code>APWPM_Logger::log( array( 'action_type' => 'my_event', 'description' => 'Something happened' ) );
</code></pre>
<p>Filter hooks include <code>apwpm_skip_log</code>, <code>apwpm_pre_insert_row</code>, and <code>apwpm_register_event_types</code>. The shorter <code>ap_*</code> hook names from earlier builds are still fired for backward compatibility.</p>
<h3>External services</h3>
<p>This plugin can connect to third-party services <strong>only when you enable the related feature</strong> and, for webhooks, when you provide URLs.</p>
<h4>IP geolocation (optional)</h4>
<p>When <strong>Enable geolocation</strong> is on, the plugin may send the visitor IP address to <a href="http://ip-api.com/" rel="nofollow ugc">ip-api.com</a> to resolve country and city. No API key is required. Results are cached in WordPress transients (about 24 hours). See the <a href="https://ip-api.com/docs/legal" rel="nofollow ugc">ip-api privacy policy</a> for their terms.</p>
<ul>
<li>Data sent: IP address (in the request URL).</li>
<li>When: On log insert for events that include an IP, if geo is enabled and not already set.</li>
<li>Purpose: Display country/city on timeline rows and detect logins from new countries.</li>
</ul>
<h4>Outbound webhooks (optional)</h4>
<p>When webhooks are enabled and URLs are saved in settings, the plugin sends HTTP POST requests to <strong>your</strong> endpoints (for example Slack, Discord, Microsoft Teams, or a custom URL) when qualifying events occur.</p>
<ul>
<li>Data sent: Event title, description, severity, site name, and related metadata you configure to receive.</li>
<li>When: After an event is logged that meets your minimum severity threshold.</li>
<li>Purpose: Notify external chat or monitoring systems.</li>
<li>Services/endpoints: Slack, Discord, Microsoft Teams, or any custom HTTPS endpoint that you explicitly configure.</li>
<li>Terms/privacy (when using those services):<br />
Slack: https://slack.com/terms-of-service , https://slack.com/privacy-policy<br />
Discord: https://discord.com/terms , https://discord.com/privacy<br />
Microsoft Teams (Microsoft): https://www.microsoft.com/servicesagreement , https://privacy.microsoft.com/privacystatement</li>
</ul>
<p>Webhook delivery is fully optional and disabled by default. No webhook requests are sent until you enable webhooks and provide at least one destination URL.</p>
<p>The plugin does not include bundled third-party API keys. Geolocation and webhooks are optional and disabled by default until configured by a site administrator.</p>


ActivityPilot

Track, visualize, and analyze admin and user activity in a timeline UI with break detection, workflows, REST API, and exportable audit logs.

WPWhiteSecurity

Melapress

robertabela

<h3>Monitor activity on your WordPress sites and get clear insights into what’s happening with detailed user and event logging.</h3>
<p>Keep <a href="https://melapress.com/wordpress-activity-log/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wsal" rel="nofollow ugc">WordPress logs</a> of everything that happens on your sites and multisite networks with WP Activity Log instantly, without writing a line of code.</p>
<ul>
<li><strong>Easily detect suspicious activity</strong> on your WordPress site before it escalates</li>
<li><strong>Record failed login attempts</strong> to detect potential security breaches and strengthen site protection</li>
<li><strong>Track user logins and logouts</strong> to ensure SLAs are consistently met</li>
<li><strong>Monitor user activity and productivity</strong> to boost accountability</li>
<li><strong>Know exactly what all your users are doing</strong> in real time</li>
<li><strong>Know what happened before an outage</strong> for faster, easier troubleshooting</li>
<li><strong>Ensure compliance with regulations and standards</strong> like GDPR and PCI DSS</li>
<li><strong>Better manage & organize your site and users</strong> for smoother operations</li>
<li><strong>Simple setup</strong> ensures you start benefiting quickly and easily</li>
</ul>
<p>WP Activity Log is a complete logging solution, helping hundreds of thousands of administrators and security professionals track changes on their websites thanks to real-time user activity monitoring.</p>
<p>💎 Need more extensive features? Unlock advanced reporting, exports/mirroring, session management, and real-time alerts with <a href="https://melapress.com/wordpress-activity-log/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wsal" rel="nofollow ugc">WP Activity Log premium or enterprise</a>.</p>
<span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/pgFEMIvKFTA?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span>
<h3>What WordPress changes WP Activity Log tracks</h3>
<p>A website activity log is important for improving troubleshooting, compliance, user management, and security.<br />
Get WP Activity Log and keep track of events on your site. The log not only tells you that a post, a user profile, or an object was updated, it also lets you know exactly what changed, when, and includes a user log (by whom), so you always have the information you need.</p>
<p>Below is a summary of the changes that the plugin can keep a record of:</p>
<ul>
<li>
<p><strong>Post, page, and custom post type changes</strong>: Status, content changes, title, URL, custom field, and other metadata changes</p>
</li>
<li>
<p><strong>Tags and category changes</strong>: Creating, modifying, deleting, and adding/removing them from posts</p>
</li>
<li>
<p><strong>Widget and menu changes</strong>: Creating, modifying, or deleting them</p>
</li>
<li>
<p><strong>User changes</strong>: User created or registered, deleted, or added to a site on multisite network</p>
</li>
<li>
<p><strong>User profile changes</strong>: Password, email, display name, and role changes</p>
</li>
<li>
<p><strong>Access logging</strong>: User login, logout, failed logins, and terminating other sessions</p>
</li>
<li>
<p><strong>WordPress core and settings changes</strong>: Installed updates, permalinks, default role, URL, and other site-wide changes</p>
</li>
<li>
<p><strong>WordPress multisite network changes</strong>: Adding, deleting, or archiving sites, adding or removing users from sites, etc.</p>
</li>
<li>
<p><strong>Plugin and Theme changes</strong>: Installing, activating, deactivating, uninstalling, and updating</p>
</li>
<li>
<p><strong>WordPress database changes</strong>: When a plugin adds or removes a table</p>
</li>
<li>
<p><strong>Third-party plugin changes</strong>: WooCommerce Stores & products, Yoast SEO, RankMath, Termly, WPForms, Gravity Forms, Advanced Custom Fields (ACF), MainWP, ManageWP, WP Umbrella, and other popular WordPress plugins</p>
</li>
<li>
<p><strong>WordPress site file changes</strong>: New files added, or existing files modified or deleted.</p>
</li>
</ul>
<h4>Event details recorded</h4>
<p>Detailed event logging ensures that for every event that the plugin records, it reports the:</p>
<ul>
<li>Date & time (and milliseconds) of when it happened</li>
<li>User & role of the user who did the change</li>
<li>Source IP address from where the change happened</li>
<li>The object on which the change has taken place</li>
</ul>
<p>Refer to <a href="https://melapress.com/support/kb/wp-activity-log-list-event-ids/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal" rel="nofollow ugc">WordPress activity log event IDs</a> for a complete list of all the changes WP Activity Log can keep a record of and a detailed explanation of what change every event ID represents.</p>
<h3>💎 Upgrade to WP Activity Log Premium and get even more</h3>
<p>The premium edition of WP Activity Log takes WordPress user activity tracking to the next level. It comes bundled with even more features, including log mirroring, enterprise-grade support, user session management, and much more!</p>
<h4>Premium features list</h4>
<ul>
<li><strong>See who is logged in</strong> and monitor their current activities in real-time</li>
<li><strong>Log off any user</strong> at the click of a button</li>
<li><strong>Generate fully-configurable HTML and CSV reports</strong> for easy data analysis</li>
<li><strong>Receive email, SMS, and Slack notifications</strong> for important changes (fully configurable)</li>
<li><strong>Use search filters</strong> to fine-tune results and find what you need in seconds</li>
<li><strong>Store the activity logs in an external database</strong> to enhance security and scalability</li>
<li><strong>Mirror the activity log</strong> to log management systems such as AWS CloudWatch, Loggly, Papertrail, and others in real-time</li>
<li><strong>Mirror the logs to business communication systems</strong> like Slack</li>
<li><strong>Send a copy of your website’s activity log</strong> to a log file on your web server</li>
<li><strong>Archive old activity log data</strong> to another database for improved storage and log management</li>
<li><strong>Add notes to activity log entries</strong> for better context and internal documentation</li>
</ul>
<p>Refer to the <a href="https://melapress.com/wordpress-activity-log/features/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wsal" rel="nofollow ugc">WP Activity Log plugin features and benefits page</a> to learn more about the benefits of upgrading to WP Activity Log Premium.</p>
<h3>🔌 WP Activity Log third-party plugin support</h3>
<p>All WP Activity Log editions include activity tracking for third-party plugins, including (in alphabetical order):</p>
<ul>
<li><strong>Advanced Custom Fields (ACF)</strong> – Log changes to post types, taxonomies, and taxonomy terms</li>
<li><strong>bbPress</strong> – Track changes to forums, topics, and bbPress settings</li>
<li><strong>Gravity Forms</strong> – Track changes to Gravity Forms settings, forms, and entries (leads)</li>
<li><strong>LearnDash</strong> – Track changes to courses, lessons, and other system changes, as well as student activity such as course, lesson, and quiz enrollments and completions.</li>
<li><strong>MemberPress</strong> – Log changes to plugin settings, memberships, payments, subscriptions, and other actions</li>
<li><strong>Multisite & management tools</strong> – Track changes across your network for <strong>MainWP, ManageWP, Modular DS, Infinite WP, WP Umbrella, WP Remote</strong>, and other multisite management plugins</li>
<li><strong>Paid Membership Pro</strong> – Log changes to membership levels, user assignments, and more. Premium users can also track order and checkout activity, and access a Members Activity panel inside each member’s profile for instant visibility into recent actions.</li>
<li><strong>RankMath</strong> – Log changes to RankMath settings, SEO configurations, and on-page SEO edits</li>
<li><strong>Redirection</strong> – Keep a log of changes to redirections and redirection groups</li>
<li><strong>Termly</strong> – Log changes to Termly settings and configurations</li>
<li><strong>WooCommerce</strong> – Keep a log of changes to store settings, orders, products, coupons, and more</li>
<li><strong>WPForms</strong> – Log changes to WPForms settings, forms, form files, and entries (leads)</li>
<li><strong>Yoast SEO</strong> – Track changes to Yoast SEO settings and on-page SEO in the Yoast SEO meta box</li>
</ul>
<h3>Extra Features for Enhanced Monitoring and Management</h3>
<p>Both free and premium editions of WP Activity Log include a number of non-logging specific features that make the plugin a complete WordPress monitoring solution. Here is what is included:</p>
<h4>Free</h4>
<ul>
<li><strong>Built-in support for reverse proxies and web application firewalls</strong></li>
<li><strong>Integration with WhatIsMyIpAddress.com</strong> – get all information about an IP address with a single click</li>
<li><strong>Limit who can view the WordPress activity log</strong> by users or roles</li>
<li><strong>Enable or disable individual event IDs</strong> from the activity log</li>
<li><strong>Configurable dashboard widget</strong> highlighting the most recent critical activity</li>
<li><strong>Configurable WordPress activity log retention policies</strong></li>
<li><strong>Display user avatars</strong> in events for better recognizability</li>
<li><strong>And much more!</strong></li>
</ul>
<h4>Premium</h4>
<p>Everything that’s included in the Free edition, plus:</p>
<ul>
<li><strong>Full WordPress multisite support</strong></li>
<li><strong>Create custom alerts & notifications</strong> to monitor additional functionality</li>
<li><strong>Import and export plugin settings</strong></li>
<li><strong>Real-time activity log</strong> visible in the WordPress admin toolbar</li>
<li><strong>And much more!</strong></li>
</ul>
<h3>🛠️ Free and premium plugin support</h3>
<p>If you encounter any issues with the free edition of WP Activity Log, you can post and get help on the <a href="https://wordpress.org/support/plugin/wp-security-audit-log/" rel="ugc">WordPress.org support forums</a>. You can also find more technical information and plugin documentation on the <a href="https://melapress.com/support/kb/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal" rel="nofollow ugc">Melapress knowledge base</a>.</p>
<p>Premium plugins include a full year of free updates and dedicated one-to-one premium email support. This means you get direct access to our support team who will assist you with any questions or issues related to the plugins.</p>
<h3>As featured on:</h3>
<ul>
<li><a href="https://kinsta.com/blog/wordpress-activity-log/" rel="nofollow ugc">Kinsta</a></li>
<li><a href="https://pagely.com/blog/2015/01/log-wordpress-dashboard-activity-improved-security-auditing/" rel="nofollow ugc">Pagely</a></li>
<li><a href="https://www.shoutmeloud.com/wordpress-security-audit-log.html" rel="nofollow ugc">Shout Me Loud</a></li>
<li><a href="https://thedevcouple.com/wp-security-audit-log-review/" rel="nofollow ugc">The Dev Couple</a></li>
<li><a href="http://www.wpkube.com/improve-wordpress-security-wp-security-audit-log/" rel="nofollow ugc">WPKube</a></li>
<li><a href="https://www.techwibe.com/wp-security-audit-log-wordpress-plugin/" rel="nofollow ugc">Techwibe</a></li>
<li><a href="https://tidyrepo.com/wp-security-audit-log-wordpress-activity-log/" rel="nofollow ugc">Tidy Repo</a></li>
<li><a href="http://www.kitploit.com/2016/10/wp-security-audit-log-ultimate.html" rel="nofollow ugc">KitPloit</a></li>
<li>and many others.</li>
</ul>
<h3>MAINTAINED & SUPPORTED BY MELAPRESS</h3>
<p>Melapress develops high-quality WordPress management and security plugins such as Melapress Login Security, WP 2FA, and Melapress Role Editor.</p>
<p>Browse our list of <a href="https://melapress.com/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal" rel="nofollow ugc">WordPress security and administration plugins</a> to see how our plugins can help you better manage and improve the security and administration of your WordPress websites and users.</p>
<h3>Installing WP Activity Log</h3>
<h3>Install WP Activity Log from within WordPress</h3>
<ol>
<li>Visit ‘Plugins > Add New’</li>
<li>Search for ‘WP Activity Log’</li>
<li>Install and activate the WP Activity Log plugin</li>
<li>Allow or skip diagnostic tracking</li>
</ol>
<h3>Install WP Activity Log manually</h3>
<ol>
<li>Extract the plugin ZIP file and upload it to the <code>/wp-content/plugins/</code> directory</li>
<li>Activate the WP Activity Log plugin from the ‘Plugins’ menu in WordPress</li>
<li>Allow or skip diagnostic tracking</li>
</ol>


WP Activity Log

The plugin logs just about anything you might need in WP. The free version has enough features to fit the needs for a simple setup where you might want to have basic monitoring on the site. The premium version is excellent with integration options for CloudWatch on AWS which allow for consolidated log management when running the plugin across a number of sites. The dev team is also super helpful and responsive! 

Great plugin and great integrations!

The plugin has been excellent.  It gives us the data we need to track usage.  Even more than that is the phenomenal service they provide. Highly recommended. 

Great Plugin and Support

Thanks, it helps me a lot to track user activity. 

Detail Orientated


If you are willing to pay for the premium version then you have an awesome plugin (probably the best of breed).



BUT the version in the repository lacks even the basic functionality (e.g. search) needed for it to be useful.


Free version is useless

Easy to use


Active support, prompt response time, and attention to detail.



Functionality is great, however, there is an excessive amount of "purchase me" links that clutter the admin menu.


Active support, prompt response time, and attention to detail.


They answered quickly and offered a solution that was directly applicable to my situation.


Prompt, efficient, professional support.


Outstanding plugin with fabulous support. 


Breath of Fresh Air


I work for a marketing company and am in charge of keeping all of our contracted sites up to date, in doing so we also need to track who is doing what, where, and when... this plugin does exactly that.



Futhermore, I had an slight issue today, the support team literally had a fix to me within minutes.  Wish all plugin devs were like you folks :)



Thank you very much!


Excellent Tracking and Support


Really useful solution and great support!


Great solution!


Someone must not have thought the update with the email summaries through, what about people who use this on a global scale. Perhaps 100s of websites all now emailing them ever single week. The feature is nice, the implementation is shockingly short sighted. 


Ill advised update


Because my previous review was removed I am adding this one. You still get one star. Bad decisions guys.


Re-Review


Works pretty well.



It has been a lifesaver when my users accidentally break things. Helped me quickly identify issues and take action. 



Highly recommended for keeping track of changes and maintaining control over your site! Nice you can "hide it" from other users.


Perfect! A Must-Have!

The #1 user-rated activity log plugin for event logging, activity monitoring and change tracking.

ActivityPilot vs WP Activity Log